Protecting submission form from bots without using captcha?

by 7 replies
9
Is there a good way to protect a submission form from bots without using captcha?
#programming #bots #captcha #form #protecting #submission
  • There's a wordpress plugin called anti-captcha. It uses a nonce to validate the form. The concept is pretty simple. If you aren't using wordpress, you can take a look at the code and see how it works.

    Something like this also works:
    Stop spam without captcha - Stack Overflow

    This page is referenced in that link and is worth a look on its own:
    http://www.braemoor.co.uk/software/antispam.shtml
    • [ 1 ] Thanks
  • What some sites do is generate a random variable on the submission page which is then "submitted" along with the other data. The backend checks if the random variable is correct and if not rejects the form. It's not foolproof but it's a deterrent.
    • [ 1 ] Thanks
  • 1234567890
  • As has been mentioned, a good way of doing this is to include a hidden field that most bots will fill out and submit, then reject submissions with that field. Something else you can do in conjunction with this is to track the submission time, it's very rare to find a bot that adheres to realistic human input time. So if check if your form was submitted in under a second or two and reject these submissions.

    Both of these methods together will likely be as effective as the majority of captchas out there!

    There are some fun captchas though, I'm a personal fan of Motion Captcha.
  • I include a randomly generated question on my contact form, e.g.,
    "How much is eleven times twelve?"
    Aside from bots, this may also filter out some inordinately stupid humans.
    • [1] reply
    • A randomly generated question is basically a captcha. Here is the definition of captcha: "a computer program or system intended to distinguish human from machine input"

      The OP wanted to know how to handle this without a captcha.
  • To cover such goal I do custom JS code which execute few expressions with screen and mouse - bots doesn't have them. And little of bots can execute JS at all.
  • Banned
    [DELETED]

Next Topics on Trending Feed