Re: Contact-Form was hacked????

"Matthias Dieke" <[email protected]> Sat, 4 Mar 2006 20:10:45 +0100 (MET)
Newsgroups gmane.comp.cms.bitflux.general
Message-ID <[email protected]>
> 
> Matthias Dieke wrote:
> 
> > Froms Philipps last-week-mail:
> > 
> > We could add the simple hidden by css field trick which catches at least
> > the robots but not the human spammers. Or is that one already obsolete?
> > 
> > How to do this?
> 
> The form has a field which is hidden by using CSS. In general spammers 
> use automated scripts to post spam via contact forms. Such a script is 
> unable to tell wether a field is hidden by ccs or not. As soon as the 
> hidden field is filled in, the spam trap is triggered, because a human 
> would not even have seen it. Very simple but effective.
> 


Thanks. I hope it works ;)

Matthias


> > What do you think about a auto-generated picture? I don't know the right
> > name now for this. You can find this on many sites. When you like to
> > register you have to type in the letters and nummbers from the
> > auto-generated picture. So we have some protection for the robots.
> 
> These images are called captchas (Completely Automated Public Turing 
> Test to Tell Computers and Humans Apart). In general I don't like turing 
> test with user interaction because they minimise usability. And we won't 
> need them as long as the trick described above works.
> 
> Additionally we could add some blacklist test like they are currently 
> implemented in the blod plugin for comments and trackbacks.
> 
> HTH
> Philipp
> 
> 
> 
> -- 
> philipp stucki . bitflux GmbH . schoeneggstrasse 5 . CH-8004 zurich
> [email protected]  .  phone +41 1 240 56 70 .  fax +41 1 240 56 71
> http://www.bitflux.ch
> -- 
> bitflux-cms mailing list
> [email protected]
> http://lists.bitflux.ch/cgi-bin/listinfo/bitflux-cms
> 

-- 
Echte DSL-Flatrate dauerhaft für 0,- Euro*!
"Feel free" mit GMX DSL! http://www.gmx.net/de/go/dsl
-- 
bitflux-cms mailing list
[email protected]
http://lists.bitflux.ch/cgi-bin/listinfo/bitflux-cms