Stop bots flooding your OpenCart Returns (RMA) form, even when reCAPTCHA isn’t enough.

This extension protects:
• index.php?route=account/return/add

Key Features
• Force Login for Returns
Only logged-in customers can access and submit the returns form. This alone eliminates most automated spam.
• Layered Bot Protection
• Honeypot field trap
• Minimum time-to-submit check (blocks instant submissions)
• JavaScript interaction flag (blocks many basic scripts)
• Session nonce to reduce replay abuse
• Order Validation (Real Customer Checks)
• Ensures the Order ID belongs to the logged-in customer
• Ensures email matches the order email
• Blocks invalid submissions and logs attempts
• Logging
• Writes blocked attempts to :system/storage/logs/vm_return_antispam.log