blocks|key|217904|text|尝试使用javascript在隐藏字段中提交具有时间限制变量的表单。这将意味着，机器人目前将无法总结任何东西。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|217905|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

Try using javascript to submit forms with a time limited variable in a hidden field. This will mean that bots won't currently be able to sumbit anything.

blocks|key|217920|text|您还可以使用贝叶斯滤波删除或以其他方式处理确实通过的垃圾邮件。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|217921|entityMap|0|LINK|mutability|MUTABLE|url|http://en.wikipedia.org/wiki/Bayesian_spam_filtering^0|6|5|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@$A|M|B|N|1|O]]|C|$]]|$1|D|3|-4|5|6|7|P|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]]]

You can also use <a href="http://en.wikipedia.org/wiki/Bayesian_spam_filtering" rel="nofollow noreferrer">Bayesian filtering</a> to remove, or otherwise deal with, the spam posts that do get through.

blocks|key|217964|text|编辑:这个建议在2008年可能是不错的，但今天我建议使用谷歌的ReCAPTCHA。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|217965|原文如下：|217966|对于CAPTCHA最好的建议是要么自己滚，要么假装。|217967|这里有一篇关于CAPTCHAs的好文章：|217968|http://www.codinghorror.com/blog/archives/001067.html|offset|length|217969|现在向下滚动到底部。它要求你输入一个单词。没有花哨的世代，也没有混淆。验证码之所以有效，是因为与大块头相比，编码恐怖太小了。你的网站可能也是小土豆。|217970|如果您正在使用已经包含CAPTCHA的软件，那么您可以更改CAPTCHA的工作方式。例如，phpbb3讨论论坛有一个用于注册的验证码。因此，您可以将页面上的文本更改为“忽略图片。请在框中输入天空的颜色”，然后将验证代码替换为只检查“蓝色”。这有一个额外的好处，即任何出现的bot都会试图解决CAPTCHA，而不通过身份验证。|217971|entityMap|0|LINK|mutability|MUTABLE|url^0|0|0|0|0|0|1H|0|0|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|X|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|Y|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|Z|8|@]|9|@]|A|$]]|$1|H|3|I|5|6|7|10|8|@]|9|@$J|11|K|12|1|13]]|A|$]]|$1|L|3|M|5|6|7|14|8|@]|9|@]|A|$]]|$1|N|3|O|5|6|7|15|8|@]|9|@]|A|$]]|$1|P|3|-4|5|6|7|16|8|@]|9|@]|A|$]]]|Q|$R|$5|S|T|U|A|$V|I]]]]

Edit: This advice may have been good in 2008, but today I'd recommend using Google's ReCAPTCHA.

Original post follows:

The best advice with CAPTCHAs is to either roll your own, or just fake it.

Here's a good article on CAPTCHAs:

<a href="http://www.codinghorror.com/blog/archives/001067.html" rel="nofollow noreferrer">http://www.codinghorror.com/blog/archives/001067.html</a>

Now scroll down to the bottom. It asks you to enter a word. No fancy generation or obfuscation. That CAPTCHA works because coding horror is so small potatoes compared to the big guys. Your site is likely to be small potatoes too.

If you're working with software that already includes a CAPTCHA, then you can change how that CAPTCHA works. For example, the phpbb3 discussion forum has a CAPTCHA for registering. So you can change the text on the page to something like "Ignore the picture. Please enter the color of the sky in the box", and then replace the verification code to just check for "blue". This has the added benefit that any bot that happens along will try to solve the CAPTCHA and fail the authentication.

blocks|key|875782|text|回应你对名单上新物品的要求.|type|unstyled|depth|inlineStyleRanges|entityRanges|data|875783|一种打击垃圾邮件的方法是对电子邮件收取“虚拟邮资”。一封电子邮件大约只有一分钱的东西。对于普通用户来说，这将是一个非常小的不便，但对于发送数百万封电子邮件的大量垃圾邮件发送者来说，费用将变得难以承受。|875784|这一主题的一个变化是，每封电子邮件都有一个链接，如果点击该链接表示它是否是垃圾邮件。如果点击，寄件人将收取邮资。如果不是，电子邮件是免费的。|875785|这两种方法的问题在于它是一个煮沸海洋问题。你需要有一个网络的电子邮件服务器，以加强邮资，并使它希望在系统上。如果您是唯一的服务器收取邮费，其他人会找到另一个供应商。|offset|length|875786|entityMap|0|LINK|mutability|MUTABLE|url|http://www.joelonsoftware.com/articles/fog0000000054.html^0|0|0|0|E|6|0|0^^$0|@$1|2|3|4|5|6|7|R|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|S|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|T|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|U|8|@]|9|@$H|V|I|W|1|X]]|A|$]]|$1|J|3|-4|5|6|7|Y|8|@]|9|@]|A|$]]]|K|$L|$5|M|N|O|A|$P|Q]]]]

Responding to your request for new items to the list...

One proposed way to fight spam is to charge 'virtual postage' on email. Something in the neighborhood of a fraction of a cent per email. This would be a very minor inconvenience to a normal user, but to a bulk spammer sending millions of emails, the costs would become prohibitive.

A variation of this theme is that each email has a link that if clicked indicates whether it is spam or not. If clicked, the sender is charged the postage. If not, the email is free.

The problem with both of these approaches is that it is a <a href="http://www.joelonsoftware.com/articles/fog0000000054.html" rel="nofollow noreferrer">boil the ocean problem</a>. You need to have a network of email servers that enforce the postage and make it desirable to be on the system. If you are the sole server charging postage, everyone else will find another provider.

blocks|key|218159|text|使用IP黑名单。阻止垃圾邮件网络，具有静态IP的已知机器人等等。它们不足以进行完全的保护(您无法有效地与动态IP对抗Windows僵尸)，但可以显著减少垃圾邮件的数量。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|218160|至于其他的，让我们通过那些看起来完全无辜的帖子。|218161|您已经检测到用户的浏览器支持JavaScript|unordered-list-item|218162|post不包含链接|218163|用户不是从国家/ISP连接的，因为你比访问者收到更多的垃圾邮件。|218164|这个IP没有提交过很多可疑的帖子|218165|在所有其他案件中都需要验证码。|218166|如果你想为此付出更多的努力，你应该对文本进行贝叶斯过滤，并跟踪喜欢的域的信誉。|218167|我已经实现了一个相当全面的过滤器- Sblam！，它实现了各种反垃圾邮件技术，并接口了几个外部黑名单。它是开源的，所以请看一看并复制代码！|218168|entityMap|0|LINK|mutability|MUTABLE|url|http://www.spamhaus.org/drop/drop.lasso|1|http://sblam.com/blacklist.txt|2|http://code.google.com/p/sblam/^0|A|6|0|H|C|1|0|0|0|0|0|0|0|0|8|G|2|0^^$0|@$1|2|3|4|5|6|7|16|8|@]|9|@$A|17|B|18|1|19]|$A|1A|B|1B|1|1C]]|C|$]]|$1|D|3|E|5|6|7|1D|8|@]|9|@]|C|$]]|$1|F|3|G|5|H|7|1E|8|@]|9|@]|C|$]]|$1|I|3|J|5|H|7|1F|8|@]|9|@]|C|$]]|$1|K|3|L|5|H|7|1G|8|@]|9|@]|C|$]]|$1|M|3|N|5|H|7|1H|8|@]|9|@]|C|$]]|$1|O|3|P|5|6|7|1I|8|@]|9|@]|C|$]]|$1|Q|3|R|5|6|7|1J|8|@]|9|@]|C|$]]|$1|S|3|T|5|6|7|1K|8|@]|9|@$A|1L|B|1M|1|1N]]|C|$]]|$1|U|3|-4|5|6|7|1O|8|@]|9|@]|C|$]]]|V|$W|$5|X|Y|Z|C|$10|11]]|12|$5|X|Y|Z|C|$10|13]]|14|$5|X|Y|Z|C|$10|15]]]]

Use IP blacklists. Block <a href="http://www.spamhaus.org/drop/drop.lasso" rel="nofollow noreferrer">spammer-owned networks</a>, <a href="http://sblam.com/blacklist.txt" rel="nofollow noreferrer">known bots with static IPs</a>, etc.
They're not enough for complete protection (you can't effectively fight Windows zombies with dynamic IPs), but significantly reduce volume of spam.

As for the rest, let through posts that look completely innocent, e.g.

<ul>
<li>you've detected that user's browser supports JavaScript</li>
<li>post contains no links</li>
<li>user isn't connecting from country/ISP from which you get more spam than visitors</li>
<li>this IP hasn't submitted suspiciously many posts</li>
</ul>

and require CAPTCHA in all other cases.

If you want to put more effort into this, you should implement bayesian filtering for text and tracking reputation of liked domains. 

I've implemented a <a href="http://code.google.com/p/sblam/" rel="nofollow noreferrer">quite comprehensive filter – Sblam!</a> that implements all sorts of anti-spam techniques and interfaces several external blacklists. It's open-source, so have a look and copy the code!

blocks|key|218204|text|我使用评注，但是它只适用于BlogEngine.net，虽然它的源代码是可用的，但是您可以从中获得一些实现的想法。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|218205|entityMap|0|LINK|mutability|MUTABLE|url|http://rtur.net/blog/post/2009/02/16/Commentor-e28093-new-version.aspx|1|http://www.dotnetblogengine.net/^0|3|2|0|D|E|1|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@$A|O|B|P|1|Q]|$A|R|B|S|1|T]]|C|$]]|$1|D|3|-4|5|6|7|U|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]|L|$5|G|H|I|C|$J|M]]]]

I use <a href="http://rtur.net/blog/post/2009/02/16/Commentor-e28093-new-version.aspx" rel="nofollow noreferrer">Commentor</a>, but it only works with <a href="http://www.dotnetblogengine.net/" rel="nofollow noreferrer">BlogEngine.net</a>, although its source is available, you could get some ideas to implement from it

blocks|key|1217242|text|评论垃圾邮件通常是用僵尸网络完成的，所以任何依赖IP黑名单的东西最终都会阻塞合法用户。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1217243|专注于使用阿基斯迈特分析消息内容，或者使用经过验证的可访问的CAPTCHA解决方案(如reCAPTCHA+)。|offset|length|1217244|大多数语言和应用程序都可以使用库和插件。|1217245|entityMap|0|LINK|mutability|MUTABLE|url|http://akismet.com/|1|http://recaptcha.net/^0|0|5|5|0|17|9|1|0|0^^$0|@$1|2|3|4|5|6|7|R|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|S|8|@]|9|@$D|T|E|U|1|V]|$D|W|E|X|1|Y]]|A|$]]|$1|F|3|G|5|6|7|Z|8|@]|9|@]|A|$]]|$1|H|3|-4|5|6|7|10|8|@]|9|@]|A|$]]]|I|$J|$5|K|L|M|A|$N|O]]|P|$5|K|L|M|A|$N|Q]]]]

Comment spam is often done with botnets, so anything relying on IP blacklisting is just going to end up blocking legitimate users.

Focus on analyzing the message content with <a href="http://akismet.com/" rel="nofollow noreferrer">Akismet</a> or using a proven accessible CAPTCHA solution like <a href="http://recaptcha.net/" rel="nofollow noreferrer">reCAPTCHA</a>.

Libraries and plugins are available for most languages and applications.

blocks|key|1217261|text|其中大多数都是通过搜索引擎优化完成的，人们试图获得更多指向客户网站的链接。这使得他们在谷歌的排名更高。客户得到一个更高的排名，并认为SEO是一个伟大的工作。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1217262|所以我捕获假帖子的图像，并圈出状态栏中显示的链接。然后我找到客户的电子邮件地址，或者通过他们的网站或通过GoDaddy.com。然后我给他们发电子邮件，告诉他们图片是如何工作的，并要求他们告诉他们的搜索引擎优化，让他们停工。客户震惊地获悉，他们的SEO已经把他们变成垃圾邮件发送者。一些人甚至打电话给我，让我了解更多的(回应)说，他们将跟进SEO。在给一个客户发邮件之后，我收到了这封来自垃圾邮件发送者的电子邮件：|1217263|你好吉姆|offset|length|style|BOLD|1217264|我们正在为斯科特做市场营销。我想我的竞争对手已经在你的网站上发了我的客户名单。我会跟你核对一下的。|1217265|--请不要联系任何其他的网站所有者--我会马上检查的.|1217266|认为|1217267|我找到了他的网站，他有“我们保证在谷歌的第一页放置”。当然，他的评论是无效的.|1217268|不，这并没有让它停下来-但它让我感觉好多了。|1217269|entityMap^0|0|0|0|4|0|0|1D|0|0|R|0|0|2|0|0|0^^$0|@$1|2|3|4|5|6|7|V|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|W|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|X|8|@$F|Y|G|Z|H|I]]|9|@]|A|$]]|$1|J|3|K|5|6|7|10|8|@$F|11|G|12|H|I]]|9|@]|A|$]]|$1|L|3|M|5|6|7|13|8|@$F|14|G|15|H|I]]|9|@]|A|$]]|$1|N|3|O|5|6|7|16|8|@$F|17|G|18|H|I]]|9|@]|A|$]]|$1|P|3|Q|5|6|7|19|8|@]|9|@]|A|$]]|$1|R|3|S|5|6|7|1A|8|@]|9|@]|A|$]]|$1|T|3|-4|5|6|7|1B|8|@]|9|@]|A|$]]]|U|$]]

Most of these are done by search engine optimization people trying to get more links back to their client's site. This gets them a higher ranking in Google. Client gets a higher ranking and thinks the SEO is doing a great job.

So I capture the image of the fake post and circle the link shown in the status bar. I then find the clients email address either thru their site or thru GoDaddy.com. I then email them the image, tell them how it works and ask them to tell their SEO to knock it off. The clients are shocked to learn that their SEO has turned them into spammers. Some have even called me to learn more and most (that respond) say they will follow up with the SEO. After emailing one client I actually got this email from the spammer:

Hello Jim 
We are marketing for for Scott. I think my competitor have spammed your site with my client list. I will check back with you. 
Please dont get to any of other webowners i will check this right away. 
Regards

I found his web site where he has "We gurantee first page placement on Google". Of course, his comments were disabled.....

No, this hasn't made it stop - but it makes me feel better.

How can I combine the followings to fight spam and at the same time minimize annoyance imposed to the user?

<ol>
<li>In registration page, sending an email to verify the email address</li>
<li>In registration page, use CAPTCHA</li>
<li>In every post page, use CAPTCHA</li>
</ol>

Feel free to add new items to the list, and please tell your suggested scheme in boolean expression, eg: (1 and 3) or 2

What's the best scheme for eliminating blog- or comment-spam

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

如何结合以下内容来打击垃圾邮件，同时最大限度地减少对用户的烦恼？在注册页面中，发送电子邮件以验证电子邮件地址。在注册页面中，使用验证码。在每一篇文章中，使用验证码请随意将新项目添加到列表中，并以布尔表达式告诉建议的方案，例如：(1和3)或2

问消除博客或评论垃圾邮件的最佳方案是什么？
EN

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问消除博客或评论垃圾邮件的最佳方案是什么？EN

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问消除博客或评论垃圾邮件的最佳方案是什么？
EN