How to Prevent SPAM without CAPTCHAs or a Centrally managed system (e.g. akismet)

by

I basically use one trick on my site to prevent Spam and it works great (at least until spambot programmers will read this post 😉 ).

Code is like this:

In the script that builds the site which contains the form, I implemented:

$_SESSION['lastSiteId'] = 'something Unique';
$_SESSION['lastSiteRequest'] = time();

The script that contains the logic to write the comments to a database contains this:

if($_SESSION['lastSiteId'] == 'something Unique' 
   && $_SESSION['lastSiteRequest'] + 5 < time()){

    insertComment();
}else{
    echo "Please read the article before posting a comment";
}

Remember this is pseudocode to give you the idea. You have to implement it all alone in the end… 😉

All it does is checking if more than 5 seconds have passed between redering the form and sending a POST Request.

Be warned that spambot engineers are not sleeping. Bets are, that spambots can wait a few seconds before posting unwanted input if the programmer wants it that way.
Question would be: How much spam messages can be send if the Spammer have to wait 5 secs between the requests? See, maybe this IS the final solution to Spam prevention.

Combining time tests with javascript tests (if possible and wanted) plus prefilled/unfilled hidden fields tricks, you should be save from spam a few years from now on.

More Related Contents:

  1. When the bots attack! [closed]
  2. How does Google reCAPTCHA v2 work behind the scenes?
  3. How to protect html form from spammers?
  4. If i use captcha will i be able to stop the spam completely in my blog?
  5. Practical non-image based CAPTCHA approaches?
  6. How can I bypass the Google CAPTCHA with Selenium and Python?
  7. Blocking comment spam without using captcha [closed]
  8. How do I show multiple recaptchas on a single page?
  9. What is the best way to programmatically detect porn images? [closed]
  10. Has reCaptcha been cracked / hacked / OCR’d / defeated / broken? [closed]
  11. Better Honeypot Implementation (Form Anti-Spam)
  12. ReCaptcha API v2 Styling
  13. Selenium and non-headless browser keeps asking for Captcha
  14. How to deal with the captcha when doing Web Scraping in Puppeteer?
  15. Is there any possible ways to bypass cloudflare security checks?
  16. Spam Prevention/Reduction – Contact Form?
  17. What is the general concept behind XSS?
  18. How effective is the honeypot technique against spam?
  19. Selenium app redirect to Cloudflare page when hosted on Heroku
  20. Recommendations for java captcha libraries [closed]
  21. Reliably detecting PhantomJS-based spam bots
  22. Adding Captcha to Symfony2 Login Page
  23. Limiting user login attempts in PHP [duplicate]
  24. Hunting cheaters in a voting competition

Leave a Comment