匿名用户的注意事项
因此，我正在开发的 Web 应用程序允许匿名用户输入（以及他们对标记系统的参与）。
至于垃圾邮件问题，使用蜜罐方法或者在这种情况下是否需要图像验证码（例如reCAPTCHA）？
对于标记系统，如果我想让匿名用户“标记”帖子，那么仅允许每个 cookie 标记（每个帖子）是不够的，因为他们可以控制 cookie（并且可以绕过此预防）。那么我应该只允许每个 IP 有一个标志，对吗？我知道这种方法会阻止共享相同 IP（是的，公司网络等）的用户标记到同一个帖子，但没有其他方法可以解决这个问题，不是吗？
如何确保匿名用户的匿名性？我的意思是，如何防止他们的帖子被“跟踪”（如果可能的话）。我知道每个服务器都有每个连接的日志，那么，是否可以隐藏它们的日志？
任何帮助将不胜感激！
So, the Web application I'm working on allows input from anonymous users (and their participation in the flagging system).
As for the spamming issue, would it be enough to use the honeypot method or is an image CAPTCHA (e.g. reCAPTCHA) necessary in this case?
For the flagging system, if I want to let anonymous users to "flag" posts, it's not enough to allow a flag (per post) per cookie because they have control over the cookies (and could bypass this prevention). I should allow ONLY a flag per IP then, right? I know that this method would prevent users that share the same IP (yeah, corporate networks, etc.) to flag to the same post, but there is no other way around it, is there?
How can I ensure anonymous users' anonymity? By this I mean, how to prevent their posts to be "tracked" (if this is even possible). I know that every server has a log of every connection, so, is it possible to hide theirs?
Any help would be greatly appreciated!
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
如果您的网站很受欢迎，蜜罐就没用了，因为人们会为其编写自定义机器人。对于标记，您可以将其限制为每个 cookie 一个，并通过 IP 对其进行速率限制。这样，公司网络等上的人们会有点不便，但也不是完全不走运。
记录内容以及保留时间完全取决于您。默认情况下，请求 IP 可能会被记录，但您没有记录它。大多数网站都会这样做，但真正的区别在于它们保留的时间。
Honeypots are useless if your site is popular, because then people will write custom bots for it. For the flagging, you can limit it to one per cookie, and rate-limit it by IP. That way, people on corporate networks, etc. will be a little inconvenienced but not completely out of luck.
It's completely up to you what you log and how long you keep them. By default, the request IP may be logged, but you don't have to log it. Most sites do, but the real difference is how long they keep it.