“发送电子邮件”公共网站的功能
公共网站向互联网访问者提供员工名单。联系信息被隐藏，但访问者可以通过弹出电子邮件表单发送电子邮件。
您对自动脚本/病毒/机器人垃圾邮件活动有何看法？ Capture 是此功能的“必须”吗？您还可以建议采取哪些预防措施？
先感谢您
Public web-site provides list of employees to Internet visitors. Contact information is hidden but visitor can send email via popup email-form.
What do you think about automated-scripts/viruses/bot spam activity? Is Capture a "must" for this functionality and what kind of precautions can you suggest also?
Thank you in advance
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
可能值得考虑一些基本的混淆：为表单字段使用非标准名称（例如，不要只使用“主题”、“提交”等）。您的表单与标准电子邮件提交表单的相似程度越低，标准化脚本就越不可能适用于它。当然，这并不能阻止坚决的垃圾邮件发送者。您可能还想防止电子邮件提交页面被搜索引擎索引，以使垃圾邮件发送者更难找到。
我还想说验证码（或重新验证码）非常重要。
It may be worth considering some basic obfuscation: use non-standard names for your form fields (e.g. don't just use "subject", "submit", etc). The less your form resembles a standard email submission form, the less likely standardised scripts will work for it. Of course, this will not stop a determined spammer. You might also want to prevent the email submission page from being indexed by search engines to make it harder for the spammers to find in the first place.
I would also say that a captcha (or recaptcha) is very important.
验证码可能是个好主意——只是为了避免来自愚蠢的机器人探测您的表单的消息。如果没有，您的用户可能最终会收到一堆烦人的消息。
除了确保提交表格的是真实的人之外，我没有想到其他任何事情。
A CAPTCHA is probably good idea -- just to avoid messages from dumb bots probing out your form. Without one, your users will probably end up getting a bunch of annoying messages.
Other than ensuring that it's actual person submitting the form, there's not much else that comes to mind.