Stop form spam - When CAPTCHA is not enough
Filed in archive Anti-Spam Tools by Ivy on November 09, 2006

Luckily, Internet Storm Center and its Johannes Ullrich also had similar problems, and that lot solved the problem by employing the use of invisible form fields:
"one or more fake form fields are added to the form. But style sheets are used to make them "invisible". To further confuse the attacker, the fake form fields are given names like "subject" and such suggesting to the bot that these are the form fields they are looking for. However, whenever a form is submitted with content in a "hidden" field, it is discarded. I am not talking about the classic hidden form fields that are not user changeable, but form fields that are marked with "display: none"
Smart isn't it?
Internet Storm Center cut its response form spam to a bare minimum, so I think this would be a great solution for many blogs, websites and online shops.
Permalink: Stop form spam - When CAPTCHA is not enough
Tags:
spam+fight anti+spam captcha form+spam comment+spam response+spam
Trackback: http://www.creative-weblogging.com/cgi-bin/mt-tb.pl/41983








