ajax加载的表单是否需要验证码
我知道验证码用于预测提交的提交。但我想知道您是否需要单击按钮才能加载提交表单，那么您是否需要该表单上的验证码？
垃圾邮件机器人会点击该按钮来加载表单吗？除非是人类垃圾邮件，我认为这是我们无法避免的！
例如，这是我的jquery，
$('#get-submit-form').click(function(){
element.load('submit-form.php', function(){});
})
I know that captcha is used to project the submit of a submit. But I wonder if you are required to click a button in order to load the submit form, do you need the captcha on that form then?
Will the spam robots click on that button to load the form? Unless it is human spam which no way we can avoid I think!
For instance, this is my jquery,
$('#get-submit-form').click(function(){
element.load('submit-form.php', function(){});
})
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
CAPTCHA 旨在防止自动化工具（又称垃圾邮件机器人）访问。
如果允许 AJAX（实际上只是不会导致页面重新加载的 HTTP 请求）在没有此类防护（或替代限制，例如强制身份验证和问责制）的情况下工作，那么聪明/定制的机器人/工具可以随意发送垃圾邮件。至于“是否需要 CAPTCAH”取决于服务器是否需要它来执行给定的操作。
请注意，仅客户端验证码是无用的，甚至服务器端验证码也可以规避——这样的规避向量不需要它；-)
快乐编码。
A CAPTCHA is designed to prevent automated tools -- aka SPAM bots -- from access.
If AJAX (really just HTTP requests that don't cause a page reload) is allowed to work without such guards (or alternative limits such as mandatory authentication and accountablility) then clever/customized bots/tools can spam freely. As far as "is the CAPTCAH is required" depends on if the server requires it for a given operation.
Please note that a client-side only CAPTCHA is useless and even server-side CAPTCHAs can be circumvented -- one such circumvention vector is not requiring it ;-)
Happy coding.