Home/ Questions/Q 7860263
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-02T22:13:00+00:00

I have a Rails application that has a search field that allows any visitor

  • 0

I have a Rails application that has a search field that allows any visitor to search a database.

I’m hesitant to implement a Captcha because I’d like to keep the site clean and user-friendly.

However, I’d like to make it difficult for bots to try to harvest everything from the database by making tons of consecutive random queries. So I’m considering adding a Captcha that appears only if it looks like this is happening (e.g., the Captcha appears after a few bad searches).

Any suggestions for how to implement this? Should I try to use a session variable or keep track of IP addresses? Would I better off handling this issue at the server level (i.e., with an htaccess file)?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Consider using a honeypot. That means adding a form element that you hide with CSS. Bots cannot see that you’ve hidden the field and they will fill it in. Normal users will not fill it in.

    • 0