I would like to disable access to specific profiles via their public URL, while still allowing HTML snippet access, i.e. I'd like to allow POST only. Is this possible?
We have fake spam contacts entering our database from https://secure.wildsight.ca/civicrm/profile/create?gid=56&reset=1. This profile is only used via HTML snippet on our other website and there is no need for it be available at this URL.
Disabling use of the profile for Standalone Form or Directory prevents any submissions from the snippet. ReCaptcha doesn't seem to be preventing these submissions.