Question

I’m currently developing a web application that has one feature while allows input from anonymous users (No authorization required). I realize that this may prove to have security risks such as repeated arbitrary inputs (ex. spam), or users posting malicious content. So to remedy this I’m trying to create a sort of system that keeps track of what each anonymous user has posted.

So far all I can think of is tracking by IP, but it seems as though it may not be viable due to dynamic IPs, are there any other solutions for anonymous user tracking?

Answer 1

I would recommend requiring them to answer a captcha before posting, or after an unusual number of posts from a single ip address.

“A CAPTCHA is a program that protects websites against bots by generating and grading tests >that humans can pass but current computer programs cannot. For example, humans can read >distorted text as the one shown below, but current computer programs can’t”

That way the spammers are actual humans. That will slow the firehose to a level where you can weed out any that does get through.

http://www.captcha.net/