Hasty Treat - Forms, Captchas, Honeypots, Dealing With Malicious Users and the Sad State of Contact Forms

Syntax - Tasty Web Development Treats

Wes Bos

Tech News, News, Technology

4.9 • 1.2K Ratings

🗓️ 6 July 2020

⏱️ 21 minutes

🔗️ Recording | iTunes | RSS

🧾️ Download transcript

Summary

In this Hasty Treat, Scott and Wes talk about forms, captchas, dealing with malicious users, and more! LogRocket - Sponsor LogRocket lets you replay what users do on your site, helping you reproduce bugs and fix issues faster. It’s an exception tracker, a session re-player and a performance monitor. Get 14 days free at logrocket.com/syntax. Show Notes 02:00 - So you made a form: Contact form Sales form Email signup for newsletter Bug report Sign up for an account Password reset 03:00 - Now someone is going to: Have a bot that submits it Maliciously write a bot that submits thousands 04:14 - So what can you do? 4:54 - Honey pot This is a field that is either hidden or you tell the user not to fill in Can goof up autofill Works in many cases 07:37 - IP Throttle Only allow each IP to do an action a certain number or times inside a window You may only try signing up once per 10 mins 09:48 Block known ASN 12:37 - Captcha Soft captcha: “What is 1 plus 1?” Annoying captcha: Type these letters Google captcha: Train our self driving cars Hidden captcha Cloudflare hCaptcha Links Cloudflare Digital Ocean Google reCaptcha Cloudflare hCaptcha Cloudinary Tweet us your tasty treats! Scott’s Instagram LevelUpTutorials Instagram Wes’ Instagram Wes’ Twitter Wes’ Facebook Scott’s Twitter Make sure to include @SyntaxFM in your tweets

Transcript

Click on a timestamp to play from that location

0:00.0	Monday, Monday, Monday, Monday.
0:02.0	Open wide Dev fans.
0:04.0	Get ready to stuff your face with JavaScript,
0:07.0	CSS, node modules, barbecue tips, get workflows,
0:10.0	breakdancing, soft skills, web development,
0:12.0	the hastiest, the craziest, the craziest development the hastiest the craziest the tastiest web development treats coming in hot here is
0:18.1	Wes Barracuda bars and Scott El Toroloco, Tolinsky.
0:25.0	Oh, welcome to Syntax.
0:28.6	In this Monday, hasty treat, we're going to be talking all about forms,
0:32.0	captas, honeypots,
0:33.6	and dealing with malicious users.
0:36.6	That's right, we're talking about contact forms
0:38.3	and forms overall within HTML, JavaScript,
0:41.6	and the web. My name is Scott Tolensky. I'm a developer from
0:44.5	Denver, Colorado and with me as always is the West Boss. How you doing?
0:48.1	Wes? I'm doing great. I am back in Hamilton for a couple weeks.
0:52.6	So we came home from the cottage and my internet here is fast.
0:55.8	I can see you.
0:56.9	There's no latency.
0:59.4	It's a good life.
1:01.5	It feels weird that there's no latency that we're actually on webcam now. That's wild to me.
1:07.6	What also is wild is one of our sponsors which allows you to not only like right now I can see West but our sponsor today
	...

Please login to see the full transcript.

Previous episode | Next episode

Disclaimer: The podcast and artwork embedded on this page are from Wes Bos, and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of Wes Bos and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.