垃圾邮件打败了我所有的验证码
我有一个 WordPress 博客，我在上面使用验证码插件的时间最长，因为它有效。最近我收到了大量的垃圾邮件。然后我尝试执行通过 PHP 生成的“将这些随机数添加在一起”，但仍然没有成功。我不太确定需要做什么来阻止这些垃圾邮件，但这很烦人。
我正在阅读有关垃圾邮件发送者使用的某种视觉脚本 - 读取您的网页或其他内容，这就是验证码具有凌乱图像来阻止此类事情的原因。我在想，如果我在 PHP 随机数验证码后面放置一个动画 GIF 背景，也许会有所帮助，这样用户就很容易阅读，但对于机器人来说却很难。
无论如何我不确定我需要建议：S
I have a wordpress blog and I had the Captcha plugin on it for the longest time because it worked. Lately though I am getting mass amounts of spam. I then tried to do a "Add These Random Numbers Together" that were generated via PHP but still no luck. I'm not quite sure what I need to do to block this spam but it is quite annoying.
I was reading about some kind of visual script that spammers use - that reads your webpage or something thats why Captcha has the messy images to block this sort of thing. I was thinking that maybe it would help if I put a animated GIF background behind my PHP Random Number Captcha so it would be easy for a use to read but hard for a bot.
Not sure anyway I need suggestions :S
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（3）
与许多其他反社会行为领域一样，垃圾评论发送者也在不断改进他们的伎俩。验证码确实非常有效，直到垃圾邮件发送者实际上提高了 OCR 的技术水平。然后是“你是人类吗？”各种类型的测试——添加数字、识别图片等等——而这些都可以被……人类击败，非常廉价的人类。
这意味着，就像垃圾邮件一样，您需要提高自己的水平并开始查看评论/帖子的来源。如果您有一个针对美国、英国或其他一些大型、明确的地理区域的网站，则可以检查 IP 地址并将其用作“垃圾邮件或火腿邮件？”的一部分。计算。此外，您可以查看评论的内容，看看它是否充满了链接，或者几乎完全由一个链接组成。
将帖子限制为注册用户会有所帮助，确保所有第一条评论都由版主处理也有帮助。
我们使用的评分方法使用 IP 块包含和排除列表、链接计数（检查 HTML 和简单文本模式）以及最小评论大小。属于灰色区域的评论将被踢给管理员。这是一个面向美国的 Django 站点，因此我无法指出 PHP 类或 WP 插件，但这种组合大大减少了洪水。至少目前是这样。
As in many other areas of antisocial behavior, the comment spammers are constantly improving their game. Captcha was really effective, until the spammers actually improved the state of the art in OCR. Then there are the "are you a human?" types of tests -- adding numbers, identifying pictures, etc -- and those can be defeated by ... humans, very inexpensive humans.
This means that, just like email spam, you need to up your game and start looking at where the comment/post is originating from. If you have a site targeting the US, the UK, or some other large, well-defined geographic area, it is possible to check the IP address and use that as part of your "spam or ham?" calculation. Additionally, you can look at the contents of the comment and see if it seems to be full of links, or is composed almost entirely of just one link.
Limiting posts to registered users helps, as does making sure that all first comments are handled by a moderator.
We use a scoring method that uses IP-block include and exclude lists, link count (checking both HTML and simple text patterns), and a minimum comment size. Comments that fall into a grey area are kicked to a moderator. This is a US-oriented Django site, so I can't point to a PHP class or WP plugin, but this combination has substantially reduced the flood. At least for the moment it has.
使用 reCAPTCHA 怎么样？它具有易于使用的插件（例如PHP）。
How about using reCAPTCHA? It has plugins that are easy to use (PHP for example).
您可以使用许多公共验证码脚本，谷歌的“reCAPTCHA”就是其中之一，其他人希望用户说出照片或其他谜语上的内容......
问题是：您永远无法阻止人类垃圾邮件发送者。有时，解决您验证码的不是机器人，而是真人。甚至还有一项解决验证码的业务，人们获得报酬来解决验证码并为机器人提供解决方案。
我发现一种效果很好的解决方案：让垃圾邮件发送者很难（如果不是不可能的话）使用他们创建的帐户。垃圾邮件发送者只有那么多时间，因此当他们需要太多时间来实际发布到您的博客时，他们最终会消失。
含义：只允许人们发布您亲自批准的内容，只允许人们发布已发布的链接之前至少有X（有意义的）帖子。
我不了解wordpress，但这对我在phpBB有用，我确信wordpress有类似的插件。
There are lots of public CAPTCHA-scripts that you can use, Google's "reCAPTCHA" being one of them, others want the user to tell whats on a photo or other riddles ...
The problem is: You can never block human spammers. Sometimes it's not a bot that's solving your CAPTCHA but a real person. There's even a business for solving CAPTCHAs where people are paid to solve CAPTCHAs and provide bots with solutions.
One solution that I found is working pretty well: make it hard (if not impossible) for spammers to use the account they created. Spammers only have that much time so when they need too much of it to actually post to your blog, they'll go away eventually.
Meaning: let only people post that you approved personally, let only people post links that have posted at least X (meaningful) posts before.
I don't know about wordpress, but this worked for me in phpBB, I'm sure there are similar plugins for wordpress.