In this Hasty Treat, Scott and Wes talk about forms, captchas, dealing with malicious users, and more! LogRocket - Sponsor LogRocket lets you replay what users do on your site, helping you reproduce bugs and fix issues faster. It’s an exception tracker, a session re-player and a performance monitor. Get 14 days free at logrocket.com/syntax. Show Notes 02:00 - So you made a form: 1. Contact form 2. Sales form 3. Email signup for newsletter 4. Bug report 5. Sign up for an account 6. Password reset 03:00 - Now someone is going to: 1. Have a bot that submits it 2. Maliciously write a bot that submits thousands 04:14 - So what can you do? 4:54 - Honey pot • This is a field that is either hidden or you tell the user not to fill in • Can goof up autofill • Works in many cases 07:37 - IP Throttle • Only allow each IP to do an action a certain number or times inside a window • You may only try signing up once per 10 mins 09:48 Block known ASN 12:37 - Captcha • Soft captcha: “What is 1 plus 1?” • Annoying captcha: Type these letters • Google captcha: Train our self driving cars • Hidden captcha • Cloudflare hCaptcha Links • Cloudflare • Digital Ocean • Google reCaptcha • Cloudflare hCaptcha • Cloudinary Tweet us your tasty treats! • Scott’s Instagram • LevelUpTutorials Instagram • Wes’ Instagram • Wes’ Twitter • Wes’ Facebook • Scott’s Twitter • Make sure to include @SyntaxFM • in your tweets
Nyd den ubegrænsede adgang til tusindvis af spændende e- og lydbøger - helt gratis
Dansk
Danmark