Client side form validation (Jcap) (Full Version)

All Forums >> [Community] >> OutFront Discoveries



Message

BobbyDouglas -> Client side form validation (Jcap) (7/9/2007 13:40:01)

Jcap (Captcha Validation Javascript)

I've heard about great results with this script. It is a very easy to use client side form validation script to prevent spammers from submitting your form.

The major downside is that javascript must be enabled for it to work. The few people I've talked to that use this, mentioned that their form related spam has dropped to zero after implementing this script. This means that most of the spam bot spiders have javascript enabled.

quote:

What is Jcap (Captcha Validation Javascript)?

The Jcap (Captcha Validation Javascript) is an advanced level script that can be easily embedded into various secure forms to screen out various malicious entities such as bots that are used for spamming activities. The concept of the Jcap (Captcha Validation Javascript) is that it is the javascript (client-side) answer to Gimpy, a program developed by and based on the logic of the CAPTCHA Project at Carnegie Mellon University in that it can successfully tell humans and machines apart by administering a simple test that most humans can pass and current machines cannot pass. More information on the CAPTCHA Project at Carnegie Mellon University is available on their official website.



ou812 -> RE: Client side form validation (Jcap) (7/9/2007 17:05:40)

This seems great if it really works. I use ASP captcha checking myself. But I'm curious why spam bots have JS turned on. What am I missing?



Reflect -> RE: Client side form validation (Jcap) (7/10/2007 11:27:11)

brian,

I was wondering myself so I turned off JS and restarted my browser. The page then throws up a turn on JS for this to work message. Not sure if the bot could then bypass the routine, I don't have enough time to find out.

Take care,

Brian



GolfMad -> RE: Client side form validation (Jcap) (7/12/2007 10:46:50)

Its a great idea and I use something similar on an aspx form BUT I still receive the odd spambot completed form. MVP's on the Microsoft EWD forum said that this could be bypassed by javascript being off.

I haven't investigated the original CAPTCHA method but some spambots can definatley bypass a java script requirement by having it switched off.
I just wish there was something foolproof and eay to use, here is my code below. At least a reduction is better than nothing.
quote:


<span>Is ice hot or cold?<a href="#" class="hintanchor" onMouseover="showhint('This question is being asked to prevent automated Spam machines completing these forms.<br> Answering shows you are a real person.', this, event, '200px')">-
why ask?</a></span><br />
<asp:TextBox runat="server" id="real" Width="106px"></asp:TextBox>
<br />
<asp:RequiredFieldValidator runat="server" ErrorMessage="Completion required to beat Spam" id="RequiredFieldValidator3" Display="Dynamic" ControlToValidate="real">
</asp:RequiredFieldValidator>
<asp:CompareValidator runat="server" ErrorMessage="Please read question above and answer" id="CompareValidator1" ValueToCompare="cold" Display="Dynamic" ControlToValidate="real">
</asp:CompareValidator>



jaybee -> RE: Client side form validation (Jcap) (7/12/2007 11:02:38)

There is if you can run PHP. Go to Mike Cherim's site and pick up his secure form.



BobbyDouglas -> RE: Client side form validation (Jcap) (7/12/2007 13:38:47)

Jcap is not meant to be the most accurate anti-spam solution, but it is one that currently provides a great deal of blocking, with the absolute least amount of work to get up and running.



Page: [1]

Valid CSS!




Forum Software © ASPPlayground.NET Advanced Edition 2.4.5 ANSI
6.445313E-02