??changed:
-  * limit: can't spammers just grab the form and fill-in the fields in order, 
like humans do, only with garbage? Does this really help? We already have form 
ids to prevent double-posting forms.
  * limit: can't spammers just grab the form and fill-in the fields in order, 
like humans do, only with garbage? Does this really help? We already have form 
ids to prevent double-posting forms. Randomizing the form name and URL may be 
more effective in that regard, unless the spammer knows that he needs to use 
the 2nd form, whatever its name is.

++added:
  * cons: breaks form pre-filling by the browser (since the field name 
changed). Not really an issue for the tracker though.


--
forwarded from https://savannah.gnu.org/maintenance/[EMAIL 
PROTECTED]://savannah.gnu.org/maintenance


_______________________________________________
Savannah-cvs mailing list
[email protected]
http://lists.gnu.org/mailman/listinfo/savannah-cvs

Reply via email to