Gossamer Forum
Home : Gossamer Threads Inc. : Custom Modification Jobs :

Stop Auto-Submission Plugin

(Page 1 of 2)
> >
Quote Reply
Stop Auto-Submission Plugin
I would like to add an anti auto-submit feature to my add.cgi (Links SQL 2.05). Ideally I was thinking along the lines of the system AltaVista use, ie. generate an image containing a string of numbers and letters that must be entered into a field on the form by the user for the submission to be accepted.

Eg: http://addurl.altavista.com/addurl/new

I have found a few posts that mention this idea, but it doesnt appear that anyone has undertaken it as yet. It is certainly beyond my capabilities, and I was wondering how much one of you guys would charge to do this plugin for me.

Mark
Quote Reply
Re: [marker] Stop Auto-Submission Plugin In reply to
I take it that restricting which hosts are allowed to add to your database (in the configuration file) is not restrictive enough?
Quote Reply
Re: [marker] Stop Auto-Submission Plugin In reply to
So, basically it needs to create an image, and then make them type that selection of random images/text into a verification box? I don't see why this couldn't be done by making a random selection of letters in a .gif, and then adding a session ID to the database, which would then be verified with what they entered in the database...i.e the only way to findout the query string, is to look at the database, or view the image....I would imagine it would be pretty hard for a spider/autosubmission script to work it out.

Is this the kind of thing you are looking at?

1) Enter verification code...
2) Check with DB, If correct, then show them the add form...if not, show them an error page...

I may look at creating something like this. I would need to have a play with the creating of images first though.

Cheers

Cheers

Andy (mod)
andy@ultranerds.co.uk
Want to give me something back for my help? Please see my Amazon Wish List
GLinks ULTRA Package | GLinks ULTRA Package PRO
Links SQL Plugins | Website Design and SEO | UltraNerds | ULTRAGLobals Plugin | Pre-Made Template Sets | FREE GLinks Plugins!
Quote Reply
Re: [Andy] Stop Auto-Submission Plugin In reply to
If the spider is specifically written to spam Links SQL sites then using random images is really easy to bypass.

The trick is to use _one_ image with random letters Tongue

Last edited by:

Paul: Jan 17, 2003, 7:04 AM
Quote Reply
Re: [Paul] Stop Auto-Submission Plugin In reply to
Yeah, thats what I was on about. Using a random image....say fgefsdf424.gif, with a random string, say F 4 ! G i, which the user would have to type in first, before it would let them onto the main addition part...

Cheers

Andy (mod)
andy@ultranerds.co.uk
Want to give me something back for my help? Please see my Amazon Wish List
GLinks ULTRA Package | GLinks ULTRA Package PRO
Links SQL Plugins | Website Design and SEO | UltraNerds | ULTRAGLobals Plugin | Pre-Made Template Sets | FREE GLinks Plugins!
Quote Reply
Re: [Andy] Stop Auto-Submission Plugin In reply to
Rather than creating a single image dynamically (with the GD module or whatever), an easier, more CPU friendly option would be to have separate images for A-Z, a-z and 0-9, and place a selection of them side by side to create a unique word.

Code could be reused from any number of open source counter scripts, and shouldn't require any extra modules. Wink

Just make sure that you use a "*" character or similar in the ALT tags.
Quote Reply
Re: [wysardry] Stop Auto-Submission Plugin In reply to
As Paul just said though, adding that really wouldn't do anything...cos a script could easily work out the conbination by simply viewing the <img tags, and seeing what image is being called. It would really need tobe done by the GD library, or similar.

Cheers

Andy (mod)
andy@ultranerds.co.uk
Want to give me something back for my help? Please see my Amazon Wish List
GLinks ULTRA Package | GLinks ULTRA Package PRO
Links SQL Plugins | Website Design and SEO | UltraNerds | ULTRAGLobals Plugin | Pre-Made Template Sets | FREE GLinks Plugins!
Quote Reply
Re: [wysardry] Stop Auto-Submission Plugin In reply to
Here's how it's done:

http://www.captcha.net/

Ivan
-----
Iyengar Yoga Resources / GT Plugins
Quote Reply
Re: [Andy] Stop Auto-Submission Plugin In reply to
Quote:
Yeah, thats what I was on about.

Well actually you said "images" which is plural Wink
Quote Reply
Re: [Paul] Stop Auto-Submission Plugin In reply to
Mmm...very true :p I should start re-reading my threads a little closer...lol

Andy (mod)
andy@ultranerds.co.uk
Want to give me something back for my help? Please see my Amazon Wish List
GLinks ULTRA Package | GLinks ULTRA Package PRO
Links SQL Plugins | Website Design and SEO | UltraNerds | ULTRAGLobals Plugin | Pre-Made Template Sets | FREE GLinks Plugins!
Quote Reply
Re: [Andy] Stop Auto-Submission Plugin In reply to
No, because the image tags wouldn't contain an image name in the src attribute, but a perl script instead.

i.e. <IMG SRC="imager.pl?123-3"> where 123 is the cat id and 3 is the position in the row of letters.

You can't tell what the images on the counter at http://io.spaceports.com/...dry/cgi/multihit.htm are without physically looking at them or using a very complex OCR program.

In case you're wondering, the script reads the .gif file then prints an image/gif content header followed by the binary data. All that would need to be done is for the value of the character represented to be exchanged between the display script and the word checker.

A dictionary of ready-made words in a MySQL table, or even something randomly generated in a temporary text file or db row would do. Smile
Quote Reply
Re: [wysardry] Stop Auto-Submission Plugin In reply to
Of course there is a much easier way than using images :)

I won't tell you how, I'll just make a plugin and release it later today or tommorrow.

Bahah.
Quote Reply
Re: [Paul] Stop Auto-Submission Plugin In reply to
Go ahead...I'm busy on custom work...just thought it would be an interesting project to look at :)

Andy (mod)
andy@ultranerds.co.uk
Want to give me something back for my help? Please see my Amazon Wish List
GLinks ULTRA Package | GLinks ULTRA Package PRO
Links SQL Plugins | Website Design and SEO | UltraNerds | ULTRAGLobals Plugin | Pre-Made Template Sets | FREE GLinks Plugins!
Quote Reply
Re: [Andy] Stop Auto-Submission Plugin In reply to
Merci bucket.
Quote Reply
Re: [Paul] Stop Auto-Submission Plugin In reply to
Of course you wouldn't have to read physical images every time, you could read each one once and store the binary data in a database.

I suggested images plural, because that would allow complex words to be made using basic building blocks (letters and numbers). It would probably be possible to merge them into a single file, but that sounds a little too complex for such a basic problem.

Having each letter/number is different fonts and sizes would also give OCR programs a harder time of things. Having 3 or 4 versions of each alphanumeric character, chosen at random, would also confuse things further.
Quote Reply
Re: [wysardry] Stop Auto-Submission Plugin In reply to
I'm not using images for my plugin.
Quote Reply
Re: [Paul] Stop Auto-Submission Plugin In reply to
It will be interesting to see what you come up with that is as easy to read for humans, as hard for programs to recognize and doesn't require a particular browser or plugin. Smile
Quote Reply
Re: [wysardry] Stop Auto-Submission Plugin In reply to
Hi guys,

I really appreciate your intrest in this.

wysardry, restricting which hosts submit, doesnt seem to stop these guys, I have also done the obvious things like adding hidden fields here and there, but its usually only a day or two and they are onto that. One of my databases has been recieving anything up to 1000 auto-submitted links a day, and to be honest its getting a bit much, thats why I figured something like that used in the altavista submission form would hopefully put a stop to it once and for all.

I have seen other methods discussed including using cookies, but with each of these other methods someone always seems to post a work around straight after. I may be wrong in my thinking, but I assumed the image idea would be the most secure way.

Andy, yes that is the sort of thing I was thinking about, I had actually thought that I would probably include it in the add.html page. The idea being that the submitter must fill in the form as normal and then copy the text displayed on the image into a field in the form (as per the AV page), click submit, and then the text entered into that field would be checked, if correct , the submission would be accepted otherwise an error message displayed.

Paul, I must admit, my initial thought was also to use 1 image with random text, but I think I understand what wysardry is suggesting.

I would greatly appreciate anything you guys could come up with Smile
As I said , This is way beyond my skills.

Upon further searching I did find a site that is planning on offerering such a service, but it appears not to be available as yet, plus I think this one is going to be a subscription type service and I would much rather keep it all on my own server.
http://www.formsentinel.com/
Quote Reply
Re: [marker] Stop Auto-Submission Plugin In reply to
If you can wait 24 hours to see what I come up with you can always give it a try and see if stops those meanies spamming you :)

You might be surprised.
Quote Reply
Re: [Paul] Stop Auto-Submission Plugin In reply to
Hi Paul,

I'll gladly wait 24 hours mate Smile
Quote Reply
Re: [Paul] Stop Auto-Submission Plugin In reply to
So, where is that solution of yours?????

Ivan
-----
Iyengar Yoga Resources / GT Plugins
Quote Reply
Re: [yogi] Stop Auto-Submission Plugin In reply to
I've been speaking to marker in private. There are a few bugs that need fixing (which I should have already fixed but had to do some other stuff...sorry) but it should be ready before the weekend.
Quote Reply
Re: [marker] Stop Auto-Submission Plugin In reply to
why not require users to be registered to submit a link?

Just a thought...

Klaus

http://www.ameinfo.com
Quote Reply
Re: [klauslovgreen] Stop Auto-Submission Plugin In reply to
That won't stop spam. I could sign up using a fake account and then spam.

I guess it may help a little though.

Last edited by:

Paul: Jan 22, 2003, 2:11 PM
Quote Reply
Re: [Paul] Stop Auto-Submission Plugin In reply to
Hmmmmmm! And the thread ends! Did anyone come up with a useable Captcha mod for Sql add.cgi? I've been trying but need to get on with other things.. I have reasonable people trying to add sites to the directory, but we can't leave the add or the rate it page operating.. Talked to the GT rep who helps me and she said no help from the updates because our directory does not charge..
A Team FOG
> >