There was an older thread on form submission spam. [webmasterworld.com...] I am facing the same problem . Has anyone developed a method to stop this spam? Any help will be appreciated thanks
Dijkgraaf
11:35 pm on Feb 15, 2006 (gmt 0)
There are various things you can do. 1) If a form processing page is getting hit hard by spam, rename the page to a new name. Their automated process will then fail to work. I did that and they still haven't noticed months later that the form isn't there anymore, and they are getting served up a denied status. 2) I made the link to the new form be written to the page using JavaScript. Of course this approach means that people with JavaScript disabled won't see the link, so you have to consider that. 3) I put a bit of JavaScript in the page itself, that sets a hidden variable in the form. If this variable isn't set correctly when submitted, then it would not accept the submission. Well to get to the form in the first place they had to have it enabled :-) 4) An alternative method to JavaScript is to check the referer. Most automated submitters don't set this correctly if at all. Again this may cause some users not to be able to use the form as it may be stripped out by either security software or proxyservers. 5) Put strict validation rules on the page that accepts the submissions, add the ability to look for keywords that occur often with spam, and either reject these submissions, or mark them to be investigated.
