Anti-Spam Image Plugin for WordPress

Now that the comment-spams are gone I have enabled commenting again, please feel free to leave your comments. I am using Peter’s Custom Anti-Spam Image Plugin for WordPress for it. So far it has been effective, it uses a security image that will generate an image with the Custom words that you have specified. You can also specify the font to be used, you can upload any true type fonts to the base of your Blog folder and it will display the custom words in that particular font style. When choosing the font type you have to make sure that it is not too easy for the spambot to guess it, some spambots are capable of reading the images and filling the fields accordingly. On the other hand it should not be too difficult to read for the user, otherwise it will compromise your usability.



7 Comments on "Anti-Spam Image Plugin for WordPress"

  1. felix says:

    AFAIK no spambots can actually process a captcha image into text. Spambots get around captchas by hacking directly into the backend code.

    FYI, with this implementation, if you get the captcha wrong and hit back, all your form data is erased.

  2. admin says:

    felix you are correct, if you get the capcha wrong all the data will be lost, that’s why I have minimized that risk by making the capcha not so difficult. I am sure 99.99% people will get it correct.

    If spambots can’t read capchas then why the skewed fonts and not so clear image backgrounds used in capchas?

  3. guya says:

    There are tons of open-source projects at sourceforge.net that let you read capchas. The (damn) bots are probably using one of these.

    Thanx for the info on the plugin.
    :)

    p.s. your capcha isn’t easy enough, imho.

  4. nurba says:

    jakshy ee :) the “anti-spam” word said “kanday4″.. hehehe.. hence is my reply.

  5. A couple of days ago I got an e-mail spam, which offered a library written in C++ that easily reads captcha images of all kinds of difficulty (they say so, haha).

    Not sure, maybe they just try to sell some non-working sh*t?

  6. Sesso says:

    The code generated above is written in JavaScript, and it performs several non-trivial computational tasks to encode addresses, not a simple replacement of each character by its entity code or a string concatenation, as done by most anti-spam encoders. JavaScript is the standard computer programming language for use on web pages. To be able to perform the computation prescribed by the code, a software application must be able to understand that language. All recent web browsers do. This is however not the case of webcrawlers. Why not?

Got something to say? Go for it!