不同的验证码方法
重新格式化为一个问题......
拖放是一个很好的方法吗? 即,这是否是只允许人类提交表单的好方法?
原文:
你可以开始投票反对,但我是 新手,这是我的验证码版本!
验证码将基于拖动和 掉落...
人类可以实现拖动和 降低。 机器人?
只是一个想法!
Reformatted into a question....
Is drag and drop a good catcha method? I.e. would it be a good way of allowing only humans to submit a form?
Original text:
You can start voting down but i am a
newbie and here is my captcha version!The captcha will be based on drag and
drop...a human being could implement drag and
drop. A bot?Just a thought!
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(5)
根据我的评论,它已经完成了,一个例子这里 :)
Per my comment, it's already been done, one example here :)
拖放什么? 这里的问题不是行为。 计算机可以通过编程方式拖放。 这里的问题是计算机不能做或不能做好的事情。 例如,最近的想法建议将图像正面朝上。 就像一只倒立的狗需要垂直翻转,或者一个停车标志需要顺时针旋转 45 度。 更复杂的图像是孩子们倒挂在猴子栏上等。
仅靠拖放是无法解决问题的。 您将拖动什么,并将其放在哪里;)
Drag and drop what? The thing here is not the behavior. A computer can drag and drop programmatically. The issue here is things computers cannot do, or do well. For instance, recent ideas have suggested orienting images right-side up. Like a dog upside down needing to be flipped vertically, or a stop sign needing to be oriented 45 degrees clock-wise. More complicated images would be children hanging upside down on monkey-bars, etc.
Drag-and-drop won't cut it alone. What will you be dragging, and where will you be dropping it ;)
另一个需要解决的问题是,如果用户禁用了 JavaScript,拖放系统将如何工作。 (您需要回退到某个东西,并且该东西也需要难以伪造。)
话又说回来,HTML5可能解决这个问题,只要您不这样做本世纪任何时候都不需要主流浏览器支持。
Another issue to address is how a drag and drop system would work if the user has JavaScript disabled. (You'd need to fallback to something and that something would also need to be hard to fake.)
Then again, HTML5 might resolve this issue as long as you don't need mainstream browser support any time this century.
任何基于 javascript 的验证码都可以(不需要做诸如拖放之类的花哨的事情)。 唯一的问题是可访问性和对没有像样 JavaScript 的浏览器的支持(你好 IE Mobile?)
Any javascript-based CAPTCHA will do (no need to do fancy stuff like drag and drop). The only problem is accessibility and support for browsers without decent javascript (hello IE Mobile?)
这是一个好主意,方向正确。
人们应该防止将验证码传递给 3D 方人类解算器血汗工厂(它们不直接与被破解的网页板交互)
但是提到的
机器人在 5 次猜测中 100% 通过,而机器人有 15 次猜测锁定前-20。
我询问过的垃圾邮件机器人开发人员只是将其称为“一个伪装的陷阱”。
我正在调查垃圾邮件和反垃圾邮件技术,建议研究 KeyCAPTCHA 插件。
有关更多详细信息,请参阅我的另一个答案。
This is nice idea in correct direction.
One should prevent passing captcha to 3d party human solvers sweatshops (which do not directly interact with web-boards being cracked)
But the mentioned
is 100% passable by bots in 5 guessing, while bots have 15-20 before being locked.
The spambot devs I asked about it just called it "a masqueraded trap".
I am making survey of spam and anti-spam techniques and would recommend to look into KeyCAPTCHA plugin.
See my another answer on it for more details.