Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
Consider form.php and process.php. What captcha does is to check if the form has been submitted from form.php or directly POSTed to process.php. A simple way is to check the Referrer and prevent processing if the actuall Referrer is not form.php.
What can be the main problem for this method, as it is not normally used?
Is it possible for a spammer bot to send the form from form.php to have it as the Referrer?
Can this method slightly stop spam posts (if not completely)?
The referer is an optional HTTP request header that is sometimes disabled for privacy (and sometimes overwritten with junk for cheap privacy, and sometimes overwritten with adverts for privacy software).
You should not assume that Real Users™ will send it.
Very easily. I’d be surprised if a large proportion of spambots didn’t set it already.