blocks|key|1429615|text|Akismet有一个API。有人为它写了一个包装器类(BSD+liscense)，网址是：http://cesars.users.phpclasses.org/browse/package/4401.html|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1429616|还有一个贝叶斯过滤器类(BSD+Liscense+)+http://cesars.users.phpclasses.org/browse/package/4236.html|1429617|entityMap|0|LINK|mutability|MUTABLE|url|http://cesars.users.phpclasses.org/browse/package/4401.html|1|http://cesars.users.phpclasses.org/browse/package/4236.html^0|19|1N|0|0|R|1N|1|0^^$0|@$1|2|3|4|5|6|7|P|8|@]|9|@$A|Q|B|R|1|S]]|C|$]]|$1|D|3|E|5|6|7|T|8|@]|9|@$A|U|B|V|1|W]]|C|$]]|$1|F|3|-4|5|6|7|X|8|@]|9|@]|C|$]]]|G|$H|$5|I|J|K|C|$L|M]]|N|$5|I|J|K|C|$L|O]]]]

Akismet has an API. Someone wrote a wrapper class (BSD liscense) for it over at: <a href="http://cesars.users.phpclasses.org/browse/package/4401.html" rel="noreferrer">http://cesars.users.phpclasses.org/browse/package/4401.html</a>

There's also a Bayesian filter class (BSD Liscense as well)
<a href="http://cesars.users.phpclasses.org/browse/package/4236.html" rel="noreferrer">http://cesars.users.phpclasses.org/browse/package/4236.html</a>

blocks|key|1430076|text|这是一个简单的技巧，可以在不使用验证码的情况下阻止垃圾邮件机器人或暴力攻击。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1430077|将以下内容放入您的表单中：|1430078|<input+type="hidden"+name="hash"+value="<?php+echo+md5($secret_key.time()).','.time();+?>"+/>|code-block|syntax|javascript|1430079|把这个放到你的php代码中|1430080|$human_typing_time+=+5;/**+page+load+(1s)+%2B+submit+(1s)+%2B+typing+time+(3s)+*/
$vars+=+explode(',',+$_POST['hash']);
if(md5($secret_key.$vars[1])+!=+$vars[0]+%7C%7C+time()+<+$var[1]+%2B+$human_typing_time){
++++//bot?
++++exit();
}+|1430081|根据表单的权重，您可以增加或减少$human_typing_time。|1430082|entityMap^0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|R|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|S|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|T|8|@]|9|@]|A|$]]|$1|K|3|L|5|F|7|U|8|@]|9|@]|A|$G|H]]|$1|M|3|N|5|6|7|V|8|@]|9|@]|A|$]]|$1|O|3|-4|5|6|7|W|8|@]|9|@]|A|$]]]|P|$]]

This is simple trick to block spam bot or brute force attack without using captcha.

Put this in your form:

<pre><code>&lt;input type="hidden" name="hash" value="&lt;?php echo md5($secret_key.time()).','.time(); ?&gt;" /&gt;
</code></pre>

Put this in your php code

<pre><code>$human_typing_time = 5;/** page load (1s) + submit (1s) + typing time (3s) */
$vars = explode(',', $_POST['hash']);
if(md5($secret_key.$vars[1]) != $vars[0] || time() &lt; $var[1] + $human_typing_time){
 //bot?
 exit();
} 
</code></pre>

Depend on weight of form you can increase or decrease $human_typing_time.

blocks|key|1214662|text|当然是朴素的贝叶斯过滤器：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1214663|http://blog.liip.ch/archive/2005/03/30/php-naive-bayesian-filter.html|offset|length|1214664|entityMap|0|LINK|mutability|MUTABLE|url^0|0|0|1X|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|N|8|@]|9|@$D|O|E|P|1|Q]]|A|$]]|$1|F|3|-4|5|6|7|R|8|@]|9|@]|A|$]]]|G|$H|$5|I|J|K|A|$L|C]]]]

Naive Beyesian filters, of course:

<a href="http://blog.liip.ch/archive/2005/03/30/php-naive-bayesian-filter.html" rel="nofollow noreferrer">http://blog.liip.ch/archive/2005/03/30/php-naive-bayesian-filter.html</a>

blocks|key|1214831|text|还有蜜罐理论。我喜欢将蜜罐与其他形式的垃圾邮件减少相结合，以获得最好的效果。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1214832|http://www.projecthoneypot.org/|offset|length|1214833|entityMap|0|LINK|mutability|MUTABLE|url^0|0|0|V|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|N|8|@]|9|@$D|O|E|P|1|Q]]|A|$]]|$1|F|3|-4|5|6|7|R|8|@]|9|@]|A|$]]]|G|$H|$5|I|J|K|A|$L|C]]]]

There is the Honey Pot Theory as well. I enjoy coupling honey pots with other forms of spam reduction for best results.

<a href="http://www.projecthoneypot.org/" rel="noreferrer">http://www.projecthoneypot.org/</a>

blocks|key|1215186|text|Sblam!是一个类似于Akismet的开源过滤器。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1215187|它使用朴素贝叶斯过滤，检查多个分布式黑名单中发送者的IP和链接，检查HTTP请求的正确性，并使用JS的存在作为提示(但不是要求)。|1215188|entityMap|0|LINK|mutability|MUTABLE|url|http://code.google.com/p/sblam/^0|0|6|0|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@$A|O|B|P|1|Q]]|C|$]]|$1|D|3|E|5|6|7|R|8|@]|9|@]|C|$]]|$1|F|3|-4|5|6|7|S|8|@]|9|@]|C|$]]]|G|$H|$5|I|J|K|C|$L|M]]]]

<a href="http://code.google.com/p/sblam/" rel="nofollow noreferrer">Sblam!</a> is an open-source filter similar to Akismet. 

It uses naive bayesian filtering, checks sender's IP and links in multiple distributed blacklists, checks correctness of HTTP requests, and uses presence of JS as a hint (but not requirement).

blocks|key|1214601|text|禁止链接。没有链接，垃圾邮件是无用的。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1214602|作为一种中间方式进行编辑，只允许链接到“好”网站(通常是你自己的)。它们只有几个，所以你可以根据用户的要求添加它们，或者在验证链接之前保留评论。当它是好的时候，添加它。|1214603|一段时间后，你可以关闭它，自动拒绝带有链接的评论，并等待用户投诉。|1214604|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|H|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|I|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|J|8|@]|9|@]|A|$]]|$1|F|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|G|$]]

Disallow links. Without links, spam is useless.

[EDIT] As a middle way, only allow links to "good" sites (usually your own). There are only a handful of them, so you can either add them at the request of your users or hold a comment until you verified the link. When it's good, add it.

After a while, you can turn this off and automatically reject comments with links and wait for users to complain.

blocks|key|1429576|text|你可以尝试使用像Akismet这样的第三方。API密钥免费供个人使用。此外，Zend+Framework为此提供了一个package。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1429577|entityMap|0|LINK|mutability|MUTABLE|url|http://akismet.com/|1|http://framework.zend.com/manual/en/zend.service.akismet.html^0|8|7|0|1N|7|1|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@$A|O|B|P|1|Q]|$A|R|B|S|1|T]]|C|$]]|$1|D|3|-4|5|6|7|U|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]|L|$5|G|H|I|C|$J|M]]]]

You could try looking at using a third party like <a href="http://akismet.com/" rel="nofollow noreferrer">Akismet</a>. API keys are free for personal use. Also, The Zend Framework has a <a href="http://framework.zend.com/manual/en/zend.service.akismet.html" rel="nofollow noreferrer">package</a> for this.

blocks|key|1429641|text|大多数机器人只是简单地填写整个表单并将其发送给您。一个简单的技巧是创建一个普通的字段，通常在javascript的帮助下将其隐藏起来。在服务器端，只需检查此字段是否已填写即可。如果是这样--那么它肯定是垃圾邮件。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1429642|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

Most bots simply fill out the whole form and send it to you. A simple trick that works is to create a normal field that you usually hide with the aid of javascript. On the server side just check whether this field has been filled. If so -- then it is spam for sure.

blocks|key|1429863|text|我已经通过一个简单的数学问题减少了我网站上大约99%25的垃圾邮件，如下所示：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1429864|什么是2%2B4+TextBox|1429865|如果用户回答"6“，他们将能够提交问题/评论。|1429866|适用于我，类似的解决方案适用于来自Coding+Horror的Jeff+Atwood！|1429867|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|J|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|K|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|L|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|M|8|@]|9|@]|A|$]]|$1|H|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|I|$]]

I have reduced about 99% of spam on my website through a simple mathematical question like the following: 

What is 2+4 [TextBox] 

The user will be able to submit the question/comment if they answer "6". 

Works for me and similar solution works for Jeff Atwood from Coding Horror!

blocks|key|1429778|text|除了使用蜜罐字段，我们可以自动禁止那里的IP+(这不适用于动态IP)，特别是机器人发布的任何链接。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1429779|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

along with using honey pot fields, we can ban there IP automatically (which don't work for dynamic IPs) and especially any links posted back by bots.

blocks|key|1429827|text|Akismet是一个很好的选择，他们检查你的帖子中是否有垃圾邮件，工作效率非常高。你只需要加载他们的数据库。http://akismet.com/development/|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1429828|entityMap|0|LINK|mutability|MUTABLE|url|http://akismet.com/development/^0|1I|V|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@$A|M|B|N|1|O]]|C|$]]|$1|D|3|-4|5|6|7|P|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]]]

Akismet is a good alternative, they check your posts for spam and works very efficiently.
You just need to load their librabry. 
<a href="http://akismet.com/development/" rel="nofollow noreferrer">http://akismet.com/development/</a>

blocks|key|1429958|text|查看一些wp反垃圾邮件插件以获取示例和想法|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1429959|有许多不错的反垃圾邮件不需要使用验证码。|1429960|我推荐一些:+hashcash，nospamnx，typepad+antispam。所有这些都使用不同的方法拦截垃圾邮件，我都用到了。hashcash%2Bnospamnx可以拦截几乎所有的垃圾邮件。typepad+antispam阻止了大多数人类输入的垃圾邮件。|1429961|这些也是好的:+spambam，wp-spamfree，anti-captcha，坏行为，httpbl等等|1429962|也可以用简单的.htaccess阻止任何不是来自你自己网站的机器人直接发帖(查看referer)|1429963|或者，简单地将你的评论系统外包给disqus，然后好好睡一觉。|1429964|entityMap^0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|O|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|P|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|Q|8|@]|9|@]|A|$]]|$1|H|3|I|5|6|7|R|8|@]|9|@]|A|$]]|$1|J|3|K|5|6|7|S|8|@]|9|@]|A|$]]|$1|L|3|-4|5|6|7|T|8|@]|9|@]|A|$]]]|M|$]]

checkout some wp antispam plugins for examples and ideas

there're many nice antispam without using captcha.

some i'd recommend: hashcash, nospamnx, typepad antispam.
all these using different methods blocking spam and i use them all. hashcash+nospamnx block almost all spambot. and typepad antispam block most human typed spam.

these are also good ones: spambam, wp-spamfree, anti-captcha, bad-behaviour, httpbl, etc

also with simple .htaccess that block any bot direct POST that do not come from your own site (check referer)

or, simply outsource your comment system to disqus and sleep tight.

问不使用captcha拦截评论垃圾邮件
EN

回答 12

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问不使用captcha拦截评论垃圾邮件EN

回答 12

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问不使用captcha拦截评论垃圾邮件
EN