 |
|
Customer Support
 |
|
How do I protect my website from comment spam?
Website forms are often exploited by spammers. People with weblogs, in particular, endure this problem more than necessary.SPAM bots attempting to exploit forms are poorly designed, making them easy to outsmart. If the SPAM bots do not fake a referrer, you can stop the bot with this code in an .htaccess file:
RewriteCond %{HTTP_REFERER} ^$
RewriteCond %{REQUEST_METHOD} ^POST$
RewriteRule ^/POSTprocessing.cgi - [F]
The referrer should always be your site, so you are not stopping any legitimite traffic with this rule. Keeping that in mind, you can block all referrals that aren't from you, instead of blocking blank referrers:
RewriteCond %{HTTP_REFERER} yourdomain.com [NC]
RewriteCond %{REQUEST_METHOD} ^POST$
RewriteRule ^/POSTprocessing.cgi - [F]
where POSTporcessing.cgi is the script that processes your form's POST data.
User-Contributed Notes |
|
| There are no user-contributed notes for this topic. |
Related Questions:
Why does my website just say "Error 403 Forbidden"?
How do I protect a directory with .htaccess?
How can I show a default page other than index.html?
How do I stop people from getting directory listings when I dont have an index page?
What do the different HTTP Status Codes like 200, 304, 404, 401, 403 mean?
What options are configured with Apache and what can I do with .htaccess files?
How do I protect a directory with mod_auth_mysql?
How do I stop other websites from using my bandwidth while they steal images, flash, etc. from my site?
Which Apache modules are installed?
How do I make my own Error Documents to replace the default ones like
404 Not Found?How can I make apache recognize different MIME types?
The webservers' Gzip compression is messing up my XML or Flash files for Netscape 4 browsers. How do I turn off compression?
How do I get different character sets to display correctly?
What webserver do you run?
Will I have access to raw logfiles?
I created a symbolic link, and now I am getting a 404 errors.
How do I stop the server from automatically correcting spelling mistakes in URLs or offering multiple choices for documents?
My mod_rewrite rules make my website stop loading.
Why am I getting a 412 Precondition Failed from a website?
How do I enforce the use of SSL on my website?
How do I redirect traffic to another web page?
Browse Categories:Getting Started, FTP, Telnet/SSH, Moving Domains, E-mail, Traffic Reports, Mailing Lists, Apache, PHP, CGI, Other Server-Side Scripting, MySQL Database, Imaging Libraries, Other Software, Billing & Terms, Control Panel, E-commerce, Pre-Sales |
Copyright
2000-2008 by Modwest,
Inc.