Re:Reducing website spam
by TomGullen on Thursday December 01, 2011 @02:41PM
(#3301120)
I've done some tests and no browser appears to autofill an HTML hidden field. It's why we picked that method as supposed to CSS as I'm not sure the consequences of this.
Display:hidden on an input field would be OK, but there might be cases on some sites where the field loads before the CSS file. This could cause auto filling to happen. It's a lot harder to test this sort of thing with CSS rules, it's a lot easier just to use hidden fields.
I'd recommend using names such as "username" as honeypots as the likelihood of being filled are high.
Display:hidden on an input field would be OK, but there might be cases on some sites where the field loads before the CSS file. This could cause auto filling to happen. It's a lot harder to test this sort of thing with CSS rules, it's a lot easier just to use hidden fields.
I'd recommend using names such as "username" as honeypots as the likelihood of being filled are high.