Solved

RegEx to validate textarea and prevent spambots

Posted on 2008-06-26
8
752 Views
Last Modified: 2011-09-20
I am getting spambots on my form and have done some form filtering but a big thing I am getting are URLs in my textarea form field. How would I code my form processing page using regular expressions to validate there are no URLs (i.e. - http://) in my textarea?

Example of what I need in bad code form:

commentsBox=request.form("comments")

regex = "{http://}"

if commentsBox contains regex then
WriteToFile "webcsv\myform_spam.csv", contents, True
else
WriteToFile "webcsv\myform.csv", contents, True
end if

Thanks!

~Aus2Srq
0
Comment
Question by:Aus2Srq
  • 4
  • 2
  • 2
8 Comments
 
LVL 16

Expert Comment

by:ThinkPaper
ID: 21877070
you're just checking http:// URLs, nothing else?

you've got several variations to consider.. below's a good chunk of regex's to consider..

http://www.truerwords.net/articles/ut/urlactivation.html
0
 
LVL 16

Expert Comment

by:ThinkPaper
ID: 21877360
also.. what type of form is this? is it like a registration form?

considering using tools like CAPTCHA images to eliminate spam registration..
0
 
LVL 27

Expert Comment

by:ddrudik
ID: 21877878

<%
Set regEx = New RegExp
regEx.Global = False
sourcestring = "your source string"
regEx.Pattern = ".*https?//"
Set Matches = regEx.Execute(sourcestring)
If Matches.Count > 0 then
 ' do something
Else
 ' do something else
End If
%>

Open in new window

0
Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

 
LVL 27

Expert Comment

by:ddrudik
ID: 21877888
One more change:
<%
Set regEx = New RegExp
regEx.Global = False
regEx.IgnoreCase = True
sourcestring = "your source string"
regEx.Pattern = ".*https?//"
Set Matches = regEx.Execute(sourcestring)
If Matches.Count > 0 then
 ' do something
Else
 ' do something else
End If
%>

Open in new window

0
 

Author Comment

by:Aus2Srq
ID: 21878792
Using your code as a base, I did a Google search and modified the code a bit as I don't care if I know the number of patterns found, I just need to know true or false I did the following.

However, it's failing to find the pattern and still submitting the form as normal. Do I need to change my variable to a string to search?

Thanks!

~A2S
commentsBox = request.form("comments")
 
Set regEx = New RegExp
With regEx
.Pattern = ".*https?//"
.IgnoreCase = True
.Global = False
End With
foundPattern = regEx.Test(commentsBox)
 
If foundPattern Then
  WriteToFile "webcsv\myform_spam.csv", contents, True
else
  WriteToFile "webcsv\myform.csv", contents, True
End If
Set regEx = nothing

Open in new window

0
 
LVL 27

Accepted Solution

by:
ddrudik earned 500 total points
ID: 21878991
I forgot the colon in the pattern, either revision would work with the new pattern below.  Note that you cannot test as you did, once the FoundPattern is created as a regEx.Test object it exists.  The best you can do is test if Matches.Count exists which reports false if it is equal to 0.
<%
Set regEx = New RegExp
regEx.Global = False
regEx.IgnoreCase = True
sourcestring = "http://www.yahoo.com/"
regEx.Pattern = ".*https?://"
Set Matches = regEx.Execute(sourcestring)
If Matches.Count then
  Response.Write "SPAM"
Else
  Response.Write "NOT SPAM"
End If
%>

Open in new window

0
 

Author Closing Comment

by:Aus2Srq
ID: 31471076
Thank you very much ddrudik! It works perfectly.

On a side note, could you leave a last comment on how I would add an or in the regex? Such as looking for "http://" or "www.*.com" for instance.

Thanks again!

~Aus2Srq
0
 
LVL 27

Expert Comment

by:ddrudik
ID: 21879826
Thanks for the question and the points.
<%
Set regEx = New RegExp
regEx.Global = False
regEx.IgnoreCase = True
sourcestring = "test www.yahoo.com test"
regEx.Pattern = "(?:.*https?://)|(?:.*www\..*\.com)"
Set Matches = regEx.Execute(sourcestring)
If Matches.Count then
  Response.Write "SPAM"
Else
  Response.Write "NOT SPAM"
End If
%>

Open in new window

0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
How to show result of a NULL value at random? 33 57
Regex code:separate email:ip from email:pass ? 6 57
Regular Expression 1-100 with two digits 15 60
Regex - Ignoring Spaces 7 35
I recently decide that I needed a way to make my pages scream on the net.   While searching around how I can accomplish this I stumbled across a great article that stated "minimize the server requests." I got to thinking, hey, I use more than one…
Whatever be the reason, if you are working on web development side,  you will need day-today validation codes like email validation, date validation , IP address validation, phone validation on any of the edit page or say at the time of registration…
Learn how to match and substitute tagged data using PHP regular expressions. Demonstrated on Windows 7, but also applies to other operating systems. Demonstrated technique applies to PHP (all versions) and Firefox, but very similar techniques will w…
Explain concepts important to validation of email addresses with regular expressions. Applies to most languages/tools that uses regular expressions. Consider email address RFCs: Look at HTML5 form input element (with type=email) regex pattern: T…

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question