How a program can fill and submit a form?

[jslmvl]

Hi,

In my site, Page1.asp:
<form action="Page2.asp" method="post">
<input type="text" name="text1">
<input type="submit">
</form>
Page2.asp got the content in "text1" of page1.asp

Now, somebody visits Page1.asp and then Page2.asp many times every day by program. I want to stop him but he got a lot of IP.
Can you tell me how a program can fill in <input type="text" name="text1"> and then press the button <input type="submit">?
If you can, also tell me what I should do to stop him?

Thank you for your help in advance.

 

[foxbox]

if you want to prevent automatic form filling then normally you add an extra field to the form where you ask imput that the computer can not know.
In a situation where you do not want multiple inputs, you'll most probably end up with registered users (unique email addresses). It is relatively easy to create bogey email addresses, so it is not fullproof at once.

With a simple freeware keyboard macro i can type in something in filed text1, and press the submit. But what's the point? Why you want to do that? Or you want to know how your attacker is doing it?

 

[jslmvl]

Thank you for answering my question.

First, I don't want to do that, but I want to know what he is doing and want to find a cleverer method to stop him doing so. He tried to post adverticements and keep to do that on my site every day for a year, using various IPs.

I don't think he has all the IPs, perhaps proxy IPs?

>add an extra field to the form where you ask imput that the computer can not know

How? any code to demonstrate?

 

[foxbox]

this looks promisinng:

http://www.tipstricks.org/

Generate images with letters and numbers to make a CAPTCHA test.
* Completely FREE Classic ASP VBScript.
* The secure code is completely random.
* Dynamic image processing.
* No image file requires.
* No components requires.

3 options:
Fake latin word style
Random numbers style
Random numbers and letters styleand

i'm sure you can tweak it into more difficult images..


BTW: 1 simple way to generate auitomated submits is this: i look at page1.asp with my browser. i see the fieldnames and the page2.asp where the submit is going to. Then i write my own program on my own server, that is generating submits to your page2.asp...
On your end you must check if page2.asp is called by your webserver.

 

[jslmvl]

Thank you. I will try those things.

 

[gbaughma]

That's where Captcha comes in very handy.



Just my 2¢

"What the captain doesn't realize is that we've secretly replaced his Dilithium Crystals with new Folger's Crystals."

--Greg

http://parallel.tzo.com