How can they tell you haven't manually typed the details into their form ?
How do TGP's block auto-submitters?
Collapse
X
-
Tags: None
-
-
well how about limitting the post of the submit page only to come from your server....that´s how you block autosubmitters
DynaMite
Comment
-
And when a user hits the submit page, set a cookie in their browser. If the cookie isn't present, the submission isn't accepted. I hear there is a script out there that does that.I like pie.Comment
-
I love the altavista way of dynamically generating a gif displaying a pseudo random string of characters and making the submitter type the string in with the submit. That seems pretty rock solid and I'm sure I've seen a beta script somewhere.
The referer and cookie fields could be spoofed.
cheersComment
-
Does anyone know what the name of that software is and where to get it? Is it called graphical random number generator?
altavista way of dynamically generating a gif displaying a pseudo random string of characters and making the submitter type the string in with the submitComment
-
sorry, I don't know what it is called. I know I've seen some tgps using something similar as well. al4a for example http://www.al4a.com/webmasters/index.html . Maybe a friendly email to al4a might get you the name of the software?
I'm actually writing some scripts to do just that but they aren't done just yet.
cheersComment
-
al4a's tracking code image is very easy to parse (but at this time I on't have that feature yet)... to complete stop autosubmitters they should make something like on altavista ;-) but it wouldn't stop semi-auto tools...
Better just to contact with autosubmitters owners and to ask them to remove TGP from list
also it is easy to send proper referer (I have it)
it is easy to send proper IP address (I have it)
it is easy to send proper confirmation (I have it)
it is easy to set proper cookie (I have it)
it is easy to catch the time or hidden fields (I have it)
There also about 20-30 additional methods present to stop autosubmissions at this time...but most of them are useless....because I already can go over them
Last edited by RussianSubmitter; 05-08-2002, 05:38 AM.Comment
-
yeah, it's not as good as altavista's, that's for sure, but it will stop most auto-submit programs. None of my business really, but why would you be implementing the code needed to fetch al4a's authorization GIF and determine what the auth code is? It would seem pretty obvious that the entire reason that they use that system is to prevent auto-subimissions. Doesn't it seem a little strange to say that you haven't implemented this hack/feature yet but then also say that you would expect people to contact you to be removed from the list? Why not reverse the roles and have people contact you to have their TGPs put on the list?Originally posted by RussianSubmitter
al4a's tracking code image is very easy to parse (but at this time I on't have that feature yet) [...] Better just to contact with autosubmitters owners and to ask them to remove TGP from list
I don't run a TGP. Never have, never will. Just curious.
cheersComment
-
Hehe good question... maybe they wish to block some users of autosubmitters that can't be controlled even by inventor of this type of autosubmitter.
for example every TGSW user can add TGP by himself...and of course he can make some mistakes there in it's database ...for example you can customize autosubmitter to post all kind of galleries even if TGP accept only gay...
And RS is fully controlled by us...so if TGP owner wants to change his recip, he can just mail this info to us and his recip will be changed on all users accounts immediately...if he wants to accept only gays and stop receive asian galleries, we can also make such change in about an hour. And also if RS owner wants to be removed from list (temporary or permanent) we can do it.
Try to contact with all TGSW users and describe them in which way they should customize their autosubmitter if you want to change something on your TGP ;-))
So we can work with TGPs who don't want to accept another autosubmitters but RS users, and if he don't want to accept RS users we can remove him.
Actually all above is bullshit...but we really trying to make TGP owners also happy and if they want to be removed we remove them.Comment



Comment