Geek Answers Handbook

How to stop bots from publishing and throw exceptions

I have a form where anyone can fill out a review about something, and this form is not in the entry area.

I started using captcha after more and more bots tried to introduce spam. The problem is that some bot just does not give up. I get a lot of messages about exceptions every day, because the bot is trying to enter "dangerous" data, and .NET does not allow this, because the request is verified. CAPTCHA does not help at all, since it does not even need to be filled in order to try to make a message that will throw an exception. The bot does not seem to understand that it fails every time.

Yesterday I tried changing the names of the text fields, and also added "honeypot". But this is the same problem as with captcha, the exception occurs before something is really sent to the code behind.

Should I really set ValidateRequest = "false" to allow the bot to do this even further and possibly stop making requests?

All ideas are greatly appreciated.

+5
source share
2 answers

You can:

  • Set ValidateRequest = "false" on the page, opening up the XSS feature.
  • Override the Page_Error () parameter, and then write the exception and handle it in your own way.

I think you might have to combine 2 to make this work.

protected void Page_Error(object sender, EventArgs e)
{
  Exception oops = Server.GetLastError();

  if(oops.GetBaseException() is System.Web.HttpRequestValidationException) 
  {
    System.Diagnostics.Debug.Assert(false);
  }
}
+1

, . , html javascript. , .

0

More articles:


All Articles