in reply to How to stop web interface bypassing?

advait,
I am suprised (and happy) to see no one mentioned checking the HTTP referer. It, like every other technique to reduce the amount of undesired traffic, is not a complete solution. That is the nature of the beast.

What I am surprised is that no one mentioned defining a Terms Of Service agreement with folks using the site (though robots.txt is a good start). Explain in exactly what ways it is acceptable to interface (API, how frequent are requests, etc). This tells people what you expect and what you will do if they don't abide by those rules.

Then all you can do is protect yourself, identifying abusers, and take other steps to block them.

Cheers - L~R

  • Comment on Re: How to stop web interface bypassing?

Replies are listed 'Best First'.
Re^2: How to stop web interface bypassing?
by Anonymous Monk on Mar 26, 2008 at 08:20 UTC

    HTTP Referer checking + hidden field can get rid of 90% nasty user

    Some reference:

    The left 10% you may consider double cookie (used by blogger), compulsory cookie or session

    compulsory cookie (or force cookie)

    session

    You may be interested in the modulus of Apache:: and *Session in CPAN