Path

ez projects / ezsurvey_ezp4 / forum / general / feedback about spam bots ?


Feedback about spam bots ?

You need to be logged in to post messages in the forums. New users may register here.

gilles guirand

Member since:
09 January 2008

Posts: 4

Tuesday 15 September 2009 12:21:11 am

Hi,

I plan to use ez survey, but i worry about spam bots.

eZ Survey create content just after one single POST submit and i guess it could be dangerous (no confirmation, no CAPTCHA...)

Of course, i could add a captcha datatype (custom data type), but maybe someone already use another clever solution ?

Thx,

--
Gilles Guirand
eZ Community Board Member
http://twitter.com/gandbox
http://www.gandbox.fr

Up

Bjørn Reiten

Member since:
22 February 2008

Posts: 39

Tuesday 15 September 2009 12:42:40 am

One solution out of the box could be to force a user to log in before it's possible to send the form, since the survey itself are using the same permissions as an article, folder etc.
Up

gilles guirand

Member since:
09 January 2008

Posts: 4

Tuesday 15 September 2009 9:21:44 am

Of course, i need anonymous contributions... like a classic contact form.

Maybe, the simplest way is to change the default survey template, by displaying a first empty FORM before the real survey FORM (acting like the defaut /content/action POST -> /content/edit/ POST). Double POST is a good way to prevent spam bots.

Suggestion :
--------------
A confirmation page ('modify' button and 'confirm' button) could be a safe (anti spam because double POST) and an useful feature (printing).

--
Gilles Guirand
eZ Community Board Member
http://twitter.com/gandbox
http://www.gandbox.fr

Up

Eyvind Gerhard Sletten

Member since:
09 January 2008

Posts: 1

Friday 19 February 2010 10:34:26 am

We are trying out a javascript solution. Modified content/datatype/view/ezsurvey.tpl




<script type="text/javascript">


var survey_uri_form = {$node.url_alias|ezurl()};


</script>


 

<form enctype="multipart/form-data" id="survey_form" method="post" action='nospam'>




And in the javascript on the site:



jQuery(document).ready(function() {


        


        /* Spam protect survey */


        if(jQuery('#survey_form').length != 0) {


                var form_el = jQuery('#survey_form');


                if(form_el.attr('action') == 'nospam') {


                        form_el.attr('action', survey_uri_form);


                }


        }


});


Creative coder
Metabits, Norway
http://www.metabits.no

Triathlon, Running, Web & iOS dev, Novels and Cooking..
Personal sites:
http://www.gersh.no
http://www.gerhardsletten.no
http://www.surdeig.no

Up

You need to be logged in to post messages in the forums. New users may register here.