homepage Welcome to WebmasterWorld Guest from 54.163.72.86
register, free tools, login, search, pro membership, help, library, announcements, recent posts, open posts,
Become a Pro Member

Home / Forums Index / WebmasterWorld / Webmaster General
Forum Library, Charter, Moderators: phranque

Webmaster General Forum

    
Image varification script issue
Bot still submitting sites.
webmasterguy




msg:3162814
 7:13 pm on Nov 20, 2006 (gmt 0)

Hi,

i have a contact form on a site that uses captcha image verification script to stop automated submissions & spammers. But for reason i'm still get masses of submissions with the bot using the word <Default> to submit!

Can anybody advsie to why this is happerning and what would e the best prevention to stop these automaed bot- submitting info like a million times a day!

please advise

 

rocknbil




msg:3164161
 8:26 pm on Nov 21, 2006 (gmt 0)

I'll take a stab: I'm guessing that your captchka program was free or purchased, and there is a configuration setting that allows <Default> to override the verification input code? Check that out first.

I have not delved into captchkas because most of the sites I work with have many MANY forms and it presents too many extra steps for the end user, to many places to lose valuable leads. I mention this because you should use the same methods this forces me into: screen your input data.

Invariably you will find a pattern in this spam input that you can block, that is, a lot of them now are pharm links: [ url=whatever] and <url=whatever>. So unless you have a really good reason for allowing your users to enter html and forum style links, you can kill this data on input:

if ($yourdata =~ /$spamlink/) { &exit_without_satisfaction; }

That's perl, re-code in the language of your choice. Admittedly this is a short term solution, the real answer lies in logging all data input from your forms, looking for patterns, and at worst start banning IP's.

webmasterguy




msg:3164194
 8:55 pm on Nov 21, 2006 (gmt 0)

Appreicate ur reply. I think i will go for a php form instead of using Javascript i have a feeling this is the reason why bots are able to pass the image script.

Thanks

Global Options:
 top home search open messages active posts  
 

Home / Forums Index / WebmasterWorld / Webmaster General
rss feed

All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
Home ¦ Free Tools ¦ Terms of Service ¦ Privacy Policy ¦ Report Problem ¦ About ¦ Library ¦ Newsletter
WebmasterWorld is a Developer Shed Community owned by Jim Boykin.
© Webmaster World 1996-2014 all rights reserved