What exactly is on your AddComments page?

I am assuming it is some sort of form, correct? If so, one of the
fastest ways to stop bot submissions is a good ole captcha. While not
100% perfect, it does hose most of the simpler bots. CF8 has it built
in, but if not there are several options out there.

http://www.compoundtheory.com/?action=captcha.index


Another trick is to set a cookie on the browser and then verify it's
existence in the submission of the form. If it doesn't exist, then the
form doesn't go through.

One more, a hidden form field with a UUID in it, change the UUID for
every request and store the UUID in a client, session or cookie during
the load of the form, then check for the existence of the field and
value and compare it to the one in the session/client/cookie.

=]




On Nov 14, 2007 2:21 PM, Mike Little <[EMAIL PROTECTED]> wrote:
> hi guys,
>
> it appears my addcomments.cfm page has become indexed in google. usually this 
> page is only accessed when a user goes clicks a link from the articles.cfm 
> page.
>
> so... because of the endless spam we are currently getting, i am assuming the 
> spambots are going directly to the addcomment page?
>
> now, i had an idea - what if on the addcomment page, i test that the user has 
> come from the articles page using CGI.HTTP_referrer??
>
> (i have also now added the addcomment.cfm page to my robots page and used the 
> google remove url tool).
>
> any thoughts would be appreciated.
>
> mike
>
> ps. we use the cffromprotect tool and it works brilliantly.
>
> 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Get the answers you are looking for on the ColdFusion Labs
Forum direct from active programmers and developers.
http://www.adobe.com/cfusion/webforums/forum/categories.cfm?forumid-72&catid=648

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:293331
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4

Reply via email to