That feature would be unable by default, and the user could use it just for forms which didn't need to be autocompleted, eg. a comment form (which can use cookies to remember the user, it is really more powerful). For the form which need it, like search forms, just no parameter scramble, and all works like before. But -if I have understood what you meant- the spammers search the with the input name in the majority of the cases, and rarely with the label content... So I think that would be an interesting anti-spam feature, unobtrusive, which wouldn't break any existing site.
Jeremy, this approach is lesser efficient ;-) Regards Baptiste On Mar 22, 11:43 pm, Malcolm Tredinnick <[EMAIL PROTECTED]> wrote: > On Thu, 2007-03-22 at 21:06 +0000, Baptiste wrote: > > Hello all, > > > (Please apologize my bad English, don't mind about it and try to > > understand... I'll do my best !) > > > First, have a quick look on the spammer main method - I am talking > > about bots, not human spammers that can't be filtered - : POST data > > are sent to the server with classical names of fields, like "comment", > > "website", "title", ... > > One of the method to prevent or limit spam is to display altered field > > names that the bots can't identify. > > I really don't like this approach to spam prevention as a general > measure. I'm not sure it's something I would like to encourage in the > core code. The problem is that it breaks things like auto-complete for > those fields, which is a fairly useful feature. You should still be > setting human readable titles or labels on those fields anyway (for > accessibility purposes) and auto-scrapers already know to look for those > fields as well as the field name. > > Regards, > Malcolm --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Django developers" group. To post to this group, send email to django-developers@googlegroups.com To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/django-developers?hl=en -~----------~----~----~----~------~----~------~--~---
