Finding lasting solution to spamming in form

What is a spam bot?

A spam bot is a malicious program or software designed and used by soammers to to submit forms with fake and real email addresses, attaching links to their private web pages. Spam bot can cause series of problems.

Some simply spam your comment section in a form for the purpose of SEO backlinks which allow them to gain authority.

One thing is for sure, spammers are never relenting once they target your websites, they just keep spamming your contents and posting gibberish which are not even related to the content, some can send malicious email via your contact forms and this is very annoying for most developers managing a website.

There is a big problem with the spammers nowadays. There are a lot of scripts that are running throughout different websites and try to submit a form wherever they come across.

Official Launching of Mayeconcept Web Services

Dear great minds, I'm pleased to tell you that today, 11th of January, 2021, we...
Read More
Creating custom helper functions in Laravel

Hello again! today we are going to learn about helper function in laravel and also...
Read More
Loan web application with PHP Laravel framework

Over the past few weeks I’ve been able to engage myself in creating a full...
Read More

There goes the question: what is the lasting solution to prevent spamming on your website.

The solution varies depending on your website type or frameworks you are using: Laravel framework, WordPress, PHP, and any other frameworks you are using.

I’ll be proffering solution using php which works on any php framework or web pages with PHP codes.

Options:

Re-captcha
Honeypots
Plugins and packages etc.

Re-captcha: This is a favorite options for most developers this goes a long way in preventing Spam bots in submitting forms, because you need to verify a checkbox before submission. Google has invisible reCaptcha which is probably the best captcha option. Another way is to create your own. This is quite easy and can be done in few steps. I call this a math re-captcha: what it does is, it give you a simple math addition question to answer before submitting a form, then afterwards you use a condition to check if the answer is correct then submit or wrong and reject.

The simple way of doing this is as follows:

Write a php code declaring the following values

<?php
$min = 1;
$max = 15; // any max you want, but keep it simple, so you don’t leave your users to be solving complex math.
$dig1 = rand($min + $max);
$dig2 = rand($min + $max);
These gives two random numbers
$sum = $dig1 + $dig2;

So in your form you would have and hidden input field with the value of $sum

Label: what is: $dig1 .’ + '. $dig2

<input type=”text” name=”quiz” placeholder=”write your answer here”>
<input type=”hidden” style=”display:none” name=”quizAns” value=”$sum” readonly>

Note that this code should be on the page you are processing the form, so that the value can be sent together with the rest of the input to your controller or processing page.

If you are using Laravel you can simply use

@php declare variable here @endphp.

After this you can then use an if else statement to either reject the form when answer is wrong or accept it when it’s right.

This solution would stop the spam bot, but need to add validation to ensure that even when the spammers input a link or tags, it’s validated.

Your contents assigned value e.g $content we can then use this to validate

$content = Strip_tags($content); // this remove any html tags.

Then you can declare a regular expressions to replace every link with a white space, and afterwards save it to your database.

With this, we have been able to sanitize our content, so that we don’t see unnecessary links in our form request.

Another option is using the Honeypots: These are a first-line defense and are pretty easy to setup. The way they work in this context is you add a hidden form input that should never have a value, then when the form is submitted if that hidden field has a value you know it’s probably from a bot, hence you discard that submission.

Dedicated Spam Services: This is using external packages or plugins e.g Honeypots, Akismet and so on.

People have used Akismet extensively on WordPress website, but it can also be used with any app including Laravel. You’ll just need to tap into their API or use an existing page like nickurt/laravel-akismet.

Stop Forum Spam is a free service that sounds similar to Akismet and Laravel packages like nickurt/laravel-stopforumspam exist to help with the integration.

That’s it guys, I hope this is helpful, you can drop a comment if you need any clarifications and it would be answered accordingly.