How It Works?

		See also:
		» About CaptchaPro » Features overview » FAQs

BEFORE: Forms without CaptchaPro

A web page with embedded HTML form that users fill out and submit online data is a typical scenario of an unprotected web. Upon clicking on the submit button, the data is being sent to a form controller either via HTTP POST or GET method. The form controller receives the data, saves it into a database, sends out a confirmation email, and then redirects a user to some sort of confirmation/thank you page.

The problem with this configuration is that the form controller URL is usually exposed in the action property of the HTML <form> tag and can be easily abused. An automated software agent performing spam submissions (i.e. "spam agent") extracts this URL and then uses it to make its own HTTP POST/GET submissions—thus, enabling all kind of junk to be written into the user database and make the entire process look like a valid human submission. The same scenario would apply to online blogs, surveys, polls, and any other functionality that uses forms to collect user data.

AFTER: Forms Protected by CaptchaPro

To fix the situation described above and make sure that only data submitted by humans is accepted, each online form should be protected with a CAPTCHA test delivered by CaptchaPro service. The goal of the service is to be a transparent filter, that only allows human submissions to pass through. The form controller URL is stored in CaptchaPro database during service registration and is not accessible to spam agents. If service is being activated for an existing internet form, we recommend renaming the form controller URL to a different name, that's never been exposed on the internet before and, therefore, not known to the spam agents yet.

Once the service is activated and integrated into a web form via a few lines of HTML code, online users are presented with a challenge-response type of test where they are asked to enter the code shown in the picture (challenge) into a text field (response). With CaptchaPro there is no need to add or modify anything else. You have a full control on how you want the challenge image, response text field, icons, and other elements positioned within your form, thus giving you more flexibility and making it look more integrated with your online forms.

If the verification code is entered incorrectly, the CaptchaPro will redirect user back to the original form page with an error code embedded in the URL. If validation is successful, the system will relay user data to the user form controller specified during account registration. From this point on, everything is the same as before, i.e. the data is written to the database, a confirmation email is sent, and user directed to a confirmation/thank you page.