Andy Matthews wrote: > I've recently had some attacks on a form which was created by a coworker.
The ones that were trying to send spam through forms on several of my sites put duplicate entries in many of the form fields. I stopped 99.5% of them cold by simply going: <cfif form.fname eq form.lname> It's a Bot, screw them! <cfelse> ....process the form </cfif> That's all it took! Also, if you have a "comments" field on the form - the bots like to try and put all sorts of crap in there, so you can also set up a function to check that content - like header tags - and toss the whole thing if they exists... I'm seeing almost *zero* form spam now doing nothing more than the above. I know they're trying several times a day because I added an alert that sends me the IP address of the bot whenever it tries... -- ----------- Les Mizzell ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Logware (www.logware.us): a new and convenient web-based time tracking application. Start tracking and documenting hours spent on a project or with a client with Logware today. Try it for free with a 15 day trial account. http://www.houseoffusion.com/banners/view.cfm?bannerid=67 Message: http://www.houseoffusion.com/lists.cfm/link=i:4:226210 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
