Expand my Community achievements bar.

Don’t miss the AEM Skill Exchange in SF on Nov 14—hear from industry leaders, learn best practices, and enhance your AEM strategy with practical tips.
SOLVED

How to prevent BOT Attacks in Form

Avatar

Level 4

Hi Team,

I have a requirement to add captcha in my form to prevent bot attacks.

My Initial thought is to include Google Recaptcha but later I came to know like google API will not work in China.Since our majority of the client business is from china.I could not leverage google captcha.

Is there any alternative options available.Please let me know your thoughts.

Thanks,

Sambasivaraja.

1 Accepted Solution

Avatar

Correct answer by
Level 3

Hi Sambasivaraja

We are also working on defining a solution for Bot attacks on forms, here is what we are doing:

1. Honeypot technique: http://jennamolby.com/how-to-prevent-form-spam-by-using-the-honeypot-technique/

2. CSRF: The CSRF Protection Framework  (but this doesn't work for anonymous users and hence it is of no use to us)

There are other ways to implement captcha too but Google's Recaptcha is the best bet.

Recommendations for java captcha libraries - Stack Overflow

Another good read: Captchas vs. Spambots: Why the Slider Captcha Wins - UX Movement

Thanks

Dipti

View solution in original post

4 Replies

Avatar

Level 9

Hi Sambasivaraja,

You might need to host server near to china instead of china and use mod proxy to redirect to google Or use different service provided.

firewall - Recaptcha - Availability in China - Stack Overflow

Thanks,

Avatar

Correct answer by
Level 3

Hi Sambasivaraja

We are also working on defining a solution for Bot attacks on forms, here is what we are doing:

1. Honeypot technique: http://jennamolby.com/how-to-prevent-form-spam-by-using-the-honeypot-technique/

2. CSRF: The CSRF Protection Framework  (but this doesn't work for anonymous users and hence it is of no use to us)

There are other ways to implement captcha too but Google's Recaptcha is the best bet.

Recommendations for java captcha libraries - Stack Overflow

Another good read: Captchas vs. Spambots: Why the Slider Captcha Wins - UX Movement

Thanks

Dipti