Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Is hidden field CAPTCHA secure enough?

On my website I did not wan't to use those distorted text CAPTCHAS. So I decided to go for a hidden field captcha.

e.g.

<form>

<input type="text" name="surprise" value="" style="display: none; visibility: hidden;"/>

</form>

Real user will not see this field, therefore they will leave it blank, where as spam bots will fill it in. I can then check if "surprise" field is empty or not and if it is empty continue stuff.

But I'm now asking this method, I don't think it is very secure. So can you suggest? is it safe? are there any other methods of CAPTCHA that don't require user to enter text from image?

like image 733
Ilja Avatar asked Dec 07 '11 19:12

Ilja


People also ask

Is Captcha secure enough?

Is CAPTCHA the perfect solution. No, it doesn't. For one, although Google's new system is supposed to be quite effective against automated bots, some hackers still reckon that they can organize an attack with a respectable success rate.

What is the purpose of hidden field?

A hidden field lets web developers include data that cannot be seen or modified by users when a form is submitted. A hidden field often stores what database record that needs to be updated when the form is submitted.


1 Answers

What you have here will probably help to deter spam but it is far from a complete solution. A proper CAPTCHA will get you a lot further, but depending on your needs and usage scenarios, your solution might be adequate.

like image 118
Nathan Taylor Avatar answered Oct 11 '22 12:10

Nathan Taylor