Bots FIlling In My FP Forms with spam?

T

TexARC

I've used MS FP forms to allow people to register for archery
tournaments online for a number of years.
These forms have a standard submit button, and a number of required
fields.
I've recently been getting a problem where forms are being completed
and submitted with gambling spam information in all of the fields, I
suspect by some kind of automated process. ??
Is anyone else having this kind of problem, and is there a way in FP to
prevent bots from doing this autosubmit spam?

http://texasarchery.org/Registrations/StateIndoor/2006/SI2006reg.htm
is an example of the form.
 
T

Tom Pepper Willett

Unfortunately, there's not much you can do to combat this problem when using
the FP forms.
--
===
Tom "Pepper" Willett
Microsoft MVP - FrontPage
---
About FrontPage 2003:
http://office.microsoft.com/home/office.aspx?assetid=FX01085802
How to ask a newsgroup question:
http://support.microsoft.com/kb/555375
===
| I've used MS FP forms to allow people to register for archery
| tournaments online for a number of years.
| These forms have a standard submit button, and a number of required
| fields.
| I've recently been getting a problem where forms are being completed
| and submitted with gambling spam information in all of the fields, I
| suspect by some kind of automated process. ??
| Is anyone else having this kind of problem, and is there a way in FP to
| prevent bots from doing this autosubmit spam?
|
| http://texasarchery.org/Registrations/StateIndoor/2006/SI2006reg.htm
| is an example of the form.
|
 
R

Rob Giordano \(Crash\)

I've cut down some junk I had been getting trough forms with a rather
simplistic, and hardly fool-proof, addition of a validation form field that
requires the user enter the correct password. Then right above the form
field I put a distorted graphic image of the password that the user must
enter. Not very sophisticated but it seems to work for me...seems to stop
the bots - obviously it won't stop a human.



| I've used MS FP forms to allow people to register for archery
| tournaments online for a number of years.
| These forms have a standard submit button, and a number of required
| fields.
| I've recently been getting a problem where forms are being completed
| and submitted with gambling spam information in all of the fields, I
| suspect by some kind of automated process. ??
| Is anyone else having this kind of problem, and is there a way in FP to
| prevent bots from doing this autosubmit spam?
|
| http://texasarchery.org/Registrations/StateIndoor/2006/SI2006reg.htm
| is an example of the form.
|
 
T

TexARC

Is there any reasonably simple way to put a FP Hit counter on a page
which also has a form, and then require that a field in that form have
the hit count be entered in it, before submit can occur?
 
T

Thomas A. Rowe

You would have no way to validate the number entered, is the same number as shown in the hit
counter.

--
==============================================
Thomas A. Rowe (Microsoft MVP - FrontPage)
==============================================
If you feel your current issue is a results of installing
a Service Pack or security update, please contact
Microsoft Product Support Services:
http://support.microsoft.com
If the problem can be shown to have been caused by a
security update, then there is usually no charge for the call.
==============================================
 
S

Stefan B Rusynko

An alternative some users are using is CAPTCHA http://www.captcha.net/




| You would have no way to validate the number entered, is the same number as shown in the hit
| counter.
|
| --
| ==============================================
| Thomas A. Rowe (Microsoft MVP - FrontPage)
| ==============================================
| If you feel your current issue is a results of installing
| a Service Pack or security update, please contact
| Microsoft Product Support Services:
| http://support.microsoft.com
| If the problem can be shown to have been caused by a
| security update, then there is usually no charge for the call.
| ==============================================
|
| | > Is there any reasonably simple way to put a FP Hit counter on a page
| > which also has a form, and then require that a field in that form have
| > the hit count be entered in it, before submit can occur?
| >
|
|
 
T

TexARC

I just discovered that even though I have set a number of fields as
REQUIRED, the form lets me click submit without entering values into
those fields.
What is missing from my form? (same url as before) The form cascades
through three iterations in order to send emails to three different
people. AFAIK there is no way to have one single form send 3 emails,
right?

In looking at the form code, it refers to:
<form method="POST" action="--WEBBOT-SELF--"
onSubmit="location.href='../../../_derived/nortbots.htm';return false;"
webbot-onSubmit>
<form method="POST" action="--WEBBOT-SELF--"
onsubmit="location.href='../../../_derived/nortbots.htm';return false;"
language="JavaScript" webbot-onSubmit="return
FrontPage_Form2_Validator(this)">
<!--webbot bot="SaveResults" S-Email-Format="TEXT/PRE"
S-Email-Address="ARCATarcarmichaelDOTcom" B-Email-Label-Fields="TRUE"
B-Email-ReplyTo-From-Field="TRUE" S-Email-ReplyTo="Email"
B-Email-Subject-From-Field="FALSE" S-Email-Subject="State Indoor
Registrations 2006a" S-Date-Format="%A, %B %d, %Y"
S-Time-Format="%I:%M:%S %p" S-Builtin-Fields="REMOTE_NAME REMOTE_USER
HTTP_USER_AGENT Date Time" U-Confirmation-Url="Si2006regb.htm"
startspan --><!--webbot bot="SaveResults" endspan -->

I'm not sure what the "nortbots segment is about - I do not have, nor
have I ever had (i think) a _derived folder on the site? Can anyone
tell me why the form allows NO entry? Thanks.
 
T

Thomas A. Rowe

You need to provide a URL to the actual form, as the validation info is associated with each form
field and the only way to see the generated JavaScript is to view the page source in a browser.

The only way to send the form data to more then one person using the FP form handler is by chaining
the forms together or send a single email to a specific email address that then forwards a copy of
the email to others.

--
==============================================
Thomas A. Rowe (Microsoft MVP - FrontPage)
==============================================
If you feel your current issue is a results of installing
a Service Pack or security update, please contact
Microsoft Product Support Services:
http://support.microsoft.com
If the problem can be shown to have been caused by a
security update, then there is usually no charge for the call.
==============================================
 
T

Thomas A. Rowe

Sorry, I don't keep read messages.

On the Drop Down Menu where you have validation required, change the properties as follows:

Field Properties:
1. Choice "Required" Set Selected to Yes and for the others, set Selected to No
2. Set the Value for all other option to be the value you want passed when the option is selected.

Form Field Validation properties:
1. Enter a Name to be displayed for all fields where you are setting validation, such as under Text
Box.
2. Uncheck Data Required (Drop Down Menus)
3. Check Disallow first choice (Drop Down Menus)

--
==============================================
Thomas A. Rowe (Microsoft MVP - FrontPage)
==============================================
If you feel your current issue is a results of installing
a Service Pack or security update, please contact
Microsoft Product Support Services:
http://support.microsoft.com
If the problem can be shown to have been caused by a
security update, then there is usually no charge for the call.
==============================================
 
T

TexARC

I'm sorry to be dense - I don't understand where/what the drop down
menus are that you indicate-as far as I can tell, I have done what you
say (but it still doesn't require validation so something is askew<G>)
:
On the Drop Down Menu where you have validation required, change the
properties as follows:

Field Properties:
1. Choice "Required" Set Selected to Yes and for the others, set
Selected to No
2. Set the Value for all other option to be the value you want passed
when the option is selected.

Form Field Validation properties:
1. Enter a Name to be displayed for all fields where you are setting
validation, such as under Text
Box.
2. Uncheck Data Required (Drop Down Menus)
3. Check Disallow first choice (Drop Down Menus)
 
R

Ronx

I am surprised the form works at all.
Consider this code extract from the page:

(send one copy, keep one copy)</font><!--mstheme--></font></body>

The <body > section of the page ends here - everything else is superfluous,
but we have not yet arrived at the form itself. Remove that </body> tag.


</font></font></font></font></font>
</font></font></font></font></font>
[sni[p a lot of </font> tags]
</font></font></font></font></font></font></font>

That's a lot of nested </font> tags ... I have not checked to see if there
are corresponding <font> tags earlier in the page - but that amount of
nesting should not be necessary.

<form method="POST"
action="../../../_vti_bin/shtml.dll/Registrations/StateIndoor/2006/SI2006reg
..htm" onSubmit="" webbot-action="--WEBBOT-SELF--">

The form opens, but there is no validation set.

But here is the validation script

<!--webbot BOT="GeneratedScript" PREVIEW=" " startspan --><script
Language="JavaScript" Type="text/javascript"><!--
function FrontPage_Form2_Validator(theForm)
{snip rest of script]

return (true);
}
//--></script><!--webbot BOT="GeneratedScript" endspan -->

The <form> opens again - but this time it does request validation.

<form method="POST"
action="../../../_vti_bin/shtml.dll/Registrations/StateIndoor/2006/SI2006reg
..htm" onsubmit="return FrontPage_Form2_Validator(this)"
language="JavaScript" name="FrontPage_Form2"
webbot-action="--WEBBOT-SELF--">

Remove the first <form tag, and keep the second.

[snip some webbot detail]
<!--webbot bot="SaveResults" endspan i-checksum="43374" -->
<div align="left">
</font>
</font>
</font>
[snip a multitude of </font> tags]
</font>


I have only skimmed the code - there is probably a lot more invalid HTML
that I have missed, but remove the superfluous </body> tag, and the
superfluous opening <form tag and you will have better results,

Do not worry about the norbots.htm and _derived folder. You will never see
the _derived folder in FrontPage, and the reference to norbots.htm only
exists on disc-based webs, and webs that have been FTPed to the server -
your is fine in that respect.
 
T

TexARC

thanks. Your message:
I have only skimmed the code - there is probably a lot more invalid
HTML
that I have missed, but remove the superfluous </body> tag, and the
superfluous opening <form tag and you will have better results
is kinda ironic, in that it's all code inserted by MS FP.
I'll try to create a form from scratch, and see what happens. <G>
I appreciate your help.
Ron
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Spam from FrontPage forms 8
Help with forms and confirmation pages 4
How do I use hidden 'recipient' in FP Form? 3
FP 2003 - Failure to forward forms from site 1
anti-spam with image in fp 2003 2
Problems with Auto-filling Forms 3
Error when submitting Infopath 2003 forms 1
Glitch in .dot forms with a macro when saving as docx. 0

Top