4 ms·
Akismet is a third party service that works really well. You send data there with a HTTP POST and it will reply with a yes or no, it is spam or not spam. It is
by mpol 7y ago
Akismet is a third party service that works really well. You send data there with a HTTP POST and it will reply with a yes or no, it is spam or not spam. It is not that hard to implement. You do have to be aware that you are sending user data to that service, which you have to mention in your privacy policy.
Stop Forum Spam is a similar third party service. You send it an ip address and an email address. It will reply on both items if it is spam, together with a confidence level. Quite interesting way to reply :) It is originally intended to fight registration spam, but you can use it for comment spam or contact forms as well.
JavaScript spamfilters can be very usefull. Most spambots do a HTTP GET for a page with a form. They fill in all the fields and submit it with a HTTP POST. They don't run any JavaScript on that page. You can have honeypot and timeout fields on a form that get manipulated by JavaScript, and spambots will not validate. Works really well, and all transparent to the user. The only "risk" is that in the future spammers might start using more sophisticated spambots, like using Electron or Chromium. I implemented spamfilters like this in a WordPress plugin and it works really well for me: https://wordpress.org/plugins/la-sentinelle-antispam/ https://wordpress.org/plugins/la-sentinelle-antispam/
- avian 7y ago> The only "risk" is that in the future spammers might start using more sophisticated spambots You’re also making your website unusable for people with Javascript blocked or disabled in their browsers.
- mpol 7y agoIn the context of the question, that is not relevant. reCAPTCHA requires JavaScript as well. The question is about an alternative to reCAPTCHA. Both methods use JavaScript. I do understand where you are coming from though. And I also think this alternative is better in this regard. reCAPTCHA loads JavaScript from a third-party domain. With JavaScript spamfilters you are loading them from the first-party domain.
- ChrisSD 7y agoreCaptcha has a noscript alternative with iframes and checkboxes. Once completed you have to manually copy an authorisation string to a field and submit it.
- mpol 7y agoThat I didn't know. I don't remember ever seeing it, I suppose it is not used much?
- killahpriest 7y agoI don't think the noscript alternative works anymore. I get this message "Please enable JavaScript to get a reCAPTCHA challenge." https://www.google.com/recaptcha/api2/demo https://www.google.com/recaptcha/api2/demo
- ChrisSD 7y agoHuh, last time I hit a cloudflare website on Tor it directed me to https://www.google.com/recaptcha/api/fallback?k=.. https://www.google.com/recaptcha/api/fallback?k=... Perhaps that's just a cloudflare thing.
- IgorPartola 7y agoWhy stop there? I block HTML on all websites. Can’t show me ads if HTML is blocked. I also usually browse the web through an Ethernet connection. Don’t trust WiFi. And to make it more secure, my cables only have three wires in them. Less wires means fewer places for hackerz to hide.
- dang 7y agoPlease don't do this here.
- dageshi 7y agoI can't think of any reason why js would be disabled in a browser other than by personal choice? In which case you're making the website unusuable for yourself.
- rahuldottech 7y agoIt's often disabled by people who use screen readers, or by users who care about their privacy. If your regular website (not a webapp) doesn't work without JS, then you're failing as a dev.