How can I make sure that my site can block automation scripts, bots?

Question

I would like to make sure my site is blocking automation tools like Selenium and QTP. Is there any way to do this? What settings on the website are related to Selenium?

Answer 1

Given the comments on the original question asking, “Why would you do this?”, You basically need to follow the same strategy as any site to make sure that the user is actually human. Methods such as asking users to authenticate or enter text from images or the like are likely to work, but this is likely to block Google crawlers and everything else.

Doing anything based on user agent strings or something like that is basically futile. This is trivial to fake.

Speed-limiting connections or the like may have limited effectiveness, but it looks like you will also inadvertently block any web crawlers.

Answer 2

Although these questions seem strange, this is ridiculous, so I tried to explore the possibilities

Besides adding CAPTCHA, which is the best and only final solution, you can block Selenium by adding the following JavaScripts to your JavaScript (this example will be redirected to a Google page, but you can do whatever you want):

<script> var loc = window.parent.location.toString(); if (loc.indexOf("RemoteRunner.html")!=-1) { // It is run in Selenium RC, so do something document.location="http://www.google.com"; } </script> 

I don’t know how you can block other automation tools, and I'm not sure if this will not block the Selenium IDE

Answer 3

to be 100% sure that automatic bots / scripts cannot be run on your sites, you do not have a website on the Internet. It will meet your requirements with confidence.

CAPTCHA is easy to break, if not cheap, thanks to crowdsourcing and OCR methods.

Proxies can be found in the wild for free or in bulk, available at extremely low prices. Again, it is useless to limit connection speeds or detect bots.

One of the possible approaches may be in your application logic, to implement ways to increase the time and cost of accessing the site, having things like checking your phone, checking a credit card. Your site will never be confused, because no one will trust your site at this time.

Solution: Do not put your website on the network and do not expect that you can effectively eliminate bots and scripts.