Member Avatar for msaqib

hello people
I am having 2-3 web forms on my website for guestbook and tutorial submission.
But these days i am getting tons of spam guestbook entries n tutorials. I did lot of security measures but cant avoid them.
I have places security code, session check and lt of other things...

Any one could help me please.

the messages are like

| [uURL=]Wellness Stuttgart[/URL] | | [uURL=]Productpage Tanzanite[/URL] | [uURL=]1992 Card Jim Lee Trading[/URL] | [uURL=]Nexium 20mg[/URL]

thanks
Saqib

  • 2 Contributors
  • 4 Replies
  • 92 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by msaqib

Dani AI

Generated

IP blocking (good quick idea from ) will slow some attacks but not stop bots that rotate proxies or use compromised machines. For the fastest way to stop the flood is to add short-term throttles and a few low-friction server-side checks, then add stronger filters.

  • Temporarily put the guestbook into moderation or disable posting until changes are in place.
  • Reject or strip posts containing URLs or more than one link; most of the messages you showed are link-heavy.
  • Add a hidden "honeypot" form field and a server-side timestamp check (if the form is submitted in < 3–5 seconds treat it as a bot). These are cheap, effective filters.
  • Add a CAPTCHA or an API-based spam filter (e.g., or Akismet) for stronger protection.
  • Introduce per-IP rate limits (entries per hour) and log patterns for later blocking or GeoIP filtering. For background on why IP-only defenses fail against automated attackers see OWASP on automated threats ().

A tiny Classic ASP honeypot example:

' hidden input named "hp" in the form (CSS-hidden)
If Request.Form("hp") <> "" Then
  Response.End
End If

Immediate checklist: enable moderation, add honeypot + timestamp checks, block posts with URLs, and deploy reCAPTCHA/Akismet. Do not rely on client-side JS alone — always validate on the server.

Recommended Answers

All 4 Replies

Member Avatar for DanceInstructor

Record the ip of the spammers and block them.

Member Avatar for msaqib

Yeah that is the easiest work, but they are using the spam IPs means those IPs are not real and are from different countries. Thats why i can not block them.

If you have any other idea?
please let me know, coz i got 100 guestbook entries in the last 24 hours.

. Thanks

Member Avatar for msaqib

wel i have already blocked hundreds of IPs, but every time the spammer uses the new IP.
Is ther any other way to block such spams ??
thanks

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.