Re: Contact-Form was hacked????
Adrian Nussbaum <[email protected]> Tue, 7 Mar 2006 23:58:33 +0100
| Newsgroups | gmane.comp.cms.bitflux.general |
|---|---|
| Message-ID | <[email protected]> |
hi it seems i almost missed the discussion about the spam... do i have to update my flux-cms? Or isn't the protection implemented yet? adrian ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ xpure | adrian nussbaum | linsentalstrasse 5 | ch-8482 sennhof mobile: + 41 764 283 913 | [email protected] | http://www.xpure.ch | http://blogomanie.xpure.ch ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Am 04.03.2006 um 20:10 schrieb Matthias Dieke: > >> >> Matthias Dieke wrote: >> >>> Froms Philipps last-week-mail: >>> >>> We could add the simple hidden by css field trick which catches >>> at least >>> the robots but not the human spammers. Or is that one already >>> obsolete? >>> >>> How to do this? >> >> The form has a field which is hidden by using CSS. In general >> spammers >> use automated scripts to post spam via contact forms. Such a >> script is >> unable to tell wether a field is hidden by ccs or not. As soon as the >> hidden field is filled in, the spam trap is triggered, because a >> human >> would not even have seen it. Very simple but effective. >> > > > Thanks. I hope it works ;) > > Matthias > > >>> What do you think about a auto-generated picture? I don't know >>> the right >>> name now for this. You can find this on many sites. When you like to >>> register you have to type in the letters and nummbers from the >>> auto-generated picture. So we have some protection for the robots. >> >> These images are called captchas (Completely Automated Public Turing >> Test to Tell Computers and Humans Apart). In general I don't like >> turing >> test with user interaction because they minimise usability. And we >> won't >> need them as long as the trick described above works. >> >> Additionally we could add some blacklist test like they are currently >> implemented in the blod plugin for comments and trackbacks. >> >> HTH >> Philipp >> >> >> >> -- >> philipp stucki . bitflux GmbH . schoeneggstrasse 5 . CH-8004 zurich >> [email protected] . phone +41 1 240 56 70 . fax +41 1 240 56 71 >> http://www.bitflux.ch >> -- >> bitflux-cms mailing list >> [email protected] >> http://lists.bitflux.ch/cgi-bin/listinfo/bitflux-cms >> > > -- > Echte DSL-Flatrate dauerhaft für 0,- Euro*! > "Feel free" mit GMX DSL! http://www.gmx.net/de/go/dsl > -- > bitflux-cms mailing list > [email protected] > http://lists.bitflux.ch/cgi-bin/listinfo/bitflux-cms -- bitflux-cms mailing list [email protected] http://lists.bitflux.ch/cgi-bin/listinfo/bitflux-cms