I remember seeing this on an enquiry for of a client. And the spam URL or
whatever it was was getting dumped into a whole lot of inappropriate fields
e.g. firstname, lastname. We blocked it simply by checking if two particular
(required) fields were different. This may or may not be relevant to your bot
of course. It's also worth noting that some people have the same first/last
names, so a different pair would be better.
Another technique is to embed a hidden challenge code in the form and only
accept the submission if the code is acceptable. This might work as the bot
probably doesn't retrieve your form over and over. You could embed a UUID and
add the UUID to a database, or you could simply embed a time stamp in a hidden
field, and if the hidden time stamp is over 30 minutes old then just fail
silently. A better solution would be to fail with a form validation error so
that real (but slow) users can fix the problem. Would that work? It might, and
it would be easy to implement.
________________________________
Cabbage Tree Creative Ltd.
Matthew Walker | web programmer
Phone +64 3 377 7544
Email [EMAIL PROTECTED]
Web www.cabbagetree.co.nz
manage your own web site with Thrive - contact us to learn how!
-----Original Message-----
From: [email protected] [mailto:[EMAIL PROTECTED] On Behalf Of Dale
Fraser
Sent: Wednesday, 1 February 2006 5:46 p.m.
To: [email protected]
Subject: [cfaussie] Re: stop robot form submission
I'll second that.
Have never see it, don't understand why they would want to submit your
forms.
Sure you don't have a href with an action of
"javascript:document.forms[0].submit();"
Or similar.
Regards
Dale Fraser
> -----Original Message-----
> From: [email protected] [mailto:[EMAIL PROTECTED] On
> Behalf Of Steve Onnis
> Sent: Wednesday, 1 February 2006 3:28 PM
> To: [email protected]
> Subject: [cfaussie] Re: stop robot form submission
>
> I've never had any instance where robots are submitting forms. As far as
> I know they only look at HREFs
>
> -----Original Message-----
> From: [email protected] [mailto:[EMAIL PROTECTED]
> Behalf Of Carl Vanderpal
> Sent: Wednesday, February 01, 2006 3:20 PM
> To: CF Aussie - Google
> Subject: [cfaussie] stop robot form submission
>
>
> Hello everyone,
>
> can I get some comments on how to stop robots auto-submitting forms
> on one of my clients websites. We only launched on monday and already have
> received a truckload of auto submissions..
>
> Is it best to create a pop up box so they can fill the form out
> there? Or something else
>
> Is there a particular techinique that you are using or have you
> built something from the ground up to defeat them once and for all!!
>
>
>
> :)
>
> Thanks
>
>
> ====================================
> Postal: Po Box 3462 Dural, NSW 2158
> Email: mailto:[EMAIL PROTECTED]
> FireFly Internet Phone: 80011777
