CiviCRM Community Forums (archive)

A little more on defending.  Seems like most approaches involve adding something to the form that detects a "human" and the something is evaluated by the form processing program.  Even with stand-alone forms, we could add our own captcha processing, add additional fields (what's 3 + 4) or I've had fairly good luck detecting if JavaScript is enabled.  

form action="http://<mydomain>/drupal/index.php?q=civicrm/profile/create&amp;gid=<group #>&amp;reset=1"
Sorry, so for over several versions, I continue to be clueless to where to find the code corresponding to the URL  - Tip ?

Thanks, Dave

A little more on defending.  Seems like most approaches involve adding something to the form that detects a "human" and the something is evaluated by the form processing program.  Even with stand-alone forms, we could add our own captcha processing, add additional fields (what's 3 + 4) or I've had fairly good luck detecting if JavaScript is enabled.

If you’re going with CAPTCHA anyway, you can use ReCAPTCHA.

Alternatively, a simple anti-spam measure (much friendlier to people) is to add a hidden field (or hide an input/textarea field via CSS) and require it to be empty – humans won’t see it, but spam robots often fill in all the fields they encounter.

The reCaptcha also effective keeps people out.  I personally find them very hard to read.