jonniejoejonson Posted November 3, 2009 Share Posted November 3, 2009 I am looking to create my own captcha alternative... however to do this i would like to know how a user is able to autofill in a form to begin with. If you were to create a flash button that called a javascript function to submit the form details, could a user automate the clcicking of the flash button? regards to any responders J Quote Link to comment https://forums.phpfreaks.com/topic/180112-captcha-alternative/ Share on other sites More sharing options...
PFMaBiSmAd Posted November 3, 2009 Share Posted November 3, 2009 Data is posted directly to the form processing code, which is why anything you do on the form page with javascript has no effect. Quote Link to comment https://forums.phpfreaks.com/topic/180112-captcha-alternative/#findComment-950154 Share on other sites More sharing options...
jonniejoejonson Posted November 3, 2009 Author Share Posted November 3, 2009 Hey thanks... However I was going to store a secret variable to be posted with the form inside the flash button... Therefore I could see that if the form was submitted by the pressing of the flash button... if it wasn't then I would know that the form was created by a bot... My question is can a bot detect a flash button on a page and then automate the submitting of the flash button? I know that if i keep pressing the tab key on my keyboard I will eventually have the flash button highlighted so i'd imageing that it would be possible for a bot to then simply automate the submittion once highlighted? regards J Quote Link to comment https://forums.phpfreaks.com/topic/180112-captcha-alternative/#findComment-950160 Share on other sites More sharing options...
PFMaBiSmAd Posted November 3, 2009 Share Posted November 3, 2009 My question is can a bot detect a flash button on a page and then automate the submitting of the flash button? Yes, of course. Anything a web server outputs can be read by a script. Do a "view source" of your form in your browser and that is what a script sees when it requests your page. Anything that is directly output or anything that appears as a link on that page can be used by a script. Quote Link to comment https://forums.phpfreaks.com/topic/180112-captcha-alternative/#findComment-950167 Share on other sites More sharing options...
jonniejoejonson Posted November 3, 2009 Author Share Posted November 3, 2009 Thanks again... however a flash btn is contained within a flash swf file, which is embeded in the html... therefore a bot could read that there is flash swf embedded in the page, however it can't read the flash itself. Quote Link to comment https://forums.phpfreaks.com/topic/180112-captcha-alternative/#findComment-950172 Share on other sites More sharing options...
PFMaBiSmAd Posted November 3, 2009 Share Posted November 3, 2009 however it can't read the flash itself Yes, it could. The swf file can be fetched (that is how the browser gets it.) The raw contents of the file can then be parsed by a script. Quote Link to comment https://forums.phpfreaks.com/topic/180112-captcha-alternative/#findComment-950192 Share on other sites More sharing options...
jonniejoejonson Posted November 3, 2009 Author Share Posted November 3, 2009 OKay so would you just use captcha? or is there any other way? regards J Quote Link to comment https://forums.phpfreaks.com/topic/180112-captcha-alternative/#findComment-950278 Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.