Re: (spam)secure mailform
Available news archives: comp.lang.tcl - comp.lang.python - comp.security.firewalls - sci.crypt - comp.lang.php - comp.lang.javascript
Google
 
Web news.hping.org


comp.lang.php archive

Re: (spam)secure mailform

From: Robertico <Robertico@nospam.notvalid>
Date: Sat Jul 16 2005 - 10:01:45 CEST

> Well, that is not 100%...for example a script can easily send the
> destination=whatever simply in a get command with telnet or custom script
> that connects to port and host and gets/posts the form.
> there are a couple of things you might want to do to make it harder for
> the
> spammers:
> 1)set a cookie with timestamp + host + ip + browser ( etc...) and check
> teh
> existence and validate the cookie upon script run
> 2)check the cookie of the one requesting the form in the first place and
> save that in the cookie, if no cookie when the script submission is
> carried
> out:or error arguments in it:spammer

And if a user disables cookies ?
Received on Mon Oct 17 21:08:28 2005