Re: Contact-Form was hacked????

Matthias Dieke wrote:

> Froms Philipps last-week-mail:
> 
> We could add the simple hidden by css field trick which catches at least 
> the robots but not the human spammers. Or is that one already obsolete?
> 
> How to do this?

The form has a field which is hidden by using CSS. In general spammers 
use automated scripts to post spam via contact forms. Such a script is 
unable to tell wether a field is hidden by ccs or not. As soon as the 
hidden field is filled in, the spam trap is triggered, because a human 
would not even have seen it. Very simple but effective.

> What do you think about a auto-generated picture? I don't know the right
> name now for this. You can find this on many sites. When you like to
> register you have to type in the letters and nummbers from the
> auto-generated picture. So we have some protection for the robots.

These images are called captchas (Completely Automated Public Turing 
Test to Tell Computers and Humans Apart). In general I don't like turing 
test with user interaction because they minimise usability. And we won't 
need them as long as the trick described above works.

Additionally we could add some blacklist test like they are currently 
implemented in the blod plugin for comments and trackbacks.

HTH
Philipp



-- 
philipp stucki . bitflux GmbH . schoeneggstrasse 5 . CH-8004 zurich
[email protected]  .  phone +41 1 240 56 70 .  fax +41 1 240 56 71
http://www.bitflux.ch
-- 
bitflux-cms mailing list
[email protected]
http://lists.bitflux.ch/cgi-bin/listinfo/bitflux-cms