Posted by totalstranger on 10/05/65 11:50

On or about 6/15/2006 2:27 AM, it came to pass that Toby Inkster wrote:
> Francois Bonzon wrote:
>
>> I get a lot of SPAM entries on a guestbook, and want to protect it.
>> I'll require users to solve a CAPTCHA before their entry is accepted. I
>> might use CAPTCHAs to protect other form submissions, though.
>
> Don't use CAPTCHA. Make users sign up to your service and check their
> e-mail address is valid. CAPTCHA is inaccessible and not cross-browser
> compatible.
>
CAPTCHA works well at stopping most robots and hackers from using online
contact and signup forms. The version I use from
http://freshmeat.net/p/captchaphp (with some modifications and a fix or
two) works well and provides for all browsers, including IE where
external image files are required. My attempts at using embedded images
with IE7 in strict mode were futile, although embedded images work with
most other modern browsers.

I do agree that validation of the email address and it's verification
using checkdnsrr($domain, 'MX') is required.

[Back to original message]