ludekcerny

User-agent: *
Disallow: /wp-admin/
Allow: /wp-admin/admin-ajax.php
Sitemap: https://XXXXXXXXXXXXXXXXXXX/sitemap_index.xml

ludekcerny

<?php
/**
 * Check if a select field used for selecting differend recipients from the form match the allowed destination domain
 * Prevention of spam abuse of the form with publickly visible / manipulable destination address (eg. via browser developer tools) 
 */

add_action( 'elementor_pro/forms/validation/select', function( $field, $record, $ajax_handler ) {

        $allowed_form_name = "xxx"; // your Elementor form name
        $allowed_domain = "example.com";