View Issue Details

IDProjectCategoryView StatusLast Update
0002088Composrcaptchapublic2016-06-09 01:50
ReporterChris GrahamAssigned ToChris Graham 
SeverityFeature-request 
Status resolvedResolutionfixed 
Product Version 
Fixed in Version 
Summary0002088: JS captcha
DescriptionCurrently the CAPTCHA requires ability to process CSS, or to fake that by special handling. That's something of a barrier, but we can add a bit of cryptographic madness that executes in JS, to make form submissions only valid after JS has run on what looks like a real web browser, with some user input being required as a part of this (e.g. mouse/tap/click/key events being detected as having happened).

Again, this can be faked - but it's hard to fake, as your spam bot then needs to have a JavaScript engine running, with faked user input too -- or it has to be a real human doing the spamming.
TagsType: Spam
Time estimation (hours)2
Sponsorship open

Activities

Chris Graham

2015-11-29 20:47

administrator   ~0003225

Obviously make it optional, and possibly off by default - as it adds a JS requirement.

Issue History

Date Modified Username Field Change
2016-06-08 00:17 Chris Graham Tag Attached: Type: Spam
2016-06-09 01:50 Chris Graham Status non-assigned => resolved
2016-06-09 01:50 Chris Graham Resolution open => fixed
2016-06-09 01:50 Chris Graham Assigned To => Chris Graham