form security

Does anyone know how to add a bit of security to a form. Basically my client is getting a lot of automated receipts from one of their forms (probably generated by robots), and if possible would like something along the lines of the link below.

http://www.google.com/addurl/

I’m probably guessing that this would be a server side issue, but if I can go back with an answer/solution it would be good.

Nathan Garner
email@hidden

FW5 Pro | MacBook Pro | Leopard

Hi Nathan

Try here:

http://www.freewaytalk.net/thread/view/3021

http://www.captcha.net

Kind regards RogerG


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

Perfect Roger. Thank you.

Nathan Garner
Partner

Austin Wells Design Consultants
1 Elmgate Drive, Littledown, Bournemouth BH7 7EF
+44 (0)1202 301271
email@hidden
http://www.awdc-creative.com

Member of NAPP

On 20 May 2008, at 10:16, RogerG wrote:

Hi Nathan

Try here:

http://www.freewaytalk.net/thread/view/3021

CAPTCHA - Wikipedia

http://www.captcha.net

Kind regards RogerG


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

You may alternatively try a formmailer that is able to create multi-page forms (all robots I saw so far are ignoring such forms).

So a two page form, where the second page is simply intended to click a button or to verify the form contents to submit (adding some value to this method :wink: should do the job also well.


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

You could also use the technique that the FreewayTalk site does, injecting the form into the page with Ajax. This will defeat all known automated attacks. It still does nothing for the “room full of bored people” attacks that are becoming more prevalent, but it cuts the bots straight out.

Let me know if you want a short description of how to get started with this – probably just enough to get you 30 yards into the woods and stuck up to your wheel wells in mud.

Walter


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

On 21 May 2008, 12:47 pm, waltd wrote:

You could also use the technique that the FreewayTalk site does, injecting the form into the page with Ajax.

Let me know if you want a short description of how to get started with this – probably just enough to get you 30 yards into the woods and stuck up to your wheel wells in mud.

I’m interested in knowing more about this way… perhaps you can outline it shortly and/or point me to a webpage that uses such a form ?

Thank you :slight_smile:


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

All of the message-posting forms on http://freewaytalk.net use this technique. Look at the bottom of nearly every page. View source – the form is not there. It’s injected into a blank DIV by Prototype’s Ajax.Updater.

Walter


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

I would really like to know about this Ajax method too.

Nathan Garner
Partner

Austin Wells Design Consultants
1 Elmgate Drive, Littledown, Bournemouth BH7 7EF
+44 (0)1202 301271
email@hidden
http://www.awdc-creative.com

Member of NAPP

On 21 May 2008, at 13:53, tobiaseichner wrote:

On 21 May 2008, 12:47 pm, waltd wrote:

You could also use the technique that the FreewayTalk site does, injecting the form into the page with Ajax.

Let me know if you want a short description of how to get started with this – probably just enough to get you 30 yards into the woods and stuck up to your wheel wells in mud.

I’m interested in knowing more about this way… perhaps you can outline it shortly and/or point me to a webpage that uses such a form ?

Thank you :slight_smile:


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

Interesting technique, indeed. Worth to have a closer look :slight_smile:


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

I’ve been trying the easiCaptcha and have downloaded the demo. All looks good on the page, but when I submit I go to my error page - is this a fault with how I’ve set things up or because it’s a demo?

Firefox: Error
Safari: Success - even if I type the wrong code in??

http://www.mercom.org/captcha.php

Nathan Garner
Partner

Austin Wells Design Consultants
1 Elmgate Drive, Littledown, Bournemouth BH7 7EF
+44 (0)1202 301271
email@hidden
http://www.awdc-creative.com

Member of NAPP

On 22 May 2008, at 11:11, tobiaseichner wrote:

Interesting technique, indeed. Worth to have a closer look :slight_smile:


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

I’ll post something about it on dynamo. It’s pretty far into the
weeds for this particular list.

Walter

On May 22, 2008, at 4:42 AM, Nathan Garner wrote:

I would really like to know about this Ajax method too.

Nathan Garner
Partner

Austin Wells Design Consultants
1 Elmgate Drive, Littledown, Bournemouth BH7 7EF
+44 (0)1202 301271
email@hidden
http://www.awdc-creative.com

Member of NAPP

On 21 May 2008, at 13:53, tobiaseichner wrote:

On 21 May 2008, 12:47 pm, waltd wrote:

You could also use the technique that the FreewayTalk site does,
injecting the form into the page with Ajax.

Let me know if you want a short description of how to get started
with this – probably just enough to get you 30 yards into the
woods and stuck up to your wheel wells in mud.

I’m interested in knowing more about this way… perhaps you can
outline it shortly and/or point me to a webpage that uses such a
form ?

Thank you :slight_smile:


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

Firefox: Error Safari: Success - even if I type the wrong
code in??

www.mercom.org/captcha.php

Hard to troubleshoot this remotely… but have you taken care using consistent character set encoding (utf-8 preferred) ?

I also noticed that even before the HTML page begins, the shareware warning div block is shown:

http://freewaytalk.net/person/options

Nathan,

I fear the error is yours, you have the form set to be sent to a page called captcha-go.php and this page does not seem to exist on your server.

You might find life a lot simpler with your form and using the captcha if you use the easiForm actions with it.

Mike

On May 22, 2008, at 1:14 PM, Nathan Garner wrote:

I’ve been trying the easiCaptcha and have downloaded the demo. All looks good on the page, but when I submit I go to my error page - is this a fault with how I’ve set things up or because it’s a demo?

Firefox: Error
Safari: Success - even if I type the wrong code in??

http://www.mercom.org/captcha.php

The captcha-go.php file is there on the server, but I do think the error is mine somewhere. will try again.

Nathan Garner
Partner

Austin Wells Design Consultants
1 Elmgate Drive, Littledown, Bournemouth BH7 7EF
+44 (0)1202 301271
email@hidden
http://www.awdc-creative.com

Member of NAPP

On 22 May 2008, at 19:27, Mike B wrote:

Nathan,

I fear the error is yours, you have the form set to be sent to a page called captcha-go.php and this page does not seem to exist on your server.

You might find life a lot simpler with your form and using the captcha if you use the easiForm actions with it.

Mike

On May 22, 2008, at 1:14 PM, Nathan Garner wrote:

I’ve been trying the easiCaptcha and have downloaded the demo. All looks good on the page, but when I submit I go to my error page - is this a fault with how I’ve set things up or because it’s a demo?

Firefox: Error
Safari: Success - even if I type the wrong code in??

http://www.mercom.org/captcha.php


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

If you try to load captcha-go.php at the location the form thinks it is then you get a 404 error, so if it’s there it is not where the form thinks it is.

Mike

On May 23, 2008, at 6:29 PM, Nathan Garner wrote:

The captcha-go.php file is there on the server, but I do think the error is mine somewhere. will try again.