Recently we have begun to experience an increase in spam generated from some of our web (HTML) forms. How do you deal with this? I'm concerned that some solutions may be inaccessible (I.e. CAPTCHA).
The trick is to add something to the filling out of the form that requires human level cognition, or give the bot a field that it will fill in that a human can't see.
I use a double pronged approach on some of my forms.
I have a field that must remain blank (or else it returns a message saying that we suspect you may be a machine). You have to be careful what you name those remain blank fields for a couple of reasons: 1) Google Toolbar autofill - it might stick a value in there unbeknownst to you and 2) It has to make sense to someone who might be seeing the field with a screen reader (maybe that's not an issue if you set the visibility off).
Secondarily I put a hidden field in my form that is populated when the onclick event fires on the submit button. I then check for that form value on the server side to make sure it's populated with the correct value. This should prevent bots from posting to my page. It basically requires the human interaction of clicking on the button to pass validation.
I'm not sure what the second option does to accessibility. I do not know how screen readers handle onclick events in JavaScript. I guess my assumption is that when you click enter on a button it fires that event so it should work just fine. Its also right in line with the kind of client-side validation that most people have on their forms anyways (like checking that required fields are filled in).
If you're interested in some code let me know.. I was going to blog about this, but have not gotten around to it.
Wouldn't the alternative of checking the referring script on the post page be better than your second technique since it doesn't rely on Javascript? Is there some reason why you wouldn't do it that way?
Checking the referrer is probably a better way. I wasn't really familiar with that approach until I started reading this thread. Thanks for suggesting it.
I have been using reCAPTCHA (http://recaptcha.net/) on some of our forms with success. I am sure it will only be a period of time before this is useless as well. It has an audio CAPTCHA built in for accessibility, and is fairly easy to implement.
Seconded. I have had great results on our blogs with reCAPTCHA. The only spam comments that have come through are obviously human. Before that they were getting hit so much I have to have registration on, which meant no one went through the effort required to comment.
I'm in the minority, but I refuse to put the onus on the user in any way. Instead, I do all the spam prevention on the backend. I use Akismet whenever possible, like this form.
The forms we were having problems with did not ask for any urls. So, I wrote a script that checks each item in the object. If any of them contain "http://" then the script stops and returns to the form page.
Greetings,What are you all doing online with "old" magazine stories? Do you delete issues after so many years? 5 years? 10? I'm torn between keeping all on for historical purposes or keeping just a few years online to simplify the site (ala Gerry McGovern.) Curious as to what you see best practices being.ThanksSara KisseberthBluffton Universitywww.bluffton.eduSee More
The HighEdWeb 2020 Accessibility Summit is a one-day, online conference about digital accessibility in higher education happening June 25, 2020, from 10 a.m. to 5 p.m. CDT.Join in to learn best practices, share stories and connect with your higher ed peers on topics including social media accessibility, web development, user experience and more. Sessions are designed to boost knowledge at every level, from accessibility beginners to technical experts. Conference registration is $25, with…See More
October 19-20, 2020https://2020.highedweb.org/#HEWeb20 Join us ONLINE for HighEdWeb 2020, the conference created by and for higher education professionals across all departments and divisions. Together we explore and find solutions for the unique issues facing digital teams at colleges and universities. In 2020, the Conference will be held completely online, offering multiple tracks of streamed presentations, live…See More
"Throughout April, we're hosting webcasts exploring how colleges and universities across North America are responding to the COVID-19 pandemic. Register for the series today! https://bit.ly/2xsXhK9"
"Download our latest white paper to learn how the demographics of today’s higher ed learners are shifting, and how schools can adapt to meet the needs of these new learners. https://bit.ly/2wTKdgB"
"As we ride out the latest developments and impact of the coronavirus, there's no better time than now to learn the three Bs of crisis planning. http://bit.ly/2ITVkc2"
"Is your college or university prepared to meet the challenges that come with disasters and emergencies like the coronavirus? Learn how your CMS can help. http://bit.ly/2TUZUM8"
"Can’t afford the time and money to launch a comprehensive guided pathways model? Register for our FREE webcast to learn tricks for simulating a digital guided pathways experience."
"With college enrollment decreasing for the 8th year in a row, boosting your college or university marketing efforts is more important than ever. Here's how to get started. http://bit.ly/2vTQAzz"
October 18-21, 2020 in Little Rock, Arkansas, USAhttps://2020.highedweb.org/#HEWeb20 Join us for HighEdWeb 2020, the conference created by and for higher education professionals across all departments and divisions. Together we explore and find solutions for the unique issues facing digital teams at colleges and universities. With 100+ diverse sessions, an outstanding keynote presentation, intensive workshops, and engaging networking events,…See More
The 2020 Annual Conference of the Higher Education Web Professionals Association (HighEdWeb) will travel to Little Rock, Arkansas, this October 18-21 — and the call for proposals is now open! As a digital professional in higher education, we know you have great ideas and experiences to share. From developers, marketers and programmers to managers, designers, writers and all team members in-between, HighEdWeb provides valuable professional development for all who want to explore the unique…See More