[UPHPU] spam v CSS in no holds barred action

Velda Christensen velda at novapages.com
Tue Jun 26 22:58:58 MDT 2007


Dave Smith wrote:
> What makes the author so confident that bots will actually put a value 
> in the hidden text field?
>
> --Dave 
Testing that out.  I've got a rather persistent set of losers trying to 
post crap in my niece's guestbook.  I've got it set up now to where they 
haven't been able to spam it for at least a year but I track 'close 
calls' (where they passed all tests but one) and there at least a dozen 
per week.  When it gets to a dozen per day I add a new security 
feature.  To give you an idea how .. annoying these  spammers are 
being.. her guestbook script gets roughly 200 times more hits than her 
other pages, and twice the hits of the main site.

But anyway I am thinking I should be able to tell whether they're 
filling out the hidden field, and what they're putting in it, and make 
further plans to foil the spammers that way.

If I could get the field to hide.

For some reason I can't get the stylesheet to cover the input style :-(  
At least not in FF.  Not without using inline style (which I think could 
be a bit of a dead giveaway)  If you've got ideas you can have a look 
here:  http://lilyharper.org/lily/guestbook/

(Macey's gave me a whole stack of paper bags this morning, so I am 
prepared!)

-Velda


More information about the UPHPU mailing list