Preventing spam and bots using JavaScript generated checkbox -


i've read 1 can deter bots using js create checkbox in form must set (i.e. http://uxmovement.com/forms/captchas-vs-spambots-why-the-checkbox-captcha-wins/). strategy effective? user need physically check box, or can client side js used check well?

the article seems fishy me. checkbox captcha seems decent defense against spam bots blindly fill out forms, knowing nothing website happen on, if writing bot has sort of insight page, benefits end there.

in end, matters http post. if post can verified server, doesn't matter how post created or script may have run on client. if server looking post value called notabot has value equal 1, spam bot can include value in own post, server doesn't know if checkbox created through client-side script.. if value must equal random value provided in initial html, spambot can scrape value well. if value must match value provided on image, you've created captcha.

in end it's cost/benefit analysis depends on risk tolerance of spam versus desire usability. running smaller website, perhaps every post can moderated human before allowed. perhaps won't enough spam warrant decrease in usability. if you're running huge site used millions, perhaps more aggressive measures ward off bots necessary. it's call make.


Comments

Popular posts from this blog

html - How to style widget with post count different than without post count -

How to remove text and logo OR add Overflow on Android ActionBar using AppCompat on API 8? -

javascript - storing input from prompt in array and displaying the array -