gwendolyn wrote:Indigo wrote:Please please, please can't you implement some sort of simple "captcha" image prior to posting like this,
A javascript based hashcash might be a less obtrusive solution for a lot of people, it's basically a brute force script that calculates a value that proves your computer spent time creating the post. Most bots don't run javascript so they just send blank codes which can be dumped in the spam bin and the ones that do run it still get slowed down by quite a bit. (there's a plugin for wordpress for this, not sure about phpbb)
Hmmn. I don't think thats a good solution. You can check which data is being sent to the server nontheless, so you would just generate the formfield your java-script usually generates "manually", and send your timecode with the rest of the code.
So this may stop some bots, but it would be still possible to mass-spam, when you alter your bot or write a new one.
Good Captchas are probably the only safe solution. But Captches are not quite userfriendly. And when they are "good" they are often hard to read, and so they can easily become a usability-killer.
Email Verification, before an account can create posts, and using blacklists of "bot-mail-provider" may be a good solution though.
Hmnnn...
// Oh, and welcome to the forums!!
