Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations dencom on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
flooding textfields/textareas.
- Thread starter mcode12
- Start date
DotNetGnat
Programmer
put the maximum character limit on those fields...
-DNG
-DNG
- Thread starter
- #3
I'm not exactly sure of the question.
Do you want to limit the amount of text submitted in each transaction? Suppose you want only 1000 characters per submission... you could reduce the field size in the actual database table and then add some server-side ASP to truncate the text before inserting it into the database, perhaps with the Left() function.
Has someone written a program to automatically submit over and over and over until your database is full? If so then perhaps some sort of CAPTCHA is the answer. See:
Do your users need to be logged into your system before they submit the data? Perhaps you should not take anonymous submissions? If you know WHO is submitting the data then you can limit the number of submissions per username per day/week/month.
If none of these describe your situation then please clarify the question.
Do you want to limit the amount of text submitted in each transaction? Suppose you want only 1000 characters per submission... you could reduce the field size in the actual database table and then add some server-side ASP to truncate the text before inserting it into the database, perhaps with the Left() function.
Has someone written a program to automatically submit over and over and over until your database is full? If so then perhaps some sort of CAPTCHA is the answer. See:
Do your users need to be logged into your system before they submit the data? Perhaps you should not take anonymous submissions? If you know WHO is submitting the data then you can limit the number of submissions per username per day/week/month.
If none of these describe your situation then please clarify the question.
guitardave78
Programmer
I take it they are spamming the text field.
Pain in the butt when they do that.
i put a text box with a random question in it, like Are you Human.
If they answer it yes then fine submit everything, but if they fail to answer then it is a bot and you dont submit it.
}...the bane of my life!
Pain in the butt when they do that.
i put a text box with a random question in it, like Are you Human.
If they answer it yes then fine submit everything, but if they fail to answer then it is a bot and you dont submit it.
}...the bane of my life!
- Thread starter
- #6
guitardave78
Programmer
You could set it so that if the submit text field is empty it does not submit to the database.
if request("textfield") <> "" then
'do my database stuff
else
response.write("Invalid Entry")
end if
}...the bane of my life!
if request("textfield") <> "" then
'do my database stuff
else
response.write("Invalid Entry")
end if
}...the bane of my life!
- Thread starter
- #8
One option would be to store the time in a session variable on a successful post. Each time the form is submitted you would first check if that session variable has a value and then if that time is more than a certain number of seconds or minutes from the current time (basically a DateDiff between the session variable and Now).
Another option that I use occasionally when we have people re0submitting entries (accidentally or on purpose) is to do a SELECT from the database ahead of time to see fit he content has already been submitted once. If it has, I output an error to that effect, otherwise I continue with the submit.
-T
Best MS KB Ever:
Another option that I use occasionally when we have people re0submitting entries (accidentally or on purpose) is to do a SELECT from the database ahead of time to see fit he content has already been submitted once. If it has, I output an error to that effect, otherwise I continue with the submit.
-T
Best MS KB Ever:
- Thread starter
- #10
guitardave78
Programmer
You could redirect them away from the page after a submit as well.
Most floods are done by bot scripts, not someone sat there hitting submit !!
}...the bane of my life!
Most floods are done by bot scripts, not someone sat there hitting submit !!
}...the bane of my life!
- Status
Similar threads
- Locked
- Question
- Locked
- Question