4 ms·
No no, the hidden input fields would not be filled in by a human (because they're positioned off screen by CSS, for example), whereas a bot would fill them in b
by toggle 13y ago
No no, the hidden input fields would not be filled in by a human (because they're positioned off screen by CSS, for example), whereas a bot would fill them in because the bot is just scraping the HTML for all input fields and filling them in with something.
It seems like you had that backwards -- hope that clears it up.
- tokenizerrr 13y agoWhy would I have my bot fill them in? One glance at the site and I know that my bot should skip those fields.
- matchu 13y agoIt's meant as a defense against non-targeted bots—the ones that roam the web looking for forms to fill out. I think that's where the issue lies: these tools do different things. Honeypot fields defend against general bots. Captchas defend against specific bots, too, but also have greater friction, so are only used when specific bots are an issue.
- Larrikin 13y agoI did my mom's website for her small law firm and I was getting tons of bots even with hidden form fields and they didn't look targetted. Captcha helped a lot but the spam didn't stop until I used both combined with special rules, like the phone number field has to have a certain amount of numbers.
- FiloSottile 13y agoOk, I thought it was intended as a counter-measure to targeted bots.