View Issue Details

IDProjectCategoryView StatusLast Update
2088Composrcaptchapublic2016-06-09 01:50
ReporterChris Graham Assigned ToChris Graham  
PrioritynormalSeverityfeature 
Status resolvedResolutionfixed 
Summary2088: JS captcha
DescriptionCurrently the CAPTCHA requires ability to process CSS, or to fake that by special handling. That's something of a barrier, but we can add a bit of cryptographic madness that executes in JS, to make form submissions only valid after JS has run on what looks like a real web browser, with some user input being required as a part of this (e.g. mouse/tap/click/key events being detected as having happened).

Again, this can be faked - but it's hard to fake, as your spam bot then needs to have a JavaScript engine running, with faked user input too -- or it has to be a real human doing the spamming.
TagsType: Spam
Attach Tags
Time estimation (hours)2
Sponsorship open

Sponsor

Date Added Member Amount Sponsored

Activities

Chris Graham

2015-11-29 20:47

administrator   ~3225

Obviously make it optional, and possibly off by default - as it adds a JS requirement.

Issue History

Date Modified Username Field Change
2016-06-08 00:17 Chris Graham Tag Attached: Type: Spam
2016-06-09 01:50 Chris Graham Status Not Assigned => Resolved
2016-06-09 01:50 Chris Graham Resolution open => fixed
2016-06-09 01:50 Chris Graham Assigned To => Chris Graham