Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to do some research on anti-bot techniques for my web application. I am aware of Captcha, but want to explore some other techniques. Especially, I want users to visit all the pages before they fill a request form.

I am using LAMP.

Any suggestions are most welcome.


share|improve this question
Are you talking about things like comment spam? Is it for a forum, blog or other community based web application? – TechZilla Sep 9 '11 at 14:59

lighttpd has a Trigger before Download module that requires a user to hit particular pages to add the IP to the hash that allowed access to the protected resource. There was a company that wrote an apache module called TrafficGuardian that did the same thing.

Another method would be to maintain a session hash that kept track of the resources viewed, and your protected resource checks to see that the hash has all values set.

Many different ways to do it.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.