Dave

I have been finding different methods to stop SPAM. This seems to be perfect.

Yes it does.

I have a question, how do I integrate my own mailform onto wordpress? I tried wordpress pages, but that did not work because of the echo statments…

I use the cocomment plugin and this would kill it completely.

For mine, the math or “logic” challenge is better.

I don’t mind the idea of the AJAX comment form loader either, except if someone doesn’t have JS… no form. Not sure I like that either, then.

But I’ll test some ideas and see what happens. I’ll post when I’ve got something I like.

Cheers,

- Alister

-glych

Tricks that fight spam at the individual blog level are fine, but even a perfect method would not put spamers out of business unless it was universally adapted. The fight really needs to be fought at the server level. That means people need to be concerned about how a shared host fights spam when they shop around. (Ask if they use mod_security.) Then, get busy inventing a way to send feedback to a website that doesn’t rely on code that’s visible to anyone.

But if this gives me 2 months of peace for such a small move I’m all for it!

cool solution. like zak said. setting width and or setting the display to none in a css file will be harder for the bots to decipher.

theDiv = document.createElement(‘div’);
theForm = document.createElement(‘form’);
theDiv.appendChild(theForm)
document.someContainer.appendChild(theDiv);

Or, if you’re using Ajax requests, maybe show a ’sending’ animation whilst you bounce the full request back to the server, have a callback function to listen for the return and setup a new method to resend the full request back to server if the content of the submitted comment remains the same.

…

Or just simply setup a timer to record the time on each key stroke. Check for pauses in typing and/or backspacing to determine the imperfection level of input flow. What I mean by that is if they hit Ctrl+V (paste) and don’t type anything else by hand, don’t send it, just display a “Thanks for your Comment”. If they type unrealistically quick (Bot – 30 characters or more a sec) don’t accept it and just say “Thank You”.

My comments policy now sets a cookie, and if you haven’t read the comments policy, a comment form doesn’t appear.

This option has no accessibility problems, though I still have to implement an easy way for people to return to the page they were viewing to reload.

I am also not sure how well this will work with plugins like wp-cache, but I have that switched off atm.

There is other method, simple and truly transparent for users:

1. Put in the form a commented out hidden field:

If variable spam1 is passed to wp-comments-post.php, get rid of spam:

2. Put in the form a hidden field:

If variable spam2 isn’t passed to wp-comments-post.php, get rid of spam:

3. Check the value of the submit button. If it’s different from the value in the comment form, get rid of spam: