How to use server side verification for captchas

E

Eugene.Gardner

To reduce spam I would like to put a captcha or more simple
verification test on my FrontPage form, but it has to he processed on
the server. How may this be accomplished please ?
I am using FrontPage 2003 on XP. The server is running Apache on Linux.
 
T

Thomas A. Rowe

You would most likely have to use PHP, so you need to search for a PHP Form Handler script that you
can customize to meet your needs.

--
==============================================
Thomas A. Rowe
Microsoft MVP - FrontPage

http://www.Ecom-Data.com
==============================================
 
S

Stefan B Rusynko

See http://www.white-hat-web-design.co.uk/articles/php-captcha.php

--

_____________________________________________
SBR @ ENJOY (-: [ Microsoft MVP - FrontPage ]
"Warning - Using the F1 Key will not break anything!" (-;
_____________________________________________


| You would most likely have to use PHP, so you need to search for a PHP Form Handler script that you
| can customize to meet your needs.
|
| --
| ==============================================
| Thomas A. Rowe
| Microsoft MVP - FrontPage
|
| http://www.Ecom-Data.com
| ==============================================
|
|
| | > To reduce spam I would like to put a captcha or more simple
| > verification test on my FrontPage form, but it has to he processed on
| > the server. How may this be accomplished please ?
| > I am using FrontPage 2003 on XP. The server is running Apache on Linux.
| >
|
|
 
E

Eugene.Gardner

Many thanks - I'll see if I can implement that without further help.

Eugene.
==============================================
 
E

Eugene.Gardner

More help would be valued. Using the (preferred) method at
http://www.protectwebform.com/howprotect requires my altering my form
to replace
<form action="http://www.yoursite.com/cgi-bin/add_entry.php"
method=POST> with
<form action="http://10433.gate.protectwebform.com/" method=POST> and
uploading the original 'action=...' to their server. After the user
clicks the SUBMIT button on my form, they are then presented with a
new page containing a captcha, followed by my own confirmation page.

The method at http://www.white-hat-web-design.co.uk/articles/php-captcha.php
works by providing PHP scripts for me to put on my server, then having
me edit my form to call those scripts so that a captcha appears at an
appropriate place on my form. Then a PHP script has to be placed on
the server to pre-process the submitted form.

The first method seems much simpler to implement, but requires control
to be passed to a third party. The second method would leave control
with me, but I am too stupid to understand how it works (I don't speak
PHP).

My problem is that as far as I can work out, FrontPage replaces the
'action=...' with a bit of JavaScript (which I don't speak either).
So if I were to replace that, then I would loose the remaining
(presumably desirable) functions of the JavaScript. Do I need to
embed a PHP call in the JavaScript ? If so, what should the code look
like ? Otherwise, how can the goal of having a captcha be achieved ?

Currently on my disk drive a line of the form looks like this:
<form method=POST enctype="application/x-www-form-urlencoded"
name="FrontPage_Form1" action="--WEBBOT-SELF--"
onSubmit="location.href='_derived/nortbots.htm';return false;"
language="JavaScript" webbot-onSubmit="
return FrontPage_Form1_Validator(this)">
<!--webbot bot="SaveResults" s-email-format="HTML/PRE" s-email-
address="Feedback@my_address.co.uk" b-email-label-fields="TRUE" s-date-
format="%d %b %Y" s-time-format="%H:%M" s-builtin-fields="REMOTE_NAME
REMOTE_USER HTTP_USER_AGENT Date Time" u-confirmation-url="thanks.htm"
startspan B-Email-Subject-From-Field="FALSE" S-Email-Subject="My
Feedback" --><input TYPE="hidden" NAME="VTI-GROUP" VALUE="0">
<!--webbot bot="SaveResults" endspan i-checksum="43374" -->

On the server,
action="--WEBBOT-SELF--" onSubmit="location.href='_derived/
nortbots.htm';return false;" language="JavaScript" webbot-
onSubmit="return FrontPage_Form1_Validator(this)">
gets automatically replaced by
action="--WEBBOT-SELF--" onSubmit="return
FrontPage_Form1_Validator(this)" language="JavaScript">

Your time in helping untangle this would be appreciated.
 
T

Thomas A. Rowe

FYI: Once you have decided to use another method (PHP) to process the form, you are no longer using
the FP Form Handler,since you would be selecting "Send To Other" under form properties.

--
==============================================
Thomas A. Rowe
Microsoft MVP - FrontPage

http://www.Ecom-Data.com
==============================================
 
E

Eugene.Gardner

Is it possible to make a call to a PHP routine from within
JavaScript ? If not, it seems writing a form handler rather than
using the FP built in one is the only way to accomplish what I need.
Thanks.
 
T

Thomas A. Rowe

The problem is that PHP is server-side and JavaScript is client side which requires the browser or
spider to run it for it to work, whereas PHP will be run since it on the server.

--
==============================================
Thomas A. Rowe
Microsoft MVP - FrontPage

http://www.Ecom-Data.com
==============================================
 
E

Eugene.Gardner

Then it seems I am stumped. Not worth writing a whole form handler in
PHP just to allow a captcha test. And I see that FP 2003 is the last
version of FP :-( Now what is a simple head to use for a wysiwyg
editor ?
Thanks for the replies.
 
G

Guest

Thomas, I could use a little help here myself. My web form is being
bombarded with porn, etc. I saved the first script as the *.php. How
do I save the second one " "Send To Other" under form properties ". I
can't figure that one out. I am also using FP 2003 for XP. Thank you
very much.
--
Ciao,

**:::::>>:§«´`³¤³´`*:»§:<<::::*
.·°~ §LëAzZÿ WëA§ëL ~°·.
**:::::>>:§«´`³¤³´`*:»§:<<::::*

WrOnG NuMbEr RoCoCcO, yOu .·°~ §LëAzZÿ WëA§ëL ~°·.

WSHE -- She's Only Rock & Roll !
 
T

Thomas A. Rowe

You can't just save a script by changing the file extension, the scripting must be written in a
format with commands that can be understood by the scripting engine.

With that said, is your first script and what is your second script, where did you get them from,
etc. FP has built in function for dealing with ASP/VBScript and ASP.net running under Windows IIS,
not PHP.

--
==============================================
Thomas A. Rowe
Microsoft MVP - FrontPage

http://www.Ecom-Data.com
==============================================
 
G

Guest

I used the one mentioned in this thread (above). This is what I did:
I created a new page on my website, inserted the captcha info from
http://www.white-hat-web-design.co.uk/articles/php-captcha.php, saved
it as instructed (CaptchaSecurityImages.php). Then I added this info
right above my Submit and Clear buttons:

<img src="CaptchaSecurityImages.php" />
Security Code:
<input id="security_code" name="security_code" type="text" />

Now I'm at a loss with the next step of:
"Place the following in the code where the form is submitted to. This
code will check what the user has typed matches the code in the
image". I have no idea where to put this code.

All your help is appreciated.
--
Ciao,

**:::::>>:§«´`³¤³´`*:»§:<<::::*
.·°~ §LëAzZÿ WëA§ëL ~°·.
**:::::>>:§«´`³¤³´`*:»§:<<::::*

WrOnG NuMbEr RoCoCcO, yOu .·°~ §LëAzZÿ WëA§ëL ~°·.

WSHE -- She's Only Rock & Roll !
 
T

Thomas A. Rowe

You will have to add your own PHP Form Processing script to process the form where indicated in the
captcha script.

You can NOT use the FP Form Handler to process this form.

--
==============================================
Thomas A. Rowe
Microsoft MVP - FrontPage

http://www.Ecom-Data.com
==============================================
 
G

Guest

Thank you. One BIG problem, I have no idea how to do that. Your help
is appreciated....maybe a link that I can read for some detailed
instruction?
--
Ciao,

**:::::>>:§«´`³¤³´`*:»§:<<::::*
.·°~ §LëAzZÿ WëA§ëL ~°·.
**:::::>>:§«´`³¤³´`*:»§:<<::::*

WrOnG NuMbEr RoCoCcO, yOu .·°~ §LëAzZÿ WëA§ëL ~°·.

WSHE -- She's Only Rock & Roll !
 
G

Guest

Thanks Paul, but I'm a complete novice at this captcha stuff. I'm
looking for some specific details on adding this or better than that,
I'll gladly pay someone to add it to my form page. The page is:
http://www.naplesrealty.com/form.htm
--
Ciao,

**:::::>>:§«´`³¤³´`*:»§:<<::::*
.·°~ §LëAzZÿ WëA§ëL ~°·.
**:::::>>:§«´`³¤³´`*:»§:<<::::*

WrOnG NuMbEr RoCoCcO, yOu .·°~ §LëAzZÿ WëA§ëL ~°·.

WSHE -- She's Only Rock & Roll !
 
T

Thomas A. Rowe

FYI:

If your email address has appeared anywhere on your site at some point in the clear, there is no
need to protect it, since it most likely has already been compromised.

Currently, you indicate for users to hover over your Email Mike and ICQ Me buttons, this doesn't
hide your email address since it is part of the image Alt text and can be read by spam email
harvesting robots.

--
==============================================
Thomas A. Rowe
Microsoft MVP - FrontPage

http://www.Ecom-Data.com
==============================================
 
G

Guest

I agree completely. The fortunate part about owning a domain name, as
you are aware, is that I can change the email addrsses as often as I
like...which I do. So I'm not really worried about that. I'd like to
stop those web forms from coming in with all the porn, viagra and
spam...at this point.
--
Ciao,

**:::::>>:§«´`³¤³´`*:»§:<<::::*
.·°~ §LëAzZÿ WëA§ëL ~°·.
**:::::>>:§«´`³¤³´`*:»§:<<::::*

WrOnG NuMbEr RoCoCcO, yOu .·°~ §LëAzZÿ WëA§ëL ~°·.

WSHE -- She's Only Rock & Roll !
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top