Thread: Miscellaneous Hacks - NoSpam! - an alternative to CAPTCHA images
View Single Post
  #529  
Old 06-10-2007, 10:00 PM
antialiasis's Avatar
antialiasis antialiasis is offline
 
Join Date: Jan 2006
Location: Iceland
Posts: 346
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Phew, I haven't been on for a while.

Whoever asked for a feature to allow people to put images as the question: all you need to do is insert the HTML for an image as the question, as HTML will be parsed.

Everybody who has it installed and working but is still getting spam, I'm afraid this hack is logically 100% bot-proof until the day they create bots with flawless human intelligence, so if spammers are getting through, they are clearly human and impossible to stop with any sort of anti-spam system. (You could, of course, try to make more difficult questions - if, for example, all your questions are simple math problems, it is quite possible for bots to be programmed to pick up the numbers and mathematical operations from the string of text and enter the answer in a field, while if you ask random common-sense questions (and especially, if you own a specialized forum, answers that require some knowledge in a particular field that true members would have), they will be impossible for a bot to crack, and if they're difficult enough they might stop human spammers in their tracks as well, as they will not bother with spending time trying to Google the answer to the questions or something just to register at one forum.

The reason it is bot-proof (at least with decent questions) is that the answers to the questions are stored only on the server. From what I could understand of that other hack that will present the user with a choice of images, it offers very weak protection since the answer is in the filename of the image and all a bot programmer would need to do is be aware of this fact and make the bot extract the answer from the page when it is presented with the question. Here, there is no way to just retrieve the answer; it is all stored in the database, which the bot can't access, and the answer is never within the reach of anybody who does not actually know the answer to the question. Since bots do not have the artificial intelligence to be able to read a question, understand it and have the knowledge to answer it in more than some extremely limited cases (like the math questions mentioned above), it is impossible for them to get around it.
Reply With Quote
 
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01113 seconds
  • Memory Usage 1,766KB
  • Queries Executed 11 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD_SHOWPOST
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)post_thanks_box
  • (1)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (1)post_thanks_postbit_info
  • (1)postbit
  • (1)postbit_onlinestatus
  • (1)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • reputationlevel
  • showthread
Included Files:
  • ./showpost.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_postinfo_query
  • fetch_postinfo
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showpost_start
  • bbcode_fetch_tags
  • bbcode_create
  • postbit_factory
  • showpost_post
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • showpost_complete