2 ms·
I second this. I've also noticed that bots always fill fields based upon their name attribute, so call your fields something other than "email" and "username"
by andymurd 12y ago
I second this.
I've also noticed that bots always fill fields based upon their name attribute, so call your fields something other than "email" and "username" and reject submissions where fld9624-v2 is not a valid email address.
- jrod2121 12y agoIsn't this basically the honeypot captcha or invisble captcha method? I don't think it would work as well since we our forms are submitted via ajax request, but I could be mistaken?
- andymurd 12y agoIt's my understanding that the spammers parse the form's HTML to determine which fields must be submitted and the URL to which they must be POSTed. Remember, you don't need a perfect solution to this. When you and another person are being chased by a tiger, you don't need to outrun the tiger, just outrun the other guy.