Re: Contact-Form was hacked????
"Matthias Dieke" <[email protected]> Sat, 4 Mar 2006 20:10:45 +0100 (MET)
| Newsgroups | gmane.comp.cms.bitflux.general |
|---|---|
| Message-ID | <[email protected]> |
> > Matthias Dieke wrote: > > > Froms Philipps last-week-mail: > > > > We could add the simple hidden by css field trick which catches at least > > the robots but not the human spammers. Or is that one already obsolete? > > > > How to do this? > > The form has a field which is hidden by using CSS. In general spammers > use automated scripts to post spam via contact forms. Such a script is > unable to tell wether a field is hidden by ccs or not. As soon as the > hidden field is filled in, the spam trap is triggered, because a human > would not even have seen it. Very simple but effective. > Thanks. I hope it works ;) Matthias > > What do you think about a auto-generated picture? I don't know the right > > name now for this. You can find this on many sites. When you like to > > register you have to type in the letters and nummbers from the > > auto-generated picture. So we have some protection for the robots. > > These images are called captchas (Completely Automated Public Turing > Test to Tell Computers and Humans Apart). In general I don't like turing > test with user interaction because they minimise usability. And we won't > need them as long as the trick described above works. > > Additionally we could add some blacklist test like they are currently > implemented in the blod plugin for comments and trackbacks. > > HTH > Philipp > > > > -- > philipp stucki . bitflux GmbH . schoeneggstrasse 5 . CH-8004 zurich > [email protected] . phone +41 1 240 56 70 . fax +41 1 240 56 71 > http://www.bitflux.ch > -- > bitflux-cms mailing list > [email protected] > http://lists.bitflux.ch/cgi-bin/listinfo/bitflux-cms > -- Echte DSL-Flatrate dauerhaft für 0,- Euro*! "Feel free" mit GMX DSL! http://www.gmx.net/de/go/dsl -- bitflux-cms mailing list [email protected] http://lists.bitflux.ch/cgi-bin/listinfo/bitflux-cms