Home All Groups Group Topic Archive Search About

RE: Form getting buried in "bot" spam

Author
16 Mar 2009 4:50 PM
TWhizTom

Easist method:

1) Generate a random series of letters or numbers, you pick how large or
small.
2) Assign a hidden text box the random series you just generated.
3) Display the series
4) Ask user to input what they see. You do not have to get fancy or anything
like many of the pages you have seen...just make it visible and obvious -
BOTS cannot "see" what is being displayed, they are reading the code.
5) On submit, verify the user's input is equal to your hidden text box, if
not, cancel the submit...


Show quoteHide quote
"Kit Marty (CHM Consulting)" wrote:

> I have a simple, general 'information request' form in 5 FrontPage 2003 sites
> (the FrontPage generic form page).  It has contact me/comment (radio
> buttons), category (pulldown list), comments (blank field), Contact info
> (fields for Name, Title, Company, Address, Telephone, Fax, and email), a
> submit button and a reset button.
>
> When the submit button is pushed, the info is then sent to me.  The problem
> is that sometime in the past month, some "BOTS" have decided to bury me in
> messages.
>
> I have seen forms on some sites (usually to sign up for a service) that
> require you to type in a combination of letters and/or numbers that are
> displayed in a box.  If you don't get them right, then you stay on the form
> page until you do.  Is there some free addi-n or simple code I can add to the
> form to stop this incessant barrage of messages?
>
> I'm not sure if this belongs here or in the General area, but I am very
> frustrated with all these nuissance messages.
>
> Thanks,
> Kit Marty

Author
16 Mar 2009 10:06 PM
Murray
A honeypot method is less intrusive, and just as effective, I believe.

--
Murray



Show quoteHide quote
"TWhizTom" <TWhiz***@discussions.microsoft.com> wrote in message
news:53B18E3F-D10B-4A14-A477-12E869B64066@microsoft.com...
> Easist method:
>
> 1) Generate a random series of letters or numbers, you pick how large or
> small.
> 2) Assign a hidden text box the random series you just generated.
> 3) Display the series
> 4) Ask user to input what they see. You do not have to get fancy or
> anything
> like many of the pages you have seen...just make it visible and obvious -
> BOTS cannot "see" what is being displayed, they are reading the code.
> 5) On submit, verify the user's input is equal to your hidden text box, if
> not, cancel the submit...
>
>
> "Kit Marty (CHM Consulting)" wrote:
>
>> I have a simple, general 'information request' form in 5 FrontPage 2003
>> sites
>> (the FrontPage generic form page).  It has contact me/comment (radio
>> buttons), category (pulldown list), comments (blank field), Contact info
>> (fields for Name, Title, Company, Address, Telephone, Fax, and email), a
>> submit button and a reset button.
>>
>> When the submit button is pushed, the info is then sent to me.  The
>> problem
>> is that sometime in the past month, some "BOTS" have decided to bury me
>> in
>> messages.
>>
>> I have seen forms on some sites (usually to sign up for a service) that
>> require you to type in a combination of letters and/or numbers that are
>> displayed in a box.  If you don't get them right, then you stay on the
>> form
>> page until you do.  Is there some free addi-n or simple code I can add to
>> the
>> form to stop this incessant barrage of messages?
>>
>> I'm not sure if this belongs here or in the General area, but I am very
>> frustrated with all these nuissance messages.
>>
>> Thanks,
>> Kit Marty
Are all your drivers up to date? click for free checkup

Author
17 Mar 2009 3:11 AM
Mike Mueller
Just make sure that if you do do this that you don't make #2 an obvious
choice for the text. As #4 states, the BOTS read the code... On my CAPTCHAd
forms, I pass is in a session variable.


Show quoteHide quote
"TWhizTom" <TWhiz***@discussions.microsoft.com> wrote in message
news:53B18E3F-D10B-4A14-A477-12E869B64066@microsoft.com...
> Easist method:
>
> 1) Generate a random series of letters or numbers, you pick how large or
> small.
> 2) Assign a hidden text box the random series you just generated.
> 3) Display the series
> 4) Ask user to input what they see. You do not have to get fancy or
> anything
> like many of the pages you have seen...just make it visible and obvious -
> BOTS cannot "see" what is being displayed, they are reading the code.
> 5) On submit, verify the user's input is equal to your hidden text box, if
> not, cancel the submit...
>
>
> "Kit Marty (CHM Consulting)" wrote:
>
>> I have a simple, general 'information request' form in 5 FrontPage 2003
>> sites
>> (the FrontPage generic form page).  It has contact me/comment (radio
>> buttons), category (pulldown list), comments (blank field), Contact info
>> (fields for Name, Title, Company, Address, Telephone, Fax, and email), a
>> submit button and a reset button.
>>
>> When the submit button is pushed, the info is then sent to me.  The
>> problem
>> is that sometime in the past month, some "BOTS" have decided to bury me
>> in
>> messages.
>>
>> I have seen forms on some sites (usually to sign up for a service) that
>> require you to type in a combination of letters and/or numbers that are
>> displayed in a box.  If you don't get them right, then you stay on the
>> form
>> page until you do.  Is there some free addi-n or simple code I can add to
>> the
>> form to stop this incessant barrage of messages?
>>
>> I'm not sure if this belongs here or in the General area, but I am very
>> frustrated with all these nuissance messages.
>>
>> Thanks,
>> Kit Marty
Author
24 Mar 2009 10:05 PM
Mikecl
Hi TWhizTom,

I am a newbie as far as frontpage is concerened I would like to try and
implement your sugestion can you point me int the direction of how to do this
or perhaps somewhere to get more information?

Thanks Mike

Show quoteHide quote
"TWhizTom" wrote:

> Easist method:
>
> 1) Generate a random series of letters or numbers, you pick how large or
> small.
> 2) Assign a hidden text box the random series you just generated.
> 3) Display the series
> 4) Ask user to input what they see. You do not have to get fancy or anything
> like many of the pages you have seen...just make it visible and obvious -
> BOTS cannot "see" what is being displayed, they are reading the code.
> 5) On submit, verify the user's input is equal to your hidden text box, if
> not, cancel the submit...
>
>
> "Kit Marty (CHM Consulting)" wrote:
>
> > I have a simple, general 'information request' form in 5 FrontPage 2003 sites
> > (the FrontPage generic form page).  It has contact me/comment (radio
> > buttons), category (pulldown list), comments (blank field), Contact info
> > (fields for Name, Title, Company, Address, Telephone, Fax, and email), a
> > submit button and a reset button.
> >
> > When the submit button is pushed, the info is then sent to me.  The problem
> > is that sometime in the past month, some "BOTS" have decided to bury me in
> > messages.
> >
> > I have seen forms on some sites (usually to sign up for a service) that
> > require you to type in a combination of letters and/or numbers that are
> > displayed in a box.  If you don't get them right, then you stay on the form
> > page until you do.  Is there some free addi-n or simple code I can add to the
> > form to stop this incessant barrage of messages?
> >
> > I'm not sure if this belongs here or in the General area, but I am very
> > frustrated with all these nuissance messages.
> >
> > Thanks,
> > Kit Marty
Author
25 Mar 2009 8:05 AM
Ronx
Take a look at the pages at
http://www.rxs-enterprises.org/tests/anti-spam/
These pages all advise that server-side scripting is required to process
and validate the form, but you may be able to use the FrontPage extensions
if you add validation to the fields. Test on the server with JavaScript
disabled - spambots usually have javascript disabled which makes the FP
javascript validation useless.

--
Ron Symonds - Microsoft MVP (Expression)
Reply only to group - emails will be deleted unread.
http://www.rxs-enterprises.org/fp

Show quoteHide quote
"Mikecl" <Mik***@discussions.microsoft.com> wrote in message
news:3F7A2510-556F-4000-AB15-8F4E6B67CA33@microsoft.com...
> Hi TWhizTom,
>
> I am a newbie as far as frontpage is concerened I would like to try and
> implement your sugestion can you point me int the direction of how to do
> this
> or perhaps somewhere to get more information?
>
> Thanks Mike
>
> "TWhizTom" wrote:
>
>> Easist method:
>>
>> 1) Generate a random series of letters or numbers, you pick how large or
>> small.
>> 2) Assign a hidden text box the random series you just generated.
>> 3) Display the series
>> 4) Ask user to input what they see. You do not have to get fancy or
>> anything
>> like many of the pages you have seen...just make it visible and
>> obvious -
>> BOTS cannot "see" what is being displayed, they are reading the code.
>> 5) On submit, verify the user's input is equal to your hidden text box,
>> if
>> not, cancel the submit...
>>
>>
>> "Kit Marty (CHM Consulting)" wrote:
>>
>> > I have a simple, general 'information request' form in 5 FrontPage
>> > 2003 sites
>> > (the FrontPage generic form page).  It has contact me/comment (radio
>> > buttons), category (pulldown list), comments (blank field), Contact
>> > info
>> > (fields for Name, Title, Company, Address, Telephone, Fax, and email),
>> > a
>> > submit button and a reset button.
>> >
>> > When the submit button is pushed, the info is then sent to me.  The
>> > problem
>> > is that sometime in the past month, some "BOTS" have decided to bury
>> > me in
>> > messages.
>> >
>> > I have seen forms on some sites (usually to sign up for a service)
>> > that
>> > require you to type in a combination of letters and/or numbers that
>> > are
>> > displayed in a box.  If you don't get them right, then you stay on the
>> > form
>> > page until you do.  Is there some free addi-n or simple code I can add
>> > to the
>> > form to stop this incessant barrage of messages?
>> >
>> > I'm not sure if this belongs here or in the General area, but I am
>> > very
>> > frustrated with all these nuissance messages.
>> >
>> > Thanks,
>> > Kit Marty
Author
25 Mar 2009 8:51 AM
Mikecl
Hi Ron,

Thanks for responding I had a look at the link you suggested but I am
getting server error in application. I will look at your suggestions

Thanks for your help

Mike

Show quoteHide quote
"Ronx" wrote:

>  Take a look at the pages at
> http://www.rxs-enterprises.org/tests/anti-spam/
> These pages all advise that server-side scripting is required to process
> and validate the form, but you may be able to use the FrontPage extensions
> if you add validation to the fields. Test on the server with JavaScript
> disabled - spambots usually have javascript disabled which makes the FP
> javascript validation useless.
>
> --
> Ron Symonds - Microsoft MVP (Expression)
> Reply only to group - emails will be deleted unread.
> http://www.rxs-enterprises.org/fp
>
> "Mikecl" <Mik***@discussions.microsoft.com> wrote in message
> news:3F7A2510-556F-4000-AB15-8F4E6B67CA33@microsoft.com...
> > Hi TWhizTom,
> >
> > I am a newbie as far as frontpage is concerened I would like to try and
> > implement your sugestion can you point me int the direction of how to do
> > this
> > or perhaps somewhere to get more information?
> >
> > Thanks Mike
> >
> > "TWhizTom" wrote:
> >
> >> Easist method:
> >>
> >> 1) Generate a random series of letters or numbers, you pick how large or
> >> small.
> >> 2) Assign a hidden text box the random series you just generated.
> >> 3) Display the series
> >> 4) Ask user to input what they see. You do not have to get fancy or
> >> anything
> >> like many of the pages you have seen...just make it visible and
> >> obvious -
> >> BOTS cannot "see" what is being displayed, they are reading the code.
> >> 5) On submit, verify the user's input is equal to your hidden text box,
> >> if
> >> not, cancel the submit...
> >>
> >>
> >> "Kit Marty (CHM Consulting)" wrote:
> >>
> >> > I have a simple, general 'information request' form in 5 FrontPage
> >> > 2003 sites
> >> > (the FrontPage generic form page).  It has contact me/comment (radio
> >> > buttons), category (pulldown list), comments (blank field), Contact
> >> > info
> >> > (fields for Name, Title, Company, Address, Telephone, Fax, and email),
> >> > a
> >> > submit button and a reset button.
> >> >
> >> > When the submit button is pushed, the info is then sent to me.  The
> >> > problem
> >> > is that sometime in the past month, some "BOTS" have decided to bury
> >> > me in
> >> > messages.
> >> >
> >> > I have seen forms on some sites (usually to sign up for a service)
> >> > that
> >> > require you to type in a combination of letters and/or numbers that
> >> > are
> >> > displayed in a box.  If you don't get them right, then you stay on the
> >> > form
> >> > page until you do.  Is there some free addi-n or simple code I can add
> >> > to the
> >> > form to stop this incessant barrage of messages?
> >> >
> >> > I'm not sure if this belongs here or in the General area, but I am
> >> > very
> >> > frustrated with all these nuissance messages.
> >> >
> >> > Thanks,
> >> > Kit Marty
>
>
>
Author
25 Mar 2009 11:10 AM
Ronx
That problem is now fixed - thanks for the heads up.

--
Ron Symonds - Microsoft MVP (Expression)
Reply only to group - emails will be deleted unread.
http://www.rxs-enterprises.org/fp

Show quoteHide quote
"Mikecl" <Mik***@discussions.microsoft.com> wrote in message
news:7ACD01FB-76DB-4AA2-8255-7D748830C823@microsoft.com...
> Hi Ron,
>
> Thanks for responding I had a look at the link you suggested but I am
> getting server error in application. I will look at your suggestions
>
> Thanks for your help
>
> Mike
>
> "Ronx" wrote:
>
>>  Take a look at the pages at
>> http://www.rxs-enterprises.org/tests/anti-spam/
>> These pages all advise that server-side scripting is required to process
>> and validate the form, but you may be able to use the FrontPage
>> extensions
>> if you add validation to the fields. Test on the server with JavaScript
>> disabled - spambots usually have javascript disabled which makes the FP
>> javascript validation useless.
>>
>> --
>> Ron Symonds - Microsoft MVP (Expression)
>> Reply only to group - emails will be deleted unread.
>> http://www.rxs-enterprises.org/fp
>>
>> "Mikecl" <Mik***@discussions.microsoft.com> wrote in message
>> news:3F7A2510-556F-4000-AB15-8F4E6B67CA33@microsoft.com...
>> > Hi TWhizTom,
>> >
>> > I am a newbie as far as frontpage is concerened I would like to try
>> > and
>> > implement your sugestion can you point me int the direction of how to
>> > do
>> > this
>> > or perhaps somewhere to get more information?
>> >
>> > Thanks Mike
>> >
>> > "TWhizTom" wrote:
>> >
>> >> Easist method:
>> >>
>> >> 1) Generate a random series of letters or numbers, you pick how large
>> >> or
>> >> small.
>> >> 2) Assign a hidden text box the random series you just generated.
>> >> 3) Display the series
>> >> 4) Ask user to input what they see. You do not have to get fancy or
>> >> anything
>> >> like many of the pages you have seen...just make it visible and
>> >> obvious -
>> >> BOTS cannot "see" what is being displayed, they are reading the code.
>> >> 5) On submit, verify the user's input is equal to your hidden text
>> >> box,
>> >> if
>> >> not, cancel the submit...
>> >>
>> >>
>> >> "Kit Marty (CHM Consulting)" wrote:
>> >>
>> >> > I have a simple, general 'information request' form in 5 FrontPage
>> >> > 2003 sites
>> >> > (the FrontPage generic form page).  It has contact me/comment
>> >> > (radio
>> >> > buttons), category (pulldown list), comments (blank field), Contact
>> >> > info
>> >> > (fields for Name, Title, Company, Address, Telephone, Fax, and
>> >> > email),
>> >> > a
>> >> > submit button and a reset button.
>> >> >
>> >> > When the submit button is pushed, the info is then sent to me.  The
>> >> > problem
>> >> > is that sometime in the past month, some "BOTS" have decided to
>> >> > bury
>> >> > me in
>> >> > messages.
>> >> >
>> >> > I have seen forms on some sites (usually to sign up for a service)
>> >> > that
>> >> > require you to type in a combination of letters and/or numbers that
>> >> > are
>> >> > displayed in a box.  If you don't get them right, then you stay on
>> >> > the
>> >> > form
>> >> > page until you do.  Is there some free addi-n or simple code I can
>> >> > add
>> >> > to the
>> >> > form to stop this incessant barrage of messages?
>> >> >
>> >> > I'm not sure if this belongs here or in the General area, but I am
>> >> > very
>> >> > frustrated with all these nuissance messages.
>> >> >
>> >> > Thanks,
>> >> > Kit Marty
>>
>>
>>

Bookmark and Share