On 12/27/2006 9:42 PM, Michael J McCafferty wrote:
All,
I am currently using FormMail for several applications on
various web sites. I get too darn many spam submissions now. I need to
prevent the spambots from successfully submitting the form. Maybe one of
those images of letters or numbers that ya gotta correctly transcribe to
successfully submit the form.
Does anyone have a good one they recommend ? Or any other
solution to the problem of bots filling out forms on your web site ?
Mike,
I have a couple we use on a web site at work, written in Perl. They seem
pretty immune to spammers. I can send you one if you want so you can see
how we did it.
You can put in a captcha, but that's a pain.
Some things to do are:
1. Limit length of filled-in fields.
2. Reject if URLs in any field they're not supposed to be in.
3. Reject if email addresses in any field they're not supposed to be in.
4. Reject if 'bcc: ' appears in any field.
5. Reject if the entire response is too long
6. Have the script send yourself an email anytime the form fires off, so
you can see what the spammers are up to. You can always disable it or
/dev/null the emails if it gets out of hand.
Karl
--
[email protected]
http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-list
