Spam Prevention

Anti-Bot Forms

Summary

Anti-Bot Forms adds a defensive alteration to site forms, requiring the
user to process Javascript on the page in order for a form to submit without
errors.

Few spam bots implement a Javascript engine, and most of the bot traffic an
average site sees are drive-bys: the bot hits the site in the hope that it's
running a specific widely used platform, and tries to be as economical as
possible in delivering spam.

Thus most spam bot traffic can be blocked just by requiring Javascript activity
in order to submit forms.

Caveats

This won't work for large sites that merit individual attention from spammers.
It won't work if lots of people choose to use exactly the same tactic in their
fight against spam bots. It also does nothing to block manually submitted spam.

Variety is Key

Adding Javascript to forms in order to block bots is only effective if everyone
uses a slightly different approach. There are many, many ways to put that
Javascript onto the page and then alter a form's fields, and only variety in
those ways can prevent spammers from simply using regular expressions to bypass
the most common forms.

Thus Anti-Bot Forms offers hooks to allow you to replace the default method of
altering forms with one of your own that uses different Javascript to achieve
the same end result. It is recommended that you do so.

My Demo Drupal Module

This is a demo sandbox module

spam filter

Overview:
The Spam Filter module checkes the text content of nodes and comments for existence of any spam-text as a substring. If any spam-text is found the corresponding node or comment is set as unpublished. The spam-text are stored on database and new text can be added, deleted and edited using the UI provided by the module. There is a Validate Content section using which a text-paragraph can be tested against the current list of spam text.

Features:

  • Users can add/delete/edit spam-text which makes the spam-filter dynamic.
  • "Validate Content" section can be used to test a paragraph of text for spam.

Requirements:
This module is for drupal 7.

CAPTCHA AJAX Fix

Fixes "CAPTCHA session reuse attack detected" messages on certain AJAX-submitted fields (currently the File module's Upload field).

Read more

SpamBlockerDB

This module is aimed to call external Spam Databases in order to have information on the new users who are registering on your site.

Enkoder for Drupal

Want to guard against spam? Want to make sure sensitive information isn't easily nabbed by an automated script?

Use Enkoder for Drupal! This uses the logic behind Hivelogic's Enkoder to encode any field or arbitrary text in a recursively self-evaluating block of javascript, foiling all but the hardiest of spambots.

You can use this to harden any text-based field and this module also exposes a general-purpose php function (sclib_enkoder) for your own custom uses.

This module is supported by time from the Sierra Club.

Why use this?

In my examination of the Drupal module landscape, SPAM-hardening solutions either tend to be focused on forms (like CAPTCHA) or provide very limited email encoding (such as by providing HTML entity encoding or exposing an input filter).

By using this module, you

  1. can arbitrarily harden any core text field, even ones that don't use an input filter
  2. can arbitrarily harden any text, not just things look like email addresses.
Read more
Subscribe with RSS Syndicate content
nobody click here