Have Geek Brain

User registration form without captcha?

I was trying to sign up to Twitter today and I noticed that their sign up form has no conversion. Form URL https://twitter.com/signup . I also noticed that they were using an input like below.

<input name="authenticity_token" type="hidden" value="ce803cee65a96aaa97bdf75da166599c3adc9ec8" />

What method is this?

Do they create a temporary value in their database when the user receives the registration form? and check it when the user submits the form?

+2


a source to share


2 answers


authenticity_token

is the Ruby-on-Rails feature that Twitter is written in.
See this question .



+3


a source


I can't say for sure, but I know that some people have used Javascript to dynamically create stuff, i.e. set a hidden input of some random but expected value. This is based on the assumption that most automated clients will not parse Javascript.



+2


a source






More articles:


All Articles