Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:11393 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 68385 invoked by uid 1010); 20 Jul 2004 20:18:06 -0000 Delivered-To: ezmlm-scan-internals@lists.php.net Delivered-To: ezmlm-internals@lists.php.net Received: (qmail 68358 invoked from network); 20 Jul 2004 20:18:06 -0000 Received: from unknown (HELO jdi.jdimedia.nl) (212.204.192.51) by pb1.pair.com with SMTP; 20 Jul 2004 20:18:06 -0000 Received: from localhost (localhost [127.0.0.1]) by jdi.jdimedia.nl (8.12.11/8.12.11) with ESMTP id i6KKI5Gg014068 for ; Tue, 20 Jul 2004 22:18:05 +0200 Received: from localhost (localhost [127.0.0.1]) by jdi.jdimedia.nl (8.12.11/8.12.11) with ESMTP id i6KKI4TF014052; Tue, 20 Jul 2004 22:18:04 +0200 Date: Tue, 20 Jul 2004 22:17:59 +0200 (CEST) X-X-Sender: derick@localhost To: Daniel Convissor cc: PHP Internals List In-Reply-To: <20040720193826.GA14960@panix.com> Message-ID: References: <6.1.2.0.0.20040720175549.04278000@127.0.0.1> <1743636665.20040720125308@ionzoft.com> <20040720172122.GA10712@panix.com> <20040720183244.GA24359@panix.com> <4e89b426040720121725e6933e@mail.gmail.com> <20040720193826.GA14960@panix.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Virus-Scanned: by amavisd-new at jdimedia.nl Subject: Re: [PHP-DEV] Spammer on Bugs page From: derick@php.net (Derick Rethans) On Tue, 20 Jul 2004, Daniel Convissor wrote: > Hi Wez: > > On Tue, Jul 20, 2004 at 08:17:04PM +0100, Wez Furlong wrote: > > I know this is just a quick measure, but isn't the whole idea to not > > emit the code in plain text on the form? It's really very easy to > > scrape it out. > > Yes, it is simple to scrape. But, I suspect that the problem is coming > from bots making direct POST's rather than doing a page view and then > submitting therefrom. Of course, I could be wrong. Even if I'm right > now, nothing is preventing someone from making a smarter bot. You're wrong, for each comment there were four requests done with curl... I doubt that this is going to work at all. regards, Derick