Ways to protect posting forms?

There have been spammer scripts posting bad content into one
of my forms..
is there a way to protect this?

CAPTCHA =
http://en.wikipedia.org/wiki/Captcha
"bregent" <[email protected]> wrote in
message
news:e8ue85$7v4$[email protected]..
> >I have made forms that disable submission from
certain IP's.
> >You could capture the IPs of all submitters, and
store the violaters in a
> table and prevent those IPs from submitting the form.
>
> Most spammers don't use static IP's, so that doesn't
really accomplish
> much
> except to possibly block valid users.
>
> A better suggestion is to start by validating all fields
on the server
> side.
> Many spam scripts aren't clever enough to fill out all
fields correctly.
> If
> that still doesn't work, you may have to employ some
sort of captcha. You
> also
> need to protect against form injection. What scripting
language are you
> using?
>

Similar Messages

What is the best way to clone a form field in BC

Hi,
What is the best way to clone a form field in BC. I tried using jquery .clone. It works fine on other forms for me but not on the BC forms, why? is it just me? Any help would be great. Thanks

I mean, duplicate a field with the click of a button.
I think this should work, but it's not and I am linked to the jquery library in the head of my page.
<script type="text/javascript">
$(document).ready(
function() {
    $('input#tmpAddRow').click(
      function($e) {
        $e.preventDefault();
        $('tr#tmp').clone(true).removeAttr('id').appendTo('tbody');
    $('tr input[type=text]').focus(
      function() {
        $(this).addClass('myFocused');
    ).blur(
      function() {
        $(this).removeClass('myFocused');
    </script>
<img alt="" style="border: 0px solid; width: 200px; height: 134px; float: left;" src="/images/pv logo 3d.png" />
<h3 style="text-align: center; color: #0000ff; text-shadow: #999999 0px 1px 5px;">Member Directory Listing</h3>
<p style="text-align: center;">If you would like to be listed in the Pine Valley Middle School Directory, please fill out this form. Only fill out the areas you would like to show up in our Directory.</p>
<div style="margin-left: 130px;" class="form_bg">
<form action="/CustomContentProcess.aspx?CCID=5656&OID={module_oid}&OTYPE={module_otype }" method="post" enctype="multipart/form-data" onsubmit="return checkWholeForm45842(this)" name="catcustomcontentform45842">
    <table cellspacing="0" cellpadding="2" border="0" class="webform">
        <tbody>
            <tr>
                <td id="tmp"><label for="ItemName">First Name</label><br />
                <input type="text" value="{module_firstname}" maxlength="255" id="ItemName" name="ItemName" class="cat_textbox_small" /><br />
                <input type="button" id="tmpAddRow" value="Add a Row" />
                </td>
            </tr>
            <tr>
                <td><label for="CAT_Custom_131512">Last Name</label><br />
                <input type="text" value="{module_lastname}" class="cat_textbox" id="CAT_Custom_131512" name="CAT_Custom_131512" maxlength="1024" /></td>
            </tr>
            <tr>
                <td><label for="CAT_Custom_131509">Number</label><br />
                <input type="text" value="{module_homephone}" class="cat_textbox" id="CAT_Custom_131509" name="CAT_Custom_131509" maxlength="1024" />
                </td>
            </tr>
            <tr>
                <td><label for="CAT_Custom_131510">Email</label><br />
                <input type="text" value="{module_emailaddress}" class="cat_textbox" id="CAT_Custom_131510" name="CAT_Custom_131510" maxlength="1024" /></td>
            </tr>
            <tr>
                <td><label for="ItemAddress">Address</label><br />
                <input type="text" value="{module_homeaddress}" maxlength="500" class="cat_textbox" id="ItemAddress" name="ItemAddress" />
                </td>
            </tr>
            <tr>
                <td><label for="ItemCity">City</label><br />
                <input type="text" value="{module_homecity}" maxlength="255" class="cat_textbox" id="ItemCity" name="ItemCity" /></td>
            </tr>
            <tr>
                <td><label for="ItemState">State</label><br />
                <input type="text" value="{module_homestate}" maxlength="255" class="cat_textbox" id="ItemState" name="ItemState" />
                </td>
            </tr>
            <tr>
                <td><label for="ItemZip">Zipcode/Postcode</label><br />
                <input type="text" value="{module_homezip}" maxlength="255" class="cat_textbox" id="ItemZip" name="ItemZip" /></td>
            </tr>
            <tr>
                <td class="hidden"><label for="FirstName">First Name</label><br />
                <input type="text" value="{module_firstname}" class="cat_textbox" id="FirstName" name="CAT_Custom_131511" maxlength="1024" /></td>
            </tr>
            <tr>
                <td><input type="submit" id="catcustomcontentbutton" value="Submit" class="cat_button" /></td>
            </tr>
        </tbody>
    </table>
    <script type="text/javascript" src="/CatalystScripts/ValidationFunctions.js"></script>
    <script type="text/javascript" src="/CatalystScripts/Java_DatePicker.js"></script>
    <script type="text/javascript">
//<![CDATA[
var submitcount45842 = 0;function checkWholeForm45842(theForm){var why = "";if (theForm.ItemName) why += isEmpty(theForm.ItemName.value, "Item Name");if (theForm.Days) why += isNumericIfVisible(theForm.Days, "days"); if (why != ""){alert(why);return false;}if(submitcount45842 == 0){submitcount45842++;theForm.submit();return false;}else{alert("Form submission is in progress.");return false;}}
//]]>
</script>
    <script type="text/javascript">
    jQuery("#ItemName").blur(function(){
        jQuery("#FirstName").val(jQuery("#ItemName").val());
</script>
</form>
</div>

Tab canvas + post-forms-commit + form_trigger_failure

Hi all,
There is a tab canvas with eight tab pages in my forms.
In the post-forms-commit form-level trigger there are controls based on some conditions before executing the processes. When the conditions in the controls are not met then a stop alert is shown and form_trigger_failure is raised. All of these actions , that is the alert and form_trigger_failure , are contained inside a procedure named affiche_erreur.
The problem is that after pressing the alert button then forms goes to the first tab page. And the focus is on a non-navigable button ! Very strange !
I trapped the form_trigger_failure exception in post-forms-commit , but untill now I do not find any way how to put the focus in a specific item.
So how to put the focus into a specific item or a specific tab page ?
Thank you very much indeed

Mark , the when-tab-page-changed trigger does not fire after I pressed the alert button although the focus goes always to the non-navigable button in the first tab-page. I wrote a pause statement at the beginning of the when-tab-page-changed trigger but there was no pause alert at runtime.
Finally I created a timer in the exception of the post-forms-commit trigger which catches the form_trigger_failure exception , and in the when-timer-expired trigger I wrote go_item.

Protect a form submit cfm page

How else to I protect a form submit cfm page to make sure the request only comes from pages in my own site?
So far I have this
<cfif Not cgi.REQUEST_METHOD eq "POST">
<cflocation url="../index.cfm" addtoken="no">
</cfif>

We do the following in our application.cfm:
<cfif isDefined("FORM.fieldNames") and len(FORM.fieldNames) and NOT reFindNoCase("^(http|https)://#CGI.HTTP_HOST#/",CGI.HTTP_REFERER)>
<cfabort showerror="Forbidden Request - POST request denied.">
</cfif>

Question on why Class is not being called by POST Form action

Hello I am trying to use JavaMail and send an email to myself for a test through a JSP form. I have this line in my jsp code
<form name="emailSendForm" action="servlet/EmailServlet/NewEmail.class" METHOD="POST" >Then this is my doPost method
public void doPost (HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException {
System.out.println("Hello we are in the New Mail");
HttpSession session = request.getSession (false);However, nothing happens when I hit my submit button. Even my system.out message is not even appearing. I am missing a piece of code? Thanks

Where are you storing the .class file? I'm getting the idea that you are not storing it inside the WEB-INF/classes directory but in the web root like you would a JSP.
Servlets don't work that way. I'll illustrate an example setup.
Say I have a servlet called NewEmail and it is in the package servlet.email.
step 1: make sure the servlet .class file is stored in the proper directory. This is webapproot/WEB-INF/classes/servlet/email/NewEmail.class. The directory structure inside the WEB-INF/classes directory matches the package of the servlet (this directory is part of the classpath of your web application).
step 2: define the servlet in the WEB-INF/web.xml file of your web application. If you don't do this you cannot invoke the servlet.
<servlet>
<servlet-name>NewEmail</servlet-name>
<servlet-class>servlet.email.NewEmail</servlet>
</servlet>
<servlet-mapping>
<servlet-name>NewEmail</servlet-name>
<url-pattern>/NewEmail</url-pattern>
</servlet-mapping>The url-pattern defines how you will be invoking your servlet through the web. NewEmail means that you can submit to "NewEmail" or call the servlet as http://yourwebsite.com/NewEmail.
Step 3: put the right URL in your form
<form name="emailSendForm" action="NewEmail" method="post">
</form>Again, check that the action attribute matches the url-pattern without the slash in front of it.
That should do it! Unless I made a typo somewhere of course.
Note by the way that System.out.println is NOT going to send anything to the browser, but most likely to a logfile kept by the webserver. You need to send data using the response object to make it appear in the browser.

Post form parameters to a new URL

Hello,
I want to create a jsf page which has a form that posts data to a payment system, example URL: https://<<<mypayserver>>>/newpayment .
However, jsf uses postbacks to post form's data to itself and use the navigation model to navigate through pages.
So my question is:
Should I use ExternalContext#redirect() for redirecting the request to the payment URL? Will the form's data be transferred in the request?
Or should I use vanilla html to do that? I don't want to use the html solution, because I have to do some checks before I send the data, but if there is no other way, I wll do the checks some other way.
Thanks in advance,
Tony
Edited by: deathstar100 on Apr 2, 2008 12:37 AM
Edited by: deathstar100 on Apr 2, 2008 12:38 AM

I don't think that you can delete this form_fields because they are system specific.
http://help.sap.com/saphelp_nw04/helpdata/en/ce/3dd23a09313b37e10000000a11405a/content.htm
Probably you should explicitly select the formfields you want to write into the URL with the SET/GET_FORM_FIELD(S) methods.
You can construct your own URLs with your own params. Check the Interface methods from IF_HTTP_UTILITY, IF_HTTP_ENTITY (IF_HTTP_REQUEST/RESPONSE) ...
Regards
Volker
Message was edited by:
Volker Ritzau

*****Is there any way to protect against this latest cyber "bug"?

I just read a newspaper article this morning that announces a major danger of a new computer but to Mac OSX systems. Does anyone know of a way to protect against this? I have one iMac, but also have an Apple router in my home. It is scary to think that a bug can take control of your computer.

My understanding from posts here and official statements in the public domain is that Apple is working diligently on the issue.
I fear that we older model/OSX owners may be out of luck with patch help from Apple, as officially Apple does not support older stuff. Fortunately, there are many folks in the WebWideWorld that still care about us old folks - so Google searching " yourCurrentOSversion BASH patch " may help in finding those who have tackled the task of helping old folks across the street.
When and if you discover such help in the WWW, Caveat Emptor - Buyer Beware... there will surely be nefarious characters looking to exploit this all-too-real fear (not paranoia if they are really after you)
I follow with vested interest.
CCC

What is the best way to protect it?

I HATE getting scratches or any sort of cosmetical damage on my devices, I am getting my first MBP on Friday, and want to know what the best way to keep it like new is?
It won't be leaving the house regularly for a while, but I do have a neoprene case which I think it will fit for travelling anyway.
I have seen many people with cases on their Macs, I don't know what the proper name is for them, but they are like hard shells attached to the back of the lid, are these recommended? I have read about some heat issues with it.
What is the best way to protect the screen? I don't ever touch it, so I don't think that will be a problem, but cleaning dust off etc.?
Lastly, will the trackpad wear away? My laptop's trackpad has slightly faded from it being used a lot, are MBP's prone to this too? I will try to use a mouse as much as possible.
Are there any other things I should know about? I read that the bottom can get scratched easily too? I would only use it on a flat surface, so something like my lap, so depending on how soft the metal is... It can't be that bad can it?
Thanks!

Wouldnt buy that, nope
Hard cases protect the finish of your macbook, but they trap in heat, ....many here have spoken on same.
A major part of a macbook pro, especially a RETINA PRO is dissipating heat from the alloy case, which this case prevents from happening.
Yes, youre stopping all the scratch,.....and likewise keeping the Macbook from dissipating a lot of heat.
When I said INCASE, I meant this:
http://www.amazon.com/Incase-CL57482-Nylon-Sleeve-13-Inch/dp/B0043NTOKC/ref=sr_1 _1?ie=UTF8&qid=1382551803&sr=8-1&keywords=incase+carry

How can I use the POST form in defining a SAMLCredentialMapperV2

Hi,
I am trying to configure the SAMLCredentialMapperV2 in our WebLogic Portal 10.3.2. There is a parameter called "POST form -
The POST form used with this SAML Relying Party". Can anyone give me a hint of how I can use this form parameter, where I have to deploy this form
and where can I find documentation about those parameters.
Any help would be appreciated.
Best Regards
Edmund

As far as i remember his parameter was optional
http://www.oracle.com/technology/pub/articles/dev2arch/2006/12/sso-with-saml.html is probably a better article, dont know if has any updates since this was written for 9.2

Is there a way of protecting PDF documents from printing and/or copying?

Does anybody know a way of protecting PDF documents from printing and/or copying? All this within the OS possibilities? Is there a way?
know one can buy expensive programmes like from Adobe, but I use it so little that I would like a cheaper solution. Freeware would be great, shareware also.
Any suggestion grateful received.

No way to do that using the OS (although the entire pdf can be encrypted, once the password is applied the document is open for copying/printing).
However, the freeware PDFLab does allow password protection, the 'owner' pw allows full access, the 'user' pw can be restricted for printing, copying, etc:
http://www.iconus.ch/fabien/pdflab/
This can also be done with Adobe's Create PDF Online, but the above is free, and works well.
Hope this helps...

How do I authorize my 100+ previously purchased itunes music that is in protected aac form? It prompts that my computer is not authorized even though it is.

How do I authorize my 100+ previously purchased itunes music that is in protected aac form? It prompts that my computer is not authorized even though it is.

are you saying that your computer is autharized from guessing, or do you know it is becuase it says it. in itunes, go to the advanced tab and the last option in that tab should be either aurhorize, or de-authorize. What does it say?

What are the 3 ways to call a form from another form?

What are the 3 ways to call a form from another form?
What is the command to call a report from within a form?
How do you attach a menu to a form?

Hi,
1. Should be new_form, call_form and open_form
2. The command is run_product
3. There is a property 'Menu Module' in form, just change it to your menu file name
Regards,
George
Can anyone help me with the following questions...
What are the 3 ways to call a form from another form?
What is the command to call a report from within a form?
How do you attach a menu to a form?
Thanks for your time..
Madhu

Is there a way to change the way to preview my Form (in Peview PDF)?

Hello.
I installed the new Adobe LiveCycle V9, them I trying to preview my forms in "Preview PDF", but I think this version is using the browser of internet to preview my forms. I don´t know, but always I try to preview some form, show a error saying my Adobe Reader can´t view in modal Browser/Internet.
Is there a way to preview my form directly on Adobe Reader (within Adobe LiveCycle)

Hello.
How are you?
Thanks for your reply.
I tryed to change this propriety, but it doesn't work. I think is my instalation.
Thanks so much for your helpful!!!!!

Post-form trigger raised unhandled exception

I have enabled TRANSLATION and ATTACHMENTS menu on my oracle form(form customization).
but if i click on attachment menu the window opens for attachments but when i am going to close a window it throws an exception as
**FRM-40735: POST_FORM trigger raised unhandled exception ORA-06502**
and it is not allowing to close an window i have to terminate application every time.
what shall i do in this situation ????????

Hello,
There is a related known issue for the Qualifications form of Oracle Human Resources -
PERWSQUA Cannot add Attachments to the Qualification Form - FRM-40735: POST-FORM trigger raised unhandled exception ORA-06502 (Doc ID 1470386.1)
Reference the solution steps and search on your form name as opposed to the PERWSQUA.
If still not resolved, please open an SR with the owning application of the form or for Forms Developer.
Thank you,
Deborah Bourgeois
Oracle Customer Support

What is the best way to protect my macbook on the internet

what is the best way to protect my macbook on the internet, using mobile broadband?

against what ? malware ?
on Macs, all that's needed is common sense.
Mac Virus/Malware Info

Ways to protect posting forms?

Similar Messages

Maybe you are looking for