电子邮件垃圾邮件防护脚本
我有一个小型房地产虚拟旅游网站,访问者可以向代理商发送电子邮件询问信息。
我意识到我需要保护电子邮件表单以防止向我的代理发送垃圾邮件。
我想避免那些可怕的图像验证码,例如 reCAPTCHA。 还有其他选择吗?就像一个非常简单的数学问题,不需要用 GD 渲染图像?类似于:“2 + 3 = ?”
我在考虑数学,因为我有一个多语言网站,而且我不需要翻译字符串等。
时间保护怎么样?我想我以前见过这个。您需要等待 x 秒才能发送第二封电子邮件。也许是因为一些“锤击”脚本?
任何链接或灯光表示赞赏!
编辑忘了说,我正在使用AJAX(jQuery)发送数据,所以没有真正的表单可以提交..
I have a small real estate virtual tour website where visitors can email the agent asking for information.
I realize I need to protect the email form to prevent spamming my agents.
I would like to avoid those awful image captcha's like reCAPTCHA.
Are there any other options? Like a very simple math question, without having to render an image with GD? Something like: "2 + 3 = ?"
I was thinking math's because I have a multi language website and like I don't have to translate strings etc.
What about a time protection? I think I saw this before. You need to wait x seconds before sending a second email. Maybe because off some "hammering" scripts?
Any links or lights appreciated!
EDIT Forgot to say, I am sending the data with AJAX (jQuery), so there is no real form to submit..
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
1) 如果您想在页面上放置电子邮件地址 - 您可以对其进行编码,这样爬虫就看不到它。
您可以使用此工具来执行此操作:
http://www.artshipulin.com/stuff/email-address -to-html-entities.php
2) 这是一篇关于验证码的有用文章:
http://www.smashingmagazine.com/ 2011/03/04/寻找完美的验证码/
1) If you'd like to place email address on the page - you can encode it, so it will be invisible to crawlers.
You can use this tool to do that:
http://www.artshipulin.com/stuff/email-address-to-html-entities.php
2) That's a useful article on captchas:
http://www.smashingmagazine.com/2011/03/04/in-search-of-the-perfect-captcha/
只是一个注释。垃圾邮件变得越来越聪明,通常会使用不同的 IP 来攻击您的表单,因此时间保护会减少相同 IP 的垃圾邮件,但您可能还需要检查不需要的内容,如 url、bbcode、html 等。您可以使用数学方程式,但这些很简单对于垃圾邮件发送者来说可以很快破解。
验证码被广泛使用,因为它们简单而有效。一般来说,一个措辞问题比一个数学方程更有效(九加四而不是 9+4),但由于翻译是一个问题,你没有太多选择。
即使是“单击黑色方块”式的人工验证也需要您翻译指令,但显然比措辞问题涉及的工作量要少。这是通过随机放置 5 个不同颜色的方块并让用户单击特定的方块来实现的。这将需要 JavaScript,这也有助于防止垃圾邮件发送者,因为他们不渲染页面。他们关注原始来源
Just a note. Spam is getting more intelligent and will often use different IP's to attack your forms so time protection would reduce same IP spamming but you may also want to check for unwanted content like urls, bbcode, html etc. You can use math equations but these are simple to break quite quickly for a spammer.
Captcha's are widely used because they are simple, yet effective. Generally, a worded question would be more effective than a math equation (add nine and four rather than 9+4) but seeing as translation is an issue, your not left with many choices.
even a "click the black square" style human validation would need you to translate the instruction but obviously involves less work than worded questions. This works by randomly placing around 5 squares of different colours and getting the user to click a specific one. This would need javascript which also helps prevent spammers because they don't render the page. They look at raw source