preventing form spam

	Home Register Search Help Login

Sponsors

Hosting from $3.99 per month!

Shopping Cart Software
Ecommerce software integrated into Frontpage, Dreamweaver and Golive templates. No monthly fees and available in ASP and PHP versions. dd

Website Templates
We also have a wide selection of Dreamweaver, Expression Web and Frontpage templates as well as webmaster tools and CSS layouts.

Frontpage website templates
Creative Website Templates for FrontPage, Dreamweaver, Flash, SwishMax

Search Forums

Recent Posts

Todays Posts
Most Active posts
Posts since last visit
My Recent Posts
Mark posts read

preventing form spam

View related threads: (in this forum | in all forums)

Logged in as: Guest

Users viewing this topic: none

Printable Version

All Forums >> Web Development >> Microsoft FrontPage Help >> preventing form spam

Page: [1]


hectin Posts: 17 Joined: 9/14/2005 Status: offline	preventing form spam - 9/14/2005 19:35:12 Hi We have a guest book page to which users post comments via a simple frontpage form. Posts are published with no filtering. We have been receiving large number of spam postings into our guestbook. Is there any way in front page to eliminate spammers via the form properties or any other way? I read in this forum a solution where users are asked to input into a field a string of random numbers visible in an image. If the user does not correctly input these numbers the form is rejected. This solution sounds great but I am not sure how to implement it. Could someone please provide instructions on how to add this feature to our form? Or any other spam filtering solution available in frontpage forms? This is my first time using front page but I am familiar with HTML, javascript and other wysiwyg html editors. Thanks...


bobby Posts: 11399 Joined: 8/15/1969 From: Seattle WA USA Status: offline	RE: preventing form spam - 9/14/2005 20:12:18 the random number in an image thing is somewhat complex. The best way to reduce this kind of thing is to require a membership registration... that way they at least have to go through the process of signing up before they can post. Should cut down on about 99% of that kind of thing _____________________________ In order to remove a wall you must first remove the Windows® (in reply to hectin)


hectin Posts: 17 Joined: 9/14/2005 Status: offline	RE: preventing form spam - 9/14/2005 20:31:15 bobby, Sign up via secured shell... or? I do not think we can do ssl. I was under the impression that frontpage forms or extensions can provide for some filtering, is that so? The image suggestion appeared here: http://www.frontpagewebmaster.com/m-205984/key-keywords%252Cform/tm.htm#205984 the example that user provided is here: http://www.anthemwebs.com/communitynews.htm how complicated is it? Any sources where I can get an insight into how it is done with the image? (in reply to bobby)


AMysticWeb Posts: 855 Joined: 10/23/2002 Status: offline	RE: preventing form spam - 9/14/2005 21:43:08 Welcome to the forum! Bobby's suggestion is certainly moe fool proof. In the meantime, you should be able to use something like the following. <p>Type validation text here as it <br> appears in red <font color="#FF0000"><b>nopai</b></font> <!--webbot bot="Validation" S-Validation-Constraint="Equal to" S-Validation-Value="nopai" --><input type="text" name="Valiadtion" size="20"> _____________________________ Hope I have been of some help, Micheal [URL=http://web.archive.org/web/20060101013129/http://www.frontpageforms.com/]FrontPageForms.com-Archive Version[/URL] I am living Proof that Viral Procrastination exists! (in reply to hectin)


coreybryant Posts: 2550 Joined: 3/17/2002 From: Castle Rock CO USA Status: offline	RE: preventing form spam - 9/15/2005 9:15:54 It is easy enough to add - we added it on one of our contact forms and have been testing it. A lot of other forums have reported the same thing actually. Your server though would need to support ASP though. The script is easy enough if you are familiar with some ASP and your server supports the csimage ASP component _____________________________ Corey R. Bryant My Merchant Account Blog \| Toll Free Numbers \| Expression Web Blog (in reply to AMysticWeb)


bobt Posts: 65 Joined: 9/5/2005 Status: offline	RE: preventing form spam - 9/15/2005 11:08:13 Hello Corey, Just had a look at your form and that is what I want to do to my contact form which we discussed in my post on "Form Post Hacking". Doing it is out of my league at the moment would you mind sharing with us exactly how it is done. Regards, Bob (in reply to coreybryant)

coreybryant

Posts: 2550
Joined: 3/17/2002
From: Castle Rock CO USA
Status: offline

RE: preventing form spam - 9/15/2005 12:00:10

Well you would first have to actually name the contact page with an ASP extension. And we process the form with Jmail (that is an ASP component that is installed on our servers) since the Frontpage email handler cannot handle the ASP contact form.

We then created generatepicture.asp:

<%
	Response.Expires = 0
	Set Image = Server.CreateObject("csImageFile.Manage")
	Image.Readfile server.mappath("verify.jpg")
	randomize
	randnr=Int((8999 * Rnd) + 1000)
	Image.Text 0, 0, randnr
	session("randnr")=randnr
	Response.ContentType = "Image/Jpeg"
	Response.AddHeader "Content-Disposition", "inline; filename=img" & index & ".jpg"
	Response.BinaryWrite Image.JPGData
	set Image=nothing
 
%>

which also uses another ASP component called csImagefile made by Chestysoft
and added it to the form page:

<tr>
<td>Access Code</td>
<td><img src="generatepicture.asp" alt="security image" /></td>
</tr>
<tr>
<td>Please enter access code</td>
<td><input type="text" name="accesscode" size="4" /></td>
</tr>

And in the confirm.asp page:

accesscode=request.form("accesscode")
				
if trim(session("randnr"))<> trim(accesscode) then
				   
session("errmsg")="You've entered a wrong access code!"
session("name")=Request.Form("Name")
session("email")= Request.Form("EMail") 
session("company")=Request.Form("company")
session("message")=Request.Form("Message")
session("phone")= Request.Form("Telephone")
response.redirect "contact.asp?err=1"  
end if

And then this image (verify.jpg) to help

Attachment (1)

_____________________________

Corey R. Bryant
My Merchant Account Blog | Toll Free Numbers | Expression Web Blog

(in reply to bobt)


bobt Posts: 65 Joined: 9/5/2005 Status: offline	RE: preventing form spam - 9/16/2005 1:54:24 Hello Corey, Thanks very much for the info. I will have a go at it over the weekend. Bob (in reply to coreybryant)


coreybryant Posts: 2550 Joined: 3/17/2002 From: Castle Rock CO USA Status: offline	RE: preventing form spam - 9/16/2005 8:59:11 Glad to have helped. The forms we have added it on so far - well the spamming has stopped. It will work even better if you have a validation like email (where it has to be something like test@example.com) and then that number. Before this was installed, we would get every field completed with an email address _____________________________ Corey R. Bryant My Merchant Account Blog \| Toll Free Numbers \| Expression Web Blog (in reply to bobt)


Cvolt Posts: 2 Joined: 9/18/2005 Status: offline	RE: preventing form spam - 9/18/2005 10:33:59 I had the spamming problem also. A simple solution was to rename the guestbook form page and the guestlog page. No spam for the past three months after doing this. The long term solution of course is using Corey's ASP code. (in reply to coreybryant)


bobt Posts: 65 Joined: 9/5/2005 Status: offline	RE: preventing form spam - 9/18/2005 11:45:36 Hi, This does work as the bots search out contact and guestbook and as you say it only disguises them and is not really a fix. I am having pretty good luck at the moment with the tightened validation but I am pretty sure they will come back for another round at sometime. Bob (in reply to Cvolt)