IDETA: Form Anti-Spam Protection without CAPTCHA

What this solution does

IDETA: Anti-spam Form Protection without CAPTCHA

The module provides silent spam protection that preserves conversion rates by avoiding barriers for users. Unlike traditional methods, it automatically distinguishes bots from humans without requiring any additional user actions, such as entering characters or clicking on images.

The solution protects registration, web forms, email events (CEvent), and, optionally, the addition of information block elements from automated spam. It operates without CAPTCHA, reCAPTCHA, or Yandex SmartCaptcha.

Key capabilities:

- Stops automated form submissions by bots without user involvement.

- Filters out typical link-based spam containing calls to click on a link.

- Maintains a log of blocked attempts with specific reasons for rejection.

- Allows selective protection of specific web forms and/or information blocks without affecting others.

How it works:

The module employs eight independent checks, each of which can be enabled and configured separately. For instance, the Honeypot method uses a hidden trap field that is visible only to automated programs.

IDETA's form spam protection module operates without CAPTCHA. The system employs a set of scripts for multi-level verification. Form submission time is secured with a cryptographic HMAC signature, making tampering impossible. It verifies that JavaScript is executed in the visitor's browser. Session validation ensures forms are submitted only after the page has fully loaded, blocking direct POST requests that bypass the site. Referer header checking prevents form submissions from external sites. A configurable blacklist of words and phrases is managed directly within the admin panel. The system applies heuristic analysis to links and typical bait phrases such as 'click here' or 'follow the link'. It also enforces a limit on the frequency of form submissions from a single session.

General iT can handle the implementation of “IDETA: Form Anti-Spam Protection without CAPTCHA”, from installation to configuration and compatibility checks.