OutFront Forums
     Home    Register     Search      Help      Login    

Follow Us
On Facebook
On Twitter
RSS
Via Email

Recent Posts
Todays Posts
Most Active posts
Posts since last visit
My Recent Posts
Mark posts read

Sponsors
Shopping Cart Software
Ecommerce software integrated into Frontpage, Dreamweaver and Golive templates. No monthly fees and available in ASP and PHP versions.
Website Templates
We also have a wide selection of Dreamweaver, Expression Web and Frontpage templates as well as webmaster tools and CSS layouts.
Frontpage website templates
Creative Website Templates for FrontPage, Dreamweaver, Flash, SwishMax

 

Keeping out the Spam...

 
View related threads: (in this forum | in all forums)

Logged in as: Guest
Users viewing this topic: none
Printable Version 

All Forums >> Web Development >> General Web Development >> Keeping out the Spam...
Page: [1]
 
michaelea

 

Posts: 143
Joined: 11/9/2007
From: Cannon Beach, US West
Status: offline

 
Keeping out the Spam... - 5/14/2009 11:37:29   
I was going to use the word Russians instead of Spam above but, in these hysterically sensitive times I thought that I'd get sued for Rascism - and Outfront get thrown into the suit to. You know how full of Pathos things can be and, are!

Anyways, If you think that a lot of your website form spam is coming from - Russia - for example (and mine does) then here's a tip that works for me. It dropped my akismet spam stats from 100's a day down to 0. And that was just on a blog site. When the technique is added to a couple of websites too the effectiveness is most pleasurable and virtually unmeasurable.

The answers for me were twofold and produced incredibly effective anti-spam results both from my website forms and my outlook email.

The first solution was to find most of the Russian IP blocks and deny these IP's access to my sites in the htaccess file. My anti-spam lines in htaccess look like below:

<Limit GET POST>
order allow,deny
deny from 81.20.160.0/20
deny from 81.20.192.0/20
deny from 91.144.133.0/20
deny from 85.10.202.0/20
allow from all
</Limit>

The second technique - if you use MS Outlook as your email client - is to go to your Outlook Junk-Email settings and tick the box "Block Top Level Domain" Box for .RU

As an aside I also block all email from @gmail.com too. Harsh I know but, funnily enough, life still goes on really successfully and, the Big G. will not penalize you to Page 987 if you block email from @gmail.com - good question though!!!

Hopefully these two or three free and successful anti-spam techniques will work for you too. Good Luck.

< Message edited by michaelea -- 5/14/2009 11:43:38 >


_____________________________

I wish I could design websites....
http://www.cannonbeachcomputers.com
Tailslide

 

Posts: 6692
Joined: 5/10/2005
From: Out here on the raggedy edge
Status: offline

 
RE: Keeping out the Spam... - 5/14/2009 12:04:05   
I just make the form more secure - haven't got any more form spam since!

_____________________________

Little Blue Plane Web Design | Land Rover project

:)

(in reply to michaelea)
michaelea

 

Posts: 143
Joined: 11/9/2007
From: Cannon Beach, US West
Status: offline

 
RE: Keeping out the Spam... - 5/14/2009 12:18:47   
Well, there's always that too ... :)

How do I make a Wordpress comment form "more secure"?

Literally I had a WP site up for less than two weeks and akismet was catching like 300 spam comments a day. Geez, not even the Big G. knew about the site! cannonbeachlive.com - under dev. - nobody knows about it except the spam bots from Russia!

It's not just the email in my inbox, it's the spam management too. I can't even imagine what it's like in a popular forum such as this. How much valuable time is spent managing/deleting/programming against spam in these forums?

_____________________________

I wish I could design websites....
http://www.cannonbeachcomputers.com

(in reply to Tailslide)
BobbyDouglas

 

Posts: 5525
Joined: 5/15/2003
From: Arizona
Status: offline

 
RE: Keeping out the Spam... - 5/14/2009 15:25:36   
I setup an SMF board awhile ago. By default, the anti-spam measures are horrible. I ended up installing a captcha script and blocked all Russian based hostnames. It was insane within the first week - tons of porn images and videos were posted all over the forum. Luckily I was able to catch it before the client did.

If the problem is with your e-mail, you should contact your host. They should be able to block out specific types of spam.

If it's related to a website, try searching for a way to block specific hostnames from posting a message.

There are quite a few broken captchas around these days. Unfortunately spam programs (such as XRumer - which happens to be in Russia :)) are constantly finding workarounds for these captchas.

_____________________________

Arizona Web Design - Mr Bobs Web Design in Arizona
The Arizona Web Hosting Challenge

(in reply to michaelea)
TexasWebDevelopers

 

Posts: 722
Joined: 2/22/2002
From: Dallas, TX
Status: offline

 
RE: Keeping out the Spam... - 5/14/2009 16:11:58   
We do a few simple things and here are a few of them (plus a few more):

(1) make sure the form information is coming from your own page. We use ASP to capture the http_referer and if the form post isn;'t coming from our own form page we give the user a nasty text error.
<% Dim xcheck%><!-- at the top of your page -->
<%
xcheck = Request.ServerVariables("HTTP_REFERER")
%>
<% if xcheck<>"http://www.yoursite/your_contact_page.asp" then
response.write("We do not allow automatic bots to access this page.")
else%>
Your page
<% end if%> <!-- at the bottom of your page -->

(2) In the form, as a math question like "what is two times two" and then validate server-side for the answer of "4". If the answer isn't correct then send the user back to try again.

----form field----->

<fieldset>
<legend><p>CAPTCHA</p></legend>
<p>What is this? This <strong>CAPTCHA</strong> prevents webbots from harvesting email addresses and helps prevent spam!  Simply type in the answer to the question as a number, <strong>"What is two times two?"</strong></p>
<label for="captcha_field">CAPTCHA</label>
<input type="text" id="captcha_field" name="captcha_field" value="<%=captcha_field%>" size="40" />
</fieldset>

-------- form processing page ------->

<%
DIM captcha_field
if captcha_field="4" then
%>

process the form

<%else%>
I'm sorry, there was an error in your captcha code answer.<br />
Please <a href="javascript:history.go(-1)">go back</a> and try again.
<%end if%>

(3) validate all of your form fields for correct content

(4) Spambots normally attempt to complete every form field so they pass basic validation. A honeypot field is one that is hidden from the user (CSS display set to none), so any value passed back is likely to come from a bot. The field should be labelled “Please leave this blank” or similar to account for those with CSS disabled or using custom stylesheets. If it is not blank, don't process the form.

(5) Bots have a tough time reacting to a server response. If you are in any doubt about the validity of a post, show a intermediary page asking the user to confirm their data and press submit again.

_____________________________

:)

Follow us on TWITTER

(in reply to BobbyDouglas)
Tailslide

 

Posts: 6692
Joined: 5/10/2005
From: Out here on the raggedy edge
Status: offline

 
RE: Keeping out the Spam... - 5/14/2009 16:58:33   
Hmmm comment spam - you didn't say that! The WP contact form is easy - use mike Cherim's secure accessible form - very secure and accessible.

As far as the comment form goes - not tried to get that secure yet - on sites that I've built using comments I just set it up to manually confirm/deny comments before they appear. Akismet is quite good at spam catching too.

_____________________________

Little Blue Plane Web Design | Land Rover project

:)

(in reply to TexasWebDevelopers)
michaelea

 

Posts: 143
Joined: 11/9/2007
From: Cannon Beach, US West
Status: offline

 
RE: Keeping out the Spam... - 5/14/2009 17:01:48   
Yeah Bobby, thanks for the "Contact your Host" tip.

Pacifier/iinet and Squirrel Mail specifically (I have a lot of household clients using this host) are, well, atrocious. And convincing my Host (GDaddy) that Symantec, McAfee and GD themselves are spammers and "Wolves in Sheeps clothing" is not a popular point of view :)



_____________________________

I wish I could design websites....
http://www.cannonbeachcomputers.com

(in reply to BobbyDouglas)
michaelea

 

Posts: 143
Joined: 11/9/2007
From: Cannon Beach, US West
Status: offline

 
RE: Keeping out the Spam... - 5/14/2009 17:26:38   
Yes, Spammers finding workarounds for Captchas is especially demoralizing.

Just after you've been through the process and feeling proud of yourself for setting up a working PHP captcha - then a li'l bit of spam starts and......... well, I wish I had the programming skills to "nail-er-down" a li'l more but, I don't.

_____________________________

I wish I could design websites....
http://www.cannonbeachcomputers.com

(in reply to BobbyDouglas)
Page:   [1]

All Forums >> Web Development >> General Web Development >> Keeping out the Spam...
Page: [1]
Jump to: 1





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts