How do you prevent spamming through a form? - GoFuckYourself.com - Adult Webmaster Forum

X

StuartD

Sofa King Band

Join Date: Jul 2002

Posts: 29903
Share

Post
#1

How do you prevent spamming through a form?

07-09-2006, 05:19 AM

I built a simple guestbook script and recently it's been getting hit pretty hard by poker spammers with all kinds of various crap... over 200 submissions in 2 days.

The question is, what's a good way to prevent that without limiting genuine guestbook submissions?

And no, I don't want to go with image verification because it's just a guestbook for every day people. I don't want to make it a chore for them.

I checked the referrer and it is coming from my own site, so it's not an off the site submission. Someone must have built a spammer that submits the actual form on the page.. so I can't just check for the referrer

This is me on facebook
This is me on twitter
Tags: None
NdO

Confirmed User

Join Date: Jun 2006

Posts: 336
Share

Post
#2

07-09-2006, 05:29 AM

You could try to block them based on their ip's. Another option is a blacklist. (With urls / poker / pharmecy words etc.)
Comment
scottybuzz

Too lazy to set a custom title

Join Date: May 2006

Posts: 14799
Share

Post
#3

07-09-2006, 05:30 AM

yeh goodluck for you,

$$$$$ MAKE HUGE MONEY IN CAMS - CLICK HERE $$$$$
Comment
StuartD

Sofa King Band

Join Date: Jul 2002

Posts: 29903
Share

Post
#4

07-09-2006, 05:44 AM

Originally posted by NdO

You could try to block them based on their ip's. Another option is a blacklist. (With urls / poker / pharmecy words etc.)

different IP for each submission, I thought of that myself...

It's looking more and more like I'll have to go the "keyword" route, and try to keep on top of things that can't be submitted. That's going to suck though.

Especially since this seems to be affiliate type crap, which means getting some messed up urls such as online-poker-games . halpinos.com/ and internetpoker2.tblog . com/
(urls broken cause I don't want to send them any more traffic than they already get)

Last edited by StuartD; 07-09-2006, 05:45 AM.

This is me on facebook
This is me on twitter
Comment
EdgeXXX

Confirmed User

Join Date: Oct 2005

Posts: 5816
Share

Post
#5

07-09-2006, 05:47 AM

Tough to do without "making it a chore" for the legitimate people. What about screening for (filtering) certain keywords like poker, join, etc.?

.
.
.
.

I have a sig
Comment
MaddCaz

Confirmed User

Join Date: Mar 2006

Posts: 9483
Share

Post
#6

07-09-2006, 05:50 AM

Originally posted by EdgeXXX

Tough to do without "making it a chore" for the legitimate people. What about screening for (filtering) certain keywords like poker, join, etc.?

BigCocks.com -
MatureWomen.com -
Tranny.com -
DrunkGirls.com -
TeenGirls.com -
MonsterCock.com and
many more... Click
here to see them all!
Comment
Damian_Maxcash

So Fucking Banned

Join Date: Oct 2002

Posts: 12745
Share

Post
#7

07-09-2006, 06:00 AM

Single letter verification would be ok on a small site...."Press '$randomletter' to post your comment" instead of a submit button for example.

Nobody is going to bother writing a script to post on a single small site - it would just go into the 'not worth it' file.

On a larger site where it would be worth the time and effort then I am out of ideas.
Comment
SMG

Confirmed User

Join Date: Aug 2003

Posts: 1798
Share

Post
#8

07-09-2006, 06:08 AM

there are a few ways to do it from the ip things to other tricks that keep out most automated submissions ... if it's a php script, I can talk with you about hardening the script a bit to stop the spammers, just hit me up on icq 6354 0110

TGP Webmasters: sign up for the top 100 tgp list!
Submit galleries
If you add me to icq (title) make sure to mention GFY or I'll think you're a bot and deny you.
Comment
everestcash

Confirmed User

Join Date: Apr 2002

Posts: 2194
Share

Post
#9

07-09-2006, 06:17 AM

got the same problem - with regbots on my dating forum & my blogs ((
on blogs i simply suspend posts with urls in them
on board i use visual code, email confirmation & ban spammers email periodicaly - but it doesn't help much ((

Got solo girls/teen traffic? Promote our exclusive solo girl sites and boost your income!
Comment
everestcash

Confirmed User

Join Date: Apr 2002

Posts: 2194
Share

Post
#10

07-09-2006, 06:19 AM

Originally posted by damian2001

Single letter verification would be ok on a small site...."Press '$randomletter' to post your comment" instead of a submit button for example.

sounds interesting
will try it )
thanks

Got solo girls/teen traffic? Promote our exclusive solo girl sites and boost your income!
Comment
EdgeXXX

Confirmed User

Join Date: Oct 2005

Posts: 5816
Share

Post
#11

07-09-2006, 06:25 AM

Originally posted by damian2001

Single letter verification would be ok on a small site...."Press '$randomletter' to post your comment" instead of a submit button for example.

Nobody is going to bother writing a script to post on a single small site - it would just go into the 'not worth it' file.

On a larger site where it would be worth the time and effort then I am out of ideas.

This is a good idea and I like it. The only problem is that everyone is assuming that these are automated spams, which they may be, but what if it is just someone that is manually pasting the spam? If this were the case, they would have no problem clicking buttons or even verifying images. But like I said, I love your idea as an added measure of security.

.
.
.
.

I have a sig
Comment
smutx

Confirmed User

Join Date: Jan 2004

Posts: 1190
Share

Post
#12

07-09-2006, 06:35 AM

Originally posted by StuartD

I built a simple guestbook script and recently it's been getting hit pretty hard by poker spammers with all kinds of various crap... over 200 submissions in 2 days.

The question is, what's a good way to prevent that without limiting genuine guestbook submissions?

And no, I don't want to go with image verification because it's just a guestbook for every day people. I don't want to make it a chore for them.

I checked the referrer and it is coming from my own site, so it's not an off the site submission. Someone must have built a spammer that submits the actual form on the page.. so I can't just check for the referrer

try renaming the input feilds to something different.. like someone eles said no one really targets a site, its done on a mass level is it should do the trick

icq: 236148465
Comment
WiredGuy

Pounding Googlebot

Join Date: Aug 2002

Posts: 34517
Share

Post
#13

07-09-2006, 10:38 AM

Another idea involves making use of javascript. Basically, encode the html into a cryptic javascript such that bots can't parse the parameters out of the form. This does of course mean only javascript enabled users can use the form though.
WG

I play with Google.
Comment
StuartD

Sofa King Band

Join Date: Jul 2002

Posts: 29903
Share

Post
#14

07-09-2006, 11:01 AM

Originally posted by WiredGuy

Another idea involves making use of javascript. Basically, encode the html into a cryptic javascript such that bots can't parse the parameters out of the form. This does of course mean only javascript enabled users can use the form though.
WG

Hmm... that's certainly a thought... that would be a good way to prevent spammers from mass submitting.

This is me on facebook
This is me on twitter
Comment
WiredGuy

Pounding Googlebot

Join Date: Aug 2002

Posts: 34517
Share

Post
#15

07-09-2006, 11:04 AM

Originally posted by StuartD

Hmm... that's certainly a thought... that would be a good way to prevent spammers from mass submitting.

Ideally the OCR will probably stop the most spam and should work for most users. Javascript encryption would mean a small percentage of users will be unable to use it but should stop spammers as well. To me, I'd prefer the OCR with a simple 2-3 character recognition, that should hopefully not inconvenience the surfers too much.
WG

I play with Google.
Comment
CamsLord

Confirmed User

Join Date: Jun 2006

Posts: 3663
Share

Post
#16

07-09-2006, 11:05 AM

yea ocr images will fix that

sig for sale - pornpicz(at)gmail.com
Comment
fris

I have to go potty

Join Date: Aug 2002

Posts: 55853
Share

Post
#17

07-09-2006, 11:06 AM

i find image verify works best. anything without that on any kind of form is just silly.

Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence.

My Newest Theme
Comment
WiredGuy

Pounding Googlebot

Join Date: Aug 2002

Posts: 34517
Share

Post
#18

07-09-2006, 11:06 AM

Another suggestion I also wanted to make was based on a simple question any human can answer, thereby making a simple password verification type deal. For example, instead of asking for an OCR just ask a simple question like what color is the sky? Bots will have no idea and leave this query blank, humans will just enter blue and get right through.
WG

I play with Google.
Comment
line

Registered User

Join Date: Jul 2002

Posts: 63
Share

Post
#19

07-09-2006, 11:15 AM

Wow, after seeing these suggestions I can see why spam is so pervasive.

[whore yourself here]
Comment
SmokeyTheBear

►SouthOfHeaven

Join Date: Jun 2004

Posts: 28609
Share

Post
#20

07-09-2006, 12:36 PM

add this to your form <input type=hidden name=botcheck value=nobot>

then in the php script put this as your first line

if ($botcheck == "nobot") { } else {

$url = "SPAM"

}

where $url would be one of the items in your form like an url that will then get turned blank if the hidden input isn't present.

This isnt a great solution , but this will prevent most box-automated type submissions.

Just change the "botcheck" to something different every so often ( on both the form and the script )

hatisblack at yahoo.com
Comment
StuartD

Sofa King Band

Join Date: Jul 2002

Posts: 29903
Share

Post
#21

07-10-2006, 05:24 AM

Some great suggestions. Thanks everyone

This is me on facebook
This is me on twitter
Comment
Why

MFBA

Join Date: Mar 2003

Posts: 7230
Share

Post
#22

07-10-2006, 06:48 AM

turing image.
Comment

Previous template Next

Working...