Reputation
4,122
Top tag
Next privilege 5,000 Rep.
Approve tag wiki edits
Badges
1 13 36
Newest
 Caucus
Impact
~178k people reached

Jul
15
awarded  Caucus
Feb
21
awarded  Yearling
Jan
15
reviewed Approve Odd requests from Apache logs
Dec
15
revised Should I be worried about this url request I received on my site?
Formatting and spelling.
Dec
9
answered POODLE attack against TLS vulnerability
Dec
7
revised How can this web server be compromised?
added 155 characters in body
Dec
7
answered How can this web server be compromised?
Dec
1
comment Weird characters from contact page
That validation of the form fields you're doing before "forwarding" to thankyou.php, is that done using Javascript?
Dec
1
revised Weird characters from contact page
Formatting, removed unnecessary fluff.
Dec
1
comment Weird characters from contact page
The HTML5 "required" attribute is a client-side control. Browsers more than a couple of years old don't have it at all. No spam bot will ever implement it. You should enforce field validation in the target PHP script (which, if I understand correctly, is thankyou.php). It might help if you included the code from thankyou.php in your question.
Nov
25
reviewed Close Weird characters from contact page
Nov
25
comment Weird characters from contact page
You're probably right. Bots are better at solving CAPTCHAs (even ReCAPTCHA) than humans are these days. And bots don't have to be anywhere near as good as humans to make it economical if there's no rate-limiting in place.
Nov
21
reviewed Approve How does WebID fit in the SAML picture?
Nov
19
revised Ipsec connection fails
Formatting and spelling.
Nov
5
answered Can the attacker launch a sufficiently large SYN flood to overwhelm the victim's server?
Sep
30
awarded  Explainer
Aug
27
awarded  Scholar
Aug
27
accepted How should I choose a difficulty factor for my password hashing function?
Aug
11
comment REST API: does securing the first call with a CAPTCHA make sense?
You want to use email addresses as an identifier without verifying that the user owns the email address? Why use emails? Why not just let your users choose a unique username and use that as their identifier?
Aug
4
awarded  Nice Answer