Re: CF CAPTCHA - need help!
I agree with Adrian. I used the hidden form field technique, along with screening out http://; in certain form fields, and it has eliminated 100% of the form submission spam without impacting legitimate users. -Mike Chabot On 4/16/07, Adrian Wagner [EMAIL PROTECTED] wrote: Besides the accessibilty issues with CAPTCHAs, I also find it a burden put on your user that is not necessary. It's not their fault that spammers abuse your form. They shouldn't be punished for it. There are other solutions - simply dynamically named hidden fields already eliminated 99% of spam on my site. If you don't have issues with JS, then the following is a good solution: http://cfformprotect.riaforge.org/ Eliminated 100% of form spam in all the sites I've implemented it. And that's only with 4 of 5 security levels activated. a. [EMAIL PROTECTED] 16/04/2007 8:47 pm I have a feedback form on our website, and we're getting a lot of SPAM. I don't know if it's because we're using mailto in the cf code or because we're not using some sort of image verification on the form (I'm sure it's a combination of the two). Does anyone know of a good CF based form validation/image verification code to help make our feedback section more secure? ~| Create Web Applications With ColdFusion MX7 Flex 2. Build powerful, scalable RIAs. Free Trial http://www.adobe.com/products/coldfusion/flex2/?sdid=RVJS Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:275548 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
CF CAPTCHA - need help!
I have a feedback form on our website, and we're getting a lot of SPAM. I don't know if it's because we're using mailto in the cf code or because we're not using some sort of image verification on the form (I'm sure it's a combination of the two). Does anyone know of a good CF based form validation/image verification code to help make our feedback section more secure? ~| Upgrade to Adobe ColdFusion MX7 The most significant release in over 10 years. Upgrade see new features. http://www.adobe.com/products/coldfusion?sdid=RVJR Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:275330 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: CF CAPTCHA - need help!
On Monday 16 Apr 2007, Steven Sprouse wrote: I have a feedback form on our website, and we're getting a lot of SPAM. Where to, and where from ? The first step to fixing something is finding out what is broken. -- Tom Chiverton Helping to continually transition killer partnerships on: http://thefalken.livejournal.com This email is sent for and on behalf of Halliwells LLP. Halliwells LLP is a limited liability partnership registered in England and Wales under registered number OC307980 whose registered office address is at St James's Court Brown Street Manchester M2 2JF. A list of members is available for inspection at the registered office. Any reference to a partner in relation to Halliwells LLP means a member of Halliwells LLP. Regulated by the Law Society. CONFIDENTIALITY This email is intended only for the use of the addressee named above and may be confidential or legally privileged. If you are not the addressee you must not read it and must not use any information contained in nor copy it nor inform any person other than Halliwells LLP or the addressee of its existence or contents. If you have received this email in error please delete it and notify Halliwells LLP IT Department on 0870 365 8008. For more information about Halliwells LLP visit www.halliwells.com. ~| Upgrade to Adobe ColdFusion MX7 The most significant release in over 10 years. Upgrade see new features. http://www.adobe.com/products/coldfusion?sdid=RVJR Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:275336 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: CF CAPTCHA - need help!
Hi Steve, I use Lyla captcha and it seems easy enough to implement, I know allot of people are also fond of cfformprotect which is a non captcha solution I'm yet to try out. See this link: http://lyla.maestropublishing.com/ As for the mailto links, I'm sure they are the root cause of the issue, You may want to try and disguise them from bots trawling the net, give this a go. script language=javascript var ppclink = Email The Sales Team; var ppcname = info; var ppchost = thinkbluemedia.co.uk; document.write(a href= + mail + to: + ppcname + #64; + ppchost + title='Please get in touch' + ppclink + /a) /script Outlook seems to be screwing my text wrap, but I'm sure you'll be able to see the variables to change. Ppcname is the bit before the @ sign, and the ppchost goes after it. It'll then display to the user nicely, but a bot is less likely o pick it up. Hope that helps, Rob -Original Message- From: Steven Sprouse [mailto:[EMAIL PROTECTED] Sent: 16 April 2007 13:48 To: CF-Talk Subject: CF CAPTCHA - need help! I have a feedback form on our website, and we're getting a lot of SPAM. I don't know if it's because we're using mailto in the cf code or because we're not using some sort of image verification on the form (I'm sure it's a combination of the two). Does anyone know of a good CF based form validation/image verification code to help make our feedback section more secure? ~| Upgrade to Adobe ColdFusion MX7 The most significant release in over 10 years. Upgrade see new features. http://www.adobe.com/products/coldfusion?sdid=RVJR Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:275339 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: CF CAPTCHA - need help!
The feedback form can be found here: http://www2.ccboe.com/feedback/feedbackform.cfm I think I've tried the lyla capcha in the past and couldn't figure it out. Maybe I'll give it another go. ~| Upgrade to Adobe ColdFusion MX7 The most significant release in over 10 years. Upgrade see new features. http://www.adobe.com/products/coldfusion?sdid=RVJR Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:275342 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: CF CAPTCHA - need help!
I use Alagad Captcha. Simple to set up http://www.alagad.com/ Steve LaBadie, Web Manager East Stroudsburg University 200 Prospect St. East Stroudsburg, Pa 18301 570-422-3999 [EMAIL PROTECTED] http://www.esu.edu -Original Message- From: Steven Sprouse [mailto:[EMAIL PROTECTED] Sent: Monday, April 16, 2007 8:48 AM To: CF-Talk Subject: CF CAPTCHA - need help! I have a feedback form on our website, and we're getting a lot of SPAM. I don't know if it's because we're using mailto in the cf code or because we're not using some sort of image verification on the form (I'm sure it's a combination of the two). Does anyone know of a good CF based form validation/image verification code to help make our feedback section more secure? ~| ColdFusion MX7 and Flex 2 Build sales marketing dashboard RIAâs for your business. Upgrade now http://www.adobe.com/products/coldfusion/flex2?sdid=RVJT Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:275344 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: CF CAPTCHA - need help!
Hi Steve, Firstly, here is a great tutorial on lyla from Ray http://ray.camdenfamily.com/index.cfm/2006/11/14/Quick-and-dirty-CAPTCHA-Gui de I found it a great help when I started out with it. Next thing I notice about that contact form, is that you're only using JS client side stuff to validate its contents, so I just disabled JS in my browser and fired off about 10 blank emails though the form, imagine what a mailing bot could do with it in just a few seconds. Get some server side validation on the form for starters, and get a captcha or something on it, build your mail to links using the JS solution I provided, that should start to stem the flow a little I think. Rob -Original Message- From: Steven Sprouse [mailto:[EMAIL PROTECTED] Sent: 16 April 2007 14:16 To: CF-Talk Subject: Re: CF CAPTCHA - need help! The feedback form can be found here: http://www2.ccboe.com/feedback/feedbackform.cfm I think I've tried the lyla capcha in the past and couldn't figure it out. Maybe I'll give it another go. ~| Create Web Applications With ColdFusion MX7 Flex 2. Build powerful, scalable RIAs. Free Trial http://www.adobe.com/products/coldfusion/flex2/?sdid=RVJS Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:275348 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: CF CAPTCHA - need help!
Rob, With the JS you sent, can I create a name for that whole thing and then make reference to the name in the form? I ask because my mailto: tag is currently just a hidden input type in the form with a value of the email address it's supposed to go to. How do I reference the new JS? Hi Steve, Firstly, here is a great tutorial on lyla from Ray http://ray.camdenfamily.com/index.cfm/2006/11/14/Quick-and-dirty-CAPTCHA-Gui de I found it a great help when I started out with it. Next thing I notice about that contact form, is that you're only using JS client side stuff to validate its contents, so I just disabled JS in my browser and fired off about 10 blank emails though the form, imagine what a mailing bot could do with it in just a few seconds. Get some server side validation on the form for starters, and get a captcha or something on it, build your mail to links using the JS solution I provided, that should start to stem the flow a little I think. Rob -Original Message- From: Steven Sprouse [mailto:[EMAIL PROTECTED] Sent: 16 April 2007 14:16 To: CF-Talk Subject: Re: CF CAPTCHA - need help! The feedback form can be found here: http://www2.ccboe.com/feedback/feedbackform.cfm I think I've tried the lyla capcha in the past and couldn't figure it out. Maybe I'll give it another go. ~| Macromedia ColdFusion MX7 Upgrade to MX7 experience time-saving features, more productivity. http://www.adobe.com/products/coldfusion?sdid=RVJW Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:275349 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: CF CAPTCHA - need help!
Hi Steve, Ok, I hadn't noticed the email address as a hidden field, this is a pretty bad idea as the bots will trawl if from the source and have a field day. How are you processing that form once its submitted? Using a cfmail tag? If so then I would take the hidden field out all together and just grab that email address in the server side code, so it never gets sent to the browser. The JS I send you is for create a hyperlink that says 'mail me' or something like that, with a mailto:[EMAIL PROTECTED] as the link, when the user clicks it they get taken to their mail client such as outlook or something. You defiantly need to get rid of that form field though, it's bad news. Let me know if you need any more help. Rob -Original Message- From: Steven Sprouse [mailto:[EMAIL PROTECTED] Sent: 16 April 2007 14:34 To: CF-Talk Subject: Re: CF CAPTCHA - need help! Rob, With the JS you sent, can I create a name for that whole thing and then make reference to the name in the form? I ask because my mailto: tag is currently just a hidden input type in the form with a value of the email address it's supposed to go to. How do I reference the new JS? Hi Steve, Firstly, here is a great tutorial on lyla from Ray http://ray.camdenfamily.com/index.cfm/2006/11/14/Quick-and-dirty-CAPTCHA-Gu i de I found it a great help when I started out with it. Next thing I notice about that contact form, is that you're only using JS client side stuff to validate its contents, so I just disabled JS in my browser and fired off about 10 blank emails though the form, imagine what a mailing bot could do with it in just a few seconds. Get some server side validation on the form for starters, and get a captcha or something on it, build your mail to links using the JS solution I provided, that should start to stem the flow a little I think. Rob -Original Message- From: Steven Sprouse [mailto:[EMAIL PROTECTED] Sent: 16 April 2007 14:16 To: CF-Talk Subject: Re: CF CAPTCHA - need help! The feedback form can be found here: http://www2.ccboe.com/feedback/feedbackform.cfm I think I've tried the lyla capcha in the past and couldn't figure it out. Maybe I'll give it another go. ~| Deploy Web Applications Quickly across the enterprise with ColdFusion MX7 Flex 2 Free Trial http://www.adobe.com/products/coldfusion/flex2/?sdid=RVJU Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:275354 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: CF CAPTCHA - need help!
On Monday 16 Apr 2007, Steven Sprouse wrote: my mailto: tag is currently just a hidden input type in the form with a value of the email address it's supposed to go to. Eeek ! So if I change it to anything else, I can send my spam through your mail server ? Hard code things like this in the backend. -- Tom Chiverton Helping to dynamically evolve proactive patterns on: http://thefalken.livejournal.com This email is sent for and on behalf of Halliwells LLP. Halliwells LLP is a limited liability partnership registered in England and Wales under registered number OC307980 whose registered office address is at St James's Court Brown Street Manchester M2 2JF. A list of members is available for inspection at the registered office. Any reference to a partner in relation to Halliwells LLP means a member of Halliwells LLP. Regulated by the Law Society. CONFIDENTIALITY This email is intended only for the use of the addressee named above and may be confidential or legally privileged. If you are not the addressee you must not read it and must not use any information contained in nor copy it nor inform any person other than Halliwells LLP or the addressee of its existence or contents. If you have received this email in error please delete it and notify Halliwells LLP IT Department on 0870 365 8008. For more information about Halliwells LLP visit www.halliwells.com. ~| Upgrade to Adobe ColdFusion MX7 Experience Flex 2 MX7 integration create powerful cross-platform RIAs http://www.adobe.com/products/coldfusion/flex2/?sdid=RVJQ Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:275356 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: CF CAPTCHA - need help!
ImageCFC has captcha capability that is fairly flexible. The demo I've published is an example of making it rather difficult with a complex font and complex background. Half the time I can't even get it right! http://www.opensourcecf.com/imagecfc/captcha/ Of course, for my usual implementation, such as the one built into CFMBB, I make it a bit simpler.. http://www.cfmbb.org/login.cfm?ref=%2Findex%2Ecfm%3F Rick ~| Deploy Web Applications Quickly across the enterprise with ColdFusion MX7 Flex 2 Free Trial http://www.adobe.com/products/coldfusion/flex2/?sdid=RVJU Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:275359 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: CF CAPTCHA - need help!
Though I'm using captcha solutions for most of my main clients (and server side too, thank you), I've been toying around with ideas on a smaller site or two owned by myself just to see what would happen. A very simple Does a cow moo, bark, howl, mew or whistle? question with a blank to write in the correct answer with a simple cfif after submission to check for the correct response has, for over a month, stopped 100% of the form spams I was getting. I have an email alert sent to myself just so I can see what's hitting the form, and it's 10 to 20 bots a day... For a second test, I've placed a fake form in front of the real one and hidden it with CSS. The form bots fill this one out, and never get to the real form on the page. It's been 100% effective as well against 10 to 20 bots a day... ~| Create robust enterprise, web RIAs. Upgrade integrate Adobe Coldfusion MX7 with Flex 2 http://www.adobe.com/products/coldfusion/flex2/?sdid=RVJP Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:275366 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: CF CAPTCHA - need help!
Well not exactly. It's not as bad as it sounds. My original feedback form was generated from a cf include file on my server. You'd have to change that code to change the email address On Monday 16 Apr 2007, Steven Sprouse wrote: my mailto: tag is currently just a hidden input type in the form with a value of the email address it's supposed to go to. Eeek ! So if I change it to anything else, I can send my spam through your mail server ? Hard code things like this in the backend. -- Tom Chiverton Helping to dynamically evolve proactive patterns on: http://thefalken.livejournal.com This email is sent for and on behalf of Halliwells LLP. Halliwells LLP is a limited liability partnership registered in England and Wales under registered number OC307980 whose registered office address is at St James's Court Brown Street Manchester M2 2JF. A list of members is available for inspection at the registered office. Any reference to a partner in relation to Halliwells LLP means a member of Halliwells LLP. Regulated by the Law Society. CONFIDENTIALITY This email is intended only for the use of the addressee named above and may be confidential or legally privileged. If you are not the addressee you must not read it and must not use any information contained in nor copy it nor inform any person other than Halliwells LLP or the addressee of its existence or contents. If you have received this email in error please delete it and notify Halliwells LLP IT Department on 0870 365 8008. For more information about Halliwells LLP visit www.halliwells.com. ~| Create Web Applications With ColdFusion MX7 Flex 2. Build powerful, scalable RIAs. Free Trial http://www.adobe.com/products/coldfusion/flex2/?sdid=RVJS Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:275385 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: CF CAPTCHA - need help!
No you wouldn't bud, You can just save the HTML template and edit it in notepad :-D Rob -Original Message- From: Steven Sprouse [mailto:[EMAIL PROTECTED] Sent: 16 April 2007 16:44 To: CF-Talk Subject: Re: CF CAPTCHA - need help! Well not exactly. It's not as bad as it sounds. My original feedback form was generated from a cf include file on my server. You'd have to change that code to change the email address On Monday 16 Apr 2007, Steven Sprouse wrote: my mailto: tag is currently just a hidden input type in the form with a value of the email address it's supposed to go to. Eeek ! So if I change it to anything else, I can send my spam through your mail server ? Hard code things like this in the backend. -- Tom Chiverton Helping to dynamically evolve proactive patterns on: http://thefalken.livejournal.com This email is sent for and on behalf of Halliwells LLP. Halliwells LLP is a limited liability partnership registered in England and Wales under registered number OC307980 whose registered office address is at St James's Court Brown Street Manchester M2 2JF. A list of members is available for inspection at the registered office. Any reference to a partner in relation to Halliwells LLP means a member of Halliwells LLP. Regulated by the Law Society. CONFIDENTIALITY This email is intended only for the use of the addressee named above and may be confidential or legally privileged. If you are not the addressee you must not read it and must not use any information contained in nor copy it nor inform any person other than Halliwells LLP or the addressee of its existence or contents. If you have received this email in error please delete it and notify Halliwells LLP IT Department on 0870 365 8008. For more information about Halliwells LLP visit www.halliwells.com. ~| Upgrade to Adobe ColdFusion MX7 Experience Flex 2 MX7 integration create powerful cross-platform RIAs http://www.adobe.com/products/coldfusion/flex2/?sdid=RVJQ Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:275387 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: CF CAPTCHA - need help!
Okay, I've made changes to the form, http://www2.ccboe.com/feedback/feedbackform.cfm The CAPTCHA is there and looking nice, but I can still submit the form without having to enter anything in the image field. Any help with this? Does the mailto look ~| ColdFusion MX7 by Adobe® Dyncamically transform webcontent into Adobe PDF with new ColdFusion MX7. Free Trial. http://www.adobe.com/products/coldfusion?sdid=RVJV Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:275412 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: CF CAPTCHA - need help!
Hello Less and listers, I applaud your approach with this captia solution. As one who uses a screen reader to access applications and Web sites these captias are a real problem for those who must use this technology to gain access to secured areas of a Web site. The traditional, Copy the letters/numbers you see in to the field below captia effectively locks blind people out of areas of Web sites and computer applications where this type of captia is used. Having a captia that displays a text string that can be read by screen readers that asks a question and provides one with an edit field to write their answer would allow you to secure your forms and still make it possible for blind persons using screen reading software to gain full access to protected areas of your Web site. Since traditional captia information is presented as an OCR image these cannot be read by screen readers, but text strings can. If you're able to create a CF Captia I'd love to see the code myself and would consider using it on my Web sites as well. I'll be following this thread with interest. Peter Donahue - Original Message - From: Les Mizzell [EMAIL PROTECTED] To: CF-Talk cf-talk@houseoffusion.com Sent: Monday, April 16, 2007 9:30 AM Subject: Re: CF CAPTCHA - need help! Though I'm using captcha solutions for most of my main clients (and server side too, thank you), I've been toying around with ideas on a smaller site or two owned by myself just to see what would happen. A very simple Does a cow moo, bark, howl, mew or whistle? question with a blank to write in the correct answer with a simple cfif after submission to check for the correct response has, for over a month, stopped 100% of the form spams I was getting. I have an email alert sent to myself just so I can see what's hitting the form, and it's 10 to 20 bots a day... For a second test, I've placed a fake form in front of the real one and hidden it with CSS. The form bots fill this one out, and never get to the real form on the page. It's been 100% effective as well against 10 to 20 bots a day... ~| Deploy Web Applications Quickly across the enterprise with ColdFusion MX7 Flex 2 Free Trial http://www.adobe.com/products/coldfusion/flex2/?sdid=RVJU Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:275416 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: CF CAPTCHA - need help!
Okay, I've made changes to the form, http://www2.ccboe. com/feedback/feedbackform.cfm The CAPTCHA is there and looking nice, but I can still submit the form without having to enter anything in the image field. Any help with this? Does the mailto look UPDATE - I was able to get it to work. To the people with more experience in this than me, does it look like, code wise, that I've improved the functionality and reduced the amount of SPAM that might get through? ~| Create robust enterprise, web RIAs. Upgrade integrate Adobe Coldfusion MX7 with Flex 2 http://www.adobe.com/products/coldfusion/flex2/?sdid=RVJP Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:275420 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: CF CAPTCHA - need help!
Good afternoon again everyone, If you can set it up to where it produces a string of straight text, and not text embedded within an image your captcha text/questions will then be readable by screen reading solutions. Some companies have implemented audio rendering of this text, but the audio is often a poor quality, and the site is inaccessible to those who are both blind and deaf or have severe hearing impairments. Doing this will also go a long way to ensuring that your Web sites are Section 508 Compliant. Peter Donahue - Original Message - From: Steven Sprouse [EMAIL PROTECTED] To: CF-Talk cf-talk@houseoffusion.com Sent: Monday, April 16, 2007 8:16 AM Subject: Re: CF CAPTCHA - need help! The feedback form can be found here: http://www2.ccboe.com/feedback/feedbackform.cfm I think I've tried the lyla capcha in the past and couldn't figure it out. Maybe I'll give it another go. ~| Upgrade to Adobe ColdFusion MX7 Experience Flex 2 MX7 integration create powerful cross-platform RIAs http://www.adobe.com/products/coldfusion/flex2/?sdid=RVJQ Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:275424 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: CF CAPTCHA - need help!
Hello Steven and listers, It certainly worked for me. The results appears below: Please correct these errors: You did not match the image text. Please try again. Wanting to give you the benefit of a doubt I gave it a shot. Because my screen reader could not read the text in the image I received the error message above and was unable to submit the form. This is exactly the kind of accessibility problem we have with captchas and screen readers. If one could read the text without it being included in an image the problem could be solved. Peter Donahue - Original Message - From: Steven Sprouse [EMAIL PROTECTED] To: CF-Talk cf-talk@houseoffusion.com Sent: Monday, April 16, 2007 12:42 PM Subject: Re: CF CAPTCHA - need help! Okay, I've made changes to the form, http://www2.ccboe.com/feedback/feedbackform.cfm The CAPTCHA is there and looking nice, but I can still submit the form without having to enter anything in the image field. Any help with this? Does the mailto look ~| Macromedia ColdFusion MX7 Upgrade to MX7 experience time-saving features, more productivity. http://www.adobe.com/products/coldfusion?sdid=RVJW Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:275431 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: CF CAPTCHA - need help!
100% CF... no third party image components needed. http://acoderslife.com/downloads/bhcaptcha -Original Message- From: Steven Sprouse [mailto:[EMAIL PROTECTED] Sent: Monday, April 16, 2007 8:48 AM To: CF-Talk Subject: CF CAPTCHA - need help! I have a feedback form on our website, and we're getting a lot of SPAM. I don't know if it's because we're using mailto in the cf code or because we're not using some sort of image verification on the form (I'm sure it's a combination of the two). Does anyone know of a good CF based form validation/image verification code to help make our feedback section more secure? ~| Deploy Web Applications Quickly across the enterprise with ColdFusion MX7 Flex 2 Free Trial http://www.adobe.com/products/coldfusion/flex2/?sdid=RVJU Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:275491 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: CF CAPTCHA - need help!
Besides the accessibilty issues with CAPTCHAs, I also find it a burden put on your user that is not necessary. It's not their fault that spammers abuse your form. They shouldn't be punished for it. There are other solutions - simply dynamically named hidden fields already eliminated 99% of spam on my site. If you don't have issues with JS, then the following is a good solution: http://cfformprotect.riaforge.org/ Eliminated 100% of form spam in all the sites I've implemented it. And that's only with 4 of 5 security levels activated. a. [EMAIL PROTECTED] 16/04/2007 8:47 pm I have a feedback form on our website, and we're getting a lot of SPAM. I don't know if it's because we're using mailto in the cf code or because we're not using some sort of image verification on the form (I'm sure it's a combination of the two). Does anyone know of a good CF based form validation/image verification code to help make our feedback section more secure? ~| Upgrade to Adobe ColdFusion MX7 Experience Flex 2 MX7 integration create powerful cross-platform RIAs http://www.adobe.com/products/coldfusion/flex2/?sdid=RVJQ Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:275499 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
