|
|
|
|
|
by slindstr
5487 days ago
|
|
That's a pretty cool idea, but I don't like that it's an added step for the user when submitting a form. I used to get a TON of spam on my website(s) until I threw in a hidden text field. When the form is submitted I assume the submission is spam if the hidden text field's value isn't blank. I don't get spam anymore and people don't have to mess around with a captcha (plus nobody's complained). ...although I'm sure it's only a matter of time until the spammers figure this technique out. |
|
I use the "honeypot" field trick as well, and really like it, but this approach has some problems worth mentioning.
For one, make sure you give real users a way to contact you if they somehow get trapped -- you'd think it won't happen, but have you tested every available form-filler plugin out there? A few months ago Google released a new version of Chrome that started putting email addresses into my hidden field. Maybe Chrome thought it was a "confirm your email" field? No idea; I fixed the problem by adding an HTML label for it. But it's a damned good thing I wasn't just secretly discarding the input, or I'd have lost a lot of purchases.
Next, as you mentioned, if anyone targets you specifically, it's trivial to circumvent this with a single line of code in a bot.
There are ways to make it harder to circumvent, though -- use all random field names, insert the hidden field at random locations in the sequence of fields, etc.. I'm still using the simple approach, though, since it's still working. :)