Jump to content

Recommended Posts

Use captcha capasha..... dang I NEVER can spell this word right. Its the box with the letters and numbers in it. Make them type in the words to the capasha image. As long as the image has alot of background noise to make it dificult for bots to pull out the numerals and letters you should be a lil effective.

My method of 'captcha' is to create an input field hidden via

 

<code>

 

<div style="display:none">

<input type="text" name="email" />

</div>

 

If "email" has a value, you know it's a bot. Bots can't tell if a field is hidden or not.

 

Just name your actual "email" field something else.

those captcha ting is not useful i believe.. maybe you can try this allow the user to email you once in one day .. but this will only work for members of the site..

 

track ip address and allow that ip to send once.(not accurate for dial up connection) etc..

 

or use cookie or session that will determine how many times they sent an email

I Like the cookie and session ideal also. It would sure help to cookie the lil biggers respocible set to live till the end of time. that may slow it down a bit but all they have to do to destroy the session or cookie is run windowss washer on windows.... and crankdestroy on linux. Another thing that might help is to break away from naming your inputs traditionaly. I know this may be a pain for some developer down the road.......... but if the spamming is that big of an issues its something to try.

OK, everybody.  Just about anything would be an improvement over what I'm using, so maybe a relatively simple step up would do.  Also, please remember that I am not a techie, so I need some actual code.  I googled captcha and there appear to be lots of versions out there.  Can anyone recommend one they are using?

 

Really, really, a novice!

Easiest captcha in the world?

 

What is 10+2 <input type="text" name="cap_answer" />

 

 

Code:

<?php

if($_POST['cap_answer'] != "12")
{
    // Bad bot, go away and/or redirect to form.
}
else
{
   // Process the form
}

?>

 

Far from foolproof, but again, it works. You can use many different methods or just pick up one of the many captcha libraries around and use them.

 

On a side note, I've yet to have a bot manage to actually spam my form with the hidden (via the style of the element it's nested int) input field. If you actually hide the input field itself, I can see that being easier to decypher.

 

In the end, an image captcha is the most generally secure method of bot-avoidance. Pick one and run with it.

This thread is more than a year old. Please don't revive it unless you have something important to add.

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.