Re: Re: Alternative to captcha - using JQuery and ajax to 'time' form input

I know, and do still want to look into mobile port of JQuery as well - could 
then, I suppose, maybe use something like client sig to see if it was like a 
mobile browser, and then implement a slightly different version.

Stay well

Jacob Kruger
Blind Biker
Skype: BlindZA
'...fate had broken his body, but not his spirit...'

----- Original Message ----- 
From: "Bogdan Ribic" <[email protected]>
To: <[email protected]>
Sent: Friday, April 27, 2012 8:02 PM
Subject: [PHP-WIN] Re: Alternative to captcha - using JQuery and ajax to 
'time' form input


> Well it is still vulnerable to using an embedded instance of MSIE to go to 
> site and fill in the data - IE will accept the cookies, process 
> javascript, click on the button... do everything a real user would. One 
> way to foil this embedded setup is to log mouse movements and keyboard 
> events with jquery and send that as well, then check on server side, but I 
> don't know if that would play well with mobile devices.
>
> My 2 cents, anyway :)
>
>
> On 4/26/2012 16:59, Jacob Kruger wrote:
>> Opinions/thoughts?:
>> http://docs.jquery.com/Tutorials:Safer_Contact_Forms_Without_CAPTCHAs
>>
>> Basically it pulls the server time in background using an ajax call, and 
>> implements an MD5 encrypted value in a hidden field, and then you can 
>> double check the timing of form input to sort of verify that it was real 
>> time, and not a form of automated process, by a spambot/robot as such.
>>
>> Only real issue here is it would require user to have cookies and 
>> javascript enabled, but anyway..?
>>
>
>
> -- 
>
>
> http://www.rbisoftware.com/outsourcing.php
>
> -- 
> PHP Windows Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
> 


-- 
PHP Windows Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php