I do a few things and its been working quite well. It involves 3 features.
1) Set up a blacklist and a whitelist for posting. 2) Set some session variables on the form itself to prevent automated posting from other sites. Check those variables on the processing page. (if the page is prevented because of this, and if the user email and/or ip is not in the blacklist, then log those two bits onto the blacklist 3) Check subject, contents for bad words on a bad word list. If the words are in the bad words list, check the blacklist. If they are on the blacklist, discard. IF they are not, put them on the blacklist. (Bad word list must be updated fairly often, see 5) 4) BlackList/White List a) Check the blacklist, for either the email or the ip. (in checking my db when I was getting hit, spammers will tend to use the same email address and the same ip address, just not always the at the same time. If they are on the blacklist, stop processing and proceed. b) If they aren't on the blacklist, check the whitelist for ip and email), if they are whitelisted, then post, send out subscriptions, nothing else is needed. 5) If the poster is neither on the black list or the white list, then post it and send the blog master an email with the posting. Have two links on the post. If the posting is spam, the blogmaster can click the blacklist link and blacklist them. This removes the post from the db and puts the information onto the blacklist. Take care to use this for spam only and not for comments you simply don't like. If the post is good, then whitelist it and this will then send subscription emails out for people who wanted to be notified on the blog article. It's a bit more complex than a captcha, but its invisible to most users. I do tend to send out an email to first time posters, explaining the situation, but haven't gotten any complaints on that. It involves some of your time patrolling, but I've found that instead of getting 100 spam comments on my site per day, I'm getting maybe 2-3 a week that slip by and that usually involves me just putting more stuff in my bad words list. Its also highly accessible (since it involves no extra user involvement). Sandra Clark ============================== http://www.shayna.com Training in Cascading Style Sheets and Accessibility -----Original Message----- From: Richard Cooper [mailto:[EMAIL PROTECTED] Sent: Monday, November 13, 2006 7:26 AM To: CF-Talk Subject: Capture Alternatives Hi all, Has anyone come up with any alternatives to using form captures for preventing spam bots? Ideally I'd like a solution that is relatively seamless to the users requiring little/no extra involvement. R ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Introducing the Fusion Authority Quarterly Update. 80 pages of hard-hitting, up-to-date ColdFusion information by your peers, delivered to your door four times a year. http://www.fusionauthority.com/quarterly Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:260164 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4