I don't know what your form is for, so I don't know how much trouble you want to go to. However, I have seen a lot of sites these days (like GoDaddy) using an image containing numbers on their forms. The user then has to type in the numbers into a textbox. Since automated tools can't tell what numbers are in the image, they always fail the validation, and since humans can easily just see the numbers, the burden on real users is minimal.
Of course, the burden on *you* is high: you have to regenerate the image every time the page is called (or else spammers could just go in person once and get the correct code), which means server side code to create images on the fly. You also have to put in server-side validation that keeps track of which image was served and validates the returned form value to make sure they match.
If you're *really* worried about security, I think this is a good way to go. However, I'd be interested to hear about any more lightweight approaches you find!
Amanda Birmingham Web Application Developer
____ � The WDVL Discussion List from WDVL.COM � ____
To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] Send Your Posts To: [EMAIL PROTECTED]
To change subscription settings to the wdvltalk digest version:
http://wdvl.internet.com/WDVL/Forum/#sub
________________ http://www.wdvl.com _______________________
You are currently subscribed to wdvltalk as: [EMAIL PROTECTED] To unsubscribe send a blank email to [EMAIL PROTECTED]
