Welcome to the Question2Answer Q&A. There's also a demo if you just want to try it out.
+6 votes
504 views
in Q2A Core by

1 Answer

–1 vote
by
I do not think this is useful ,as spam not use text box ,They send http request directly
by
That is irrelevant. Or rather, that's exactly the point. Bots tend to fill in all fields of a form, so their HTTP request will contain data for the hidden field, whereas normal users won't see the field and therefore don't fill in data. This difference can be used to handle bot requests. See here for a more detailed explanation: https://sarathlal.com/simple-spam-protection-on-contact-forms-using-hidden-input-field/
by
May be a textbox with "Leave blank" placeholder will work better :)
by
+1
Please read the article I linked.
by
Oh I missed the CSS part. I guess we should do it in Q2A core as this is useful to everyone.
by
Do not think so.
Normally the bot manager will send a test post to analyze the body of the test request which text field should fill, and add the required field to the bot request, in this condition , hidden the text is not useful
by
*sigh* Really? Did you read the article I linked? The field is hidden via CSS. If a spammer processes the form with some automated tool, that tool will most likely ignore the CSS, so when sending a request they'll send it with *all* fields filled in. A regular user (using their browser) will *not* see the field, and therefore their request will *not* have data in that field.
by
"will most likely" is just the author's guess
If I am a spam bot manager , I will check which is the most useful field manually and just post these field only
by
+1
Your assumption that there will be any manual verification by a spam bot "manager" is incorrect. For the *vast* majority of spam bots at least.
...