As said, I don't want my osTicket pages to be indexed by Google, Yahoo etc. - I hope that will somewhat prevent spam bots from finding the "New Ticket" form... (I don't have any links to that page on my site - people get a link via email)

How do I do that?

I think this can be easily done by adding a disallow to the ticket folder to you robot.txt. For example, if your osticket folder is helpdesk, you can add:

Disallow: /helpdesk/

Thanks for your help frankmiao :)

I thought that I should insert something like that in every single php file but your suggestion would be easy to implement. However, I'm not sure that spam bots respect "disallow"... maybe I can hide everything in some way?

Thanks for your help frankmiao :)

I thought that I should insert something like that in every single php file but your suggestion would be easy to implement. However, I'm not sure that spam bots respect "disallow"... maybe I can hide everything in some way?

Why not use the CAPTCHA to prevent spams?

Why not use the CAPTCHA to prevent spams?

There are programs that can solve CAPTCHA and some people are paid to solve CAPTCHA's. I don't think it is a good protection but I guess it is better than nothing ;)

9 months later

I'm using CAPTCHA and form spam is still getting through. I've implemented nofollow links and disallow in my robots.txt file, but does anyone have any other suggestions? Stronger CAPTCHA method? Recaptcha?Thx.

One of our sites we use simple html auth with a generic username and password.  We've never had a problem with spam on it. You can add it using htaccess/htpasswd under Apache.  Or you could add something similar using windows auth under IIS.Our other site is internet facing with no security like that, and I've never got a spam ticket in four+ years (although I think that I just jinxed myself by saying that).  

Hi ntozier.Yeah, we may try authentication or a custom login solution.Thx

Write a Reply...