View Single Post
Old 06-07-2004, 03:04 AM  
INDK
Confirmed User
 
Join Date: Jan 2004
Location: Edmonton, Alberta
Posts: 75
Securing the GFY search function

Here is a real solution for the securing the GFY search function from script kiddies / bots:

To defeat the bots you need to have an "image question" on the search form page. Most of you probably already know what this is, but for those who don't, look at the MS passport.net signup page (click "Get One Now" near the bottom) to see an example of this technique in action, or for a more in-depth look checkout "Securing Forms with Random Noisy Images" on zend.com.

Basically the webserver will create an image with a randomly generated word before a form is submitted. The user then has to type in the word displayed in the image in the answer box to be able to submit the form.

This would not be difficult to implement. However, one of the main arguments against using this method is that it discriminates against visually impaired.

INDK is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote