Spam spam spam spam about blinder HOT 3 CLOSED

from blinder.

I've done this thing in the past where I make an input like:

<input type='text' name='email_for_reals' value='Enter your email address' />

And then in the stylesheet I get all like:

input[name=email_for_reals] { display: none; }

THEN, in the controller, I kick out any post where email_for_reals isn't the default value. Robots will always mess with an email field, and don't know/care/understand that css makes it invisible. It's a neat solution, until someone with a screen reader wonders why their infos never save :(

from blinder.

if you submit the CSRF as a hidden field in the for that does a great job

from blinder.