Stop web form spam with FormSmarts HTML forms builder and web form handler. Email forms, contact forms, feedback forms, survey forms and more.

FormSmarts Web Form Blog

Archive for the ‘form spam’ Category

Spammy Awards

We can’t resist publishing the story of a spammer, who yesterday ended up on a blog using
FormSmarts for their weblog comment facility.

After finding the blog on Google, the spammer confidently tried to submit an outrageously spammy message: FormSmarts form spam filter gave the comment a score of 739, where anything greater than 0 is considered to be spam. That is — and by far — the most spam-looking message we ever recorded.

FormSmarts would like to thank this spammer for this amusing moment.

Posted on December 28th, 2007 in form spam.
No Comments »
Tags:

Form Builder and Form Spam Filter Updated

A major FormSmarts upgrade was rolled out today. Changes include:

Posted on December 28th, 2007 in form spam.
No Comments »
Tags: , ,

Protecting HTML Forms from Spam with JavaScript

If you are looking for a quick way to avoid automated form spam on existing forms, you may want to try this simple JavaScript form spam protection trick. You won’t get a level of form protection (and usability) comparable to what you would get with FormSmarts, but then you can implement the trick on any existing forms, irrespective of the form handler you are currently using.

We plan to offer the ability to use FormSmarts as a form spam filter for third-party forms within a few months. This will effectively allow users of other form processors to benefit from FormSmarts’ form spam protection on their existing HTML forms, with very little change. Details and availability will be advertised here.

Posted on December 25th, 2007 in form spam.
Comments Off
Tags: ,

How Did Comment-Spammers Find My Blog?

Did you ever wonder how comment spammers discovered your blog?

Crawling the Web

One possibility is that the spammer sent out a bot to crawl the web from blog to blog. This requires some infrastructure, and is becoming less effective as more bloggers use some kind of comment spam protection mechanism.

Searching Google

It then becomes more effective for the spammer to simply use Google,
searching for all the pages with the phrase post a comment, but without the terms sign in, register, log in, etc.

http://www.google.com/search?q=%22post+a+comment%22
+-intext%3A%22login%22+-intext%3A%22log+in%22+-intext%3A%22register%22
+-intext%3A%22sign+in%22+-intext%3A%22signin%22+-intext%3A%22sign+up%22
+-intext%3A%22signup%22+-intext%3A%22logged+in

And as an additional benefit, blogs come already sorted by “importance” in the seach results.

Extending the query to restrict results to blogs not using Captchas is left as an exercise to the reader.

What This Means to You

Avoid standard phrases like post a comment on your blog. More creative phrases like Reply to this Post, share your views or letters to the editor may be safer.

Posted on December 12th, 2007 in form spam.
No Comments »
Tags:

Subscribe
Subscribe by email or FormSmarts RSS Feed

About This Blog
This is FormSmarts Blog, a weblog about web form design. The topics covered include technical aspects of HTML forms — such as form security and form spam — but also broader social aspects, like form accessibility, usability, and privacy. Most posts discuss general topics in the context of FormSmarts free web form service.
Categories
Your AccountHelpFormSmarts