Driscoll Web Development Blog

Driscoll Web Development Launches iamguiltyof.com: the social confessional

2009-02-23T09:58:00.003-05:00

On February 19, 2009, we launched iamguiltyof.com: the social confessional. As the name of the site might imply, the purpose of iamguiltyof.com is to allow people to make anonymous confessions of guilt and follow others' confessions in real-time.

We're very happy with how our first weekend went: iamguiltyof.com drew over 1,000 visits from over 700 unique visitors in just 4 days. In order to keep the momentum going we've added a Twitter bot into the mix so that users can tweet their confessions and see them posted on iamguiltyof.com AND get updates on their confessions and others' confessions via the bot's timeline (for more information on the iamguiltyof.com Twitter bot, read this).

Some of our users have drawn comparisons between iamguiltyof.com and similar sites, but most (if not all) have cited that iamguiltyof.com offers a distinct advantage with its real-time delivery of confessions to users. That, we believe, along with multiple points of entry to the application and a clean and simple interface not unlike that of Twitter, makes iamguiltyof.com a leader in the social confession / gossip space.

But, don't take our word for it: we strongly encourage all readers to go to iamguiltyof.com and check it out for themselves. Furthermore, we'd love to hear your feedback on the site, either via comments to this post or via the feedback form that is available on iamguiltyof.com

Why Use the BitlyXAPI?

2009-01-29T12:45:00.006-05:00

As you most likely saw in my last post, I've just released the BitlyXAPI .NET Library. I created this library for two reasons: first, it is my entry to the bit.ly API Contest; second, I wanted to have some fun with my .NET chops while at the same time doing something helpful for the web development community. The BitlyXAPI .NET Library is free under the terms of the GNU GPL, so clearly I'm not looking to make a profit off this nor am I attempting to prevent other developers from deriving their own libraries from it.

So, if you're a .NET developer and you're reading this, you're most likely wondering what the BitlyXAPI Library can do for you - which is not a topic that I've previously addressed in-depth. I wanted to spend some time highlighting what I believe to be the key advantages to using this library in a project that implements the bit.ly API.

The BitlyXAPI Library is Fast
Due in no small part to the fact that the bit.ly API itself is quite speedy, I've done my best to keep the BitlyXAPI Library's overhead low so that there is little (if any) perceptible difference between using the Library and calling the bit.ly API directly.

The BitlyXAPI Library is Open and Adaptable
I'm not a huge fan of most API wrappers because they often limit what you can do, so I purposefully set out to write a library that would allow developers to leverage the bit.ly API without necessarily being put into lock-step with the API's implementation. Rather, developers can use the BitlyXAPI Library as it fits into their applications rather than build applications that strictly adhere to the functionality of the library (which is, unfortunately, the case with most API wrappers). Granted, this level of adaptability does have its drawbacks; for instance, one might notice that none of the bit.ly API methods are defined in the BitlyXAPI Library - meaning that one would have to write one's own Shorten() method in their application should they choose to do so. However, I feel that the aforementioned example highlights why the BitlyXAPI Library is so great, because it potentially allows developers to easily write complex methods with the BitlyXAPI Library.

The BitlyXAPI Library is Event-based
I took an asynchronous, or event-based, model into account when I wrote the BitlyXAPI Library. It allowed me to write lean, granular, and easily maintained code in the Library itself. However, it also gives developers the advantage of writing lean, granular, and easily maintained code in their own applications. And, the event-based model gives developers the assurance that their application won't hang if a method call doesn't return a result.

The BitlyXAPI Library Handles Menial Tasks
For most, creating an application that imports data from an external resource is excruciating because so many lines of code must be dedicated to checking that the application has network access, then checking that the application can access the specified resource, then cleaning up when the resource is no longer needed, etc. Internally the BitlyXAPI checks with every call to the bit.ly API that the API is accessible to the application, and throws a BitlyException if the service is unavailable for any reason. The BitlyXAPI also performs its own garbage collection on the resources that it uses. Therefore, the developer can focus more on developing a solid application and spend less time writing code to perform menial tasks.

The BitlyXAPI Library is Well-documented
Another one of my pet peeves about many (but not all) API wrappers out there is their lack of documentation and/or working samples. Upon decompressing the BitlyXAPI Library archive a developer will notice the ReadMe.txt file along with a small sample class and console application. The ReadMe.txt file provides full documentation for the BitlyXAPI Library, while the sample class and console application allows the developer to see the BitlyXAPI Library at work - right out of the box.

The BitlyXAPI Library is Free
By "free" I don't mean "no-cost", although the BitlyXAPI Library is provided at no-cost as well. Rather, I mean that because the BitlyXAPI Library is licensed under the GNU GPL, developers are free to request and obtain the Library's source code so that they may alter it to better meet their needs, or to create an extended library from it. The only thing I request is that out of respect developers acknowledge Driscoll Web Development and/or Brian Driscoll (me) in their applications - and that they provide a link to the original BitlyXAPI Library somewhere in their application's documentation.

Now that you've read this (and assuming you're a .NET developer who's interested in the bit.ly API), I hope that you'll consider using the BitlyXAPI Library in your project. If you create an application with the BitlyXAPI Library I invite you to comment on this post with a link to your work.

The library is available for download here.

Now Available: The BitlyXAPI Library for .NET Development

2009-01-27T09:52:00.003-05:00

Introducing: the BitlyXAPI library for .NET development!

This library allows .NET developers who wish to leverage the Bitly API in their applications a way of quickly implementing the Bitly API in their libraries/apps without having to worry about the plumbing, constructing calls, etc.

The zip file includes the BitlyXAPI DLL, a sample application (with source code), and documentation.

Download the BitlyXAPI package here:
http://bit.ly/gnBS
http://driscollwebdev.com/downloads/BitlyXAPI/BitlyXAPI_1.0.zip

Creating a Read-Only Numeric Stepper Component in Flash/Actionscript 2.0

2009-01-16T13:21:00.009-05:00

While working on a project recently I spent some time getting to know the Numeric Stepper component. Anyone who has worked with the component most likely knows about its most obvious shortcoming: the text field within the component is read/write! Of course, the actual value associated with the component only changes in response to events fired by the Mouse or Key (up/down arrow) objects, but nonetheless our client wasn't happy with the fact that a user could type in the text field.

So, I set about trying to make the text field read only. Based on my research I gathered quickly that this has been attempted before with varying results. One of the key issues that makes the proposition of "tweaking" a component difficult is the fact that a component class cannot be subclassed; otherwise, it would be fairly straightforward to create a new class that inherits from NumericStepper and simply add the necessary properties and methods to support read/write and read only modes for instances derived from the subclass.

With subclassing out of the question most of the developers' blogs I encountered suggested overriding methods of the mx.core.mx_internal namespace (from which the enabled property of the NumericStepper.inputField object is derived), however that's a bit cumbersome and a complex solution to what seems to be a relatively straight-forward problem.

Luckily for me, I've been playing around a bit with coding ActionScript Communication scripts, which are (more or less) ActionScript 1.0 scripts. In these scripts, the "easy" way to add properties and methods to a built-in class is to use the prototype object (i.e.: ClassName.prototype.someNewFunction = function(){...}). With that concept in mind I tried to see if I could use the prototype object to extend the capabilities of my NumericStepper component... and it worked! What follows is the code that allows you to do this for yourself:

1. Create a new Flash document.
2. Open the Components panel and drag two instances of the NumericStepper component onto the stage. Give the two steppers instance names of "myStepper1" and "myStepper2", respectively.
3. Add the following code to the Main Timeline of your document:

So, what does this code do, exactly? Well, the draw() method overrides the draw() method of the NumericStepper class. The only "new" functionality we've added is within the if-block; we test the instance's editable property, and if that property has a value of "false" then the component's text field is disabled. Otherwise, the text field is enabled (which is the default). All of the code that follows the if-block is the same as the NumericStepper's native draw() method.

The next two functions, setEditStatus and getEditStatus are simply getter/setter functions for the editable property.

Finally, I register the editable property with the component using the AS1-style addProperty method.

That's all there is to it! Now, to see this new property in action simply create a new layer on your main timeline and add the following code:

myStepper1.editable = true;
myStepper2.editable = false;

Go ahead and test out your movie. One instance (myStepper1) should have an editable text field, while the other (myStepper2) should not.

Happy coding!

(Download the source script for the extended NumericStepper here: http://blog.driscollwebdev.com/NumericStepperExtension.as)
NumericStepperExtension.as.txt

Freshening Up

2008-04-10T08:51:00.007-04:00

Things have certainly been busy here, so we apologize for the long delay since the last post. Here are how things are going from our end:

4 Out of 5 Stars
We're really excited that BuiltWith.com has given us 4 out of 5 stars for Technology and Site Optimization. Of course, having a standards-compliant website that plays nice with search engines doesn't guarantee visitors, but it does go a long way to ensure that our site is accessible from a multitude of different browsers and computer/monitor configurations.

Q1 Results
We finished Q1 2008 about 7% short of our revenue target. However we were able to put enough pennies in our piggy bank to write our bottom line number in black. It's pretty scary out there these days for most businesses, however we've been lucky to have steady work so far this year. We just hope we didn't jinx ourselves by saying that...

New Look
We've been looking long and hard at our analytics reports over the last few months, and the picture hasn't been great. Upon closer inspection we realized that we were putting our visitors to sleep with our rather lengthy and text-heavy homepage. So, we've reorganized our top landing page and restated our purpose to more accurately and more concisely state what it is that we do. We've also changed some other things here and there throughout the site, but it's hardly worth mentioning. You'll just have to check out the whole thing for yourself!

What We're Up To...
We're still toiling away with a rather large client, and it has been quite a lot of fun. We began working with the firm in December, and although initially we were assigned some web development projects, we've recently begun to geek out on object-oriented ActionScript code for their Flash-based content. It's really an exciting time for us, and we're thrilled to be kept on the ride.

(Sort of) New Year's Resolution
April 1 used to be the start of the New Year, so by our logic it's not too late for a resolution. Although we're busy with clients (and hope to stay that way), we're resolving to keep our site (and this blog, specifically) more up-to-date going forward. For those who read it, that is hopefully good news.

So, until next time...

Is Your Registrar's Multi-year Deal Worth It?

2008-02-18T14:22:00.007-05:00

Almost every domain name registrar out there is offering a deal these days: pay up front to register your domain name over a multi-year period and save money. The question that my clients and colleagues alike invariably ask is whether or not these deals are worth it.

My answer: Maybe.

Realistically, whether or not a multi-year registration is worth the cost depends on a lot of variables. For instance, the first question I ask is "Will you still have a website in 5 years? What about in 10?", and, "If so, do you think your business' name will be the same as it is now?"

Usually the blank stare is enough to tell me that a 10 year deal is probably not a good investment. But let's assume for a second that my client knows for sure that her online venture will still be up and running 5 or 10 years from now. Is it still a good deal? Well, then it all comes down to finances.

Common Knowledge and Misconceptions
Of course it's your registrar's duty to make you think that you're making out like a bandit when you opt-in to a multi-year deal, which is why it likes to tell you what percentage you're saving if you take the multi-year option: "Save 50% with a 10 year plan!"

50% of what? Indeed, that is the question. By making some quick calculations it's usually pretty easy to see that you're saving when compared to 10 years at the full price (whatever that may be). What your registrar doesn't want you to know is that you may not be saving as much as you think.

Anyone who has been subjected to a collegiate finance course can tell you that $1 is worth more in the future than it is today. How is that possible? Well, imagine that you have $1 right now, and you put it into a high-yield savings account that has a 4% annual yield. A year from now your $1 will be worth $1.04. Hence, your $1 will be worth 4 cents more a year from now than it is today.

We can use a similar approach to figure out what $1 in the future is worth today. Again, let's imagine that the current annual interest rate on a high-yield savings account is 4%. We would like to know how much to deposit today in order to have $1 a year from now.

$1/1.04 = $0.96*
(*rounded to two decimal places)

So, we'd need to deposit 96 cents into our high-yield savings account in order to withdraw $1 a year from now. $0.96 is the present value of $1 in one year if the current interest rate is 4%.

Multi-year Discounts and Present Values
Now let's use what we know about present values to determine whether or not we're getting a good deal.

As of today, Register.com is offering multi-year registration of top-level domains at the following prices:

1 year: $35
2 years: $70
5 years: $149
10 years: $249

Clearly, the alternative to purchasing one of these packages is to simply pay the regular price of $35 per year. But, as we already know, $35 is worth less today than it will be in the future, so we need to know what the present value of making a $35 annual payment is over several years, keeping in mind that we'll be making our payment at the start of each annual period. The current annual yield of a business savings account with ING Direct is 3.75%, so the present value of $35 paid annually with an interest rate of 3.75% is:

1 year: $35
2 years: $68.73
5 years: $162.80
10 years: $298.23

From this we can see a few things:

We will indeed save money if we opt for the 5 or 10 year plan. However, we are not saving as much as Register.com would like us to believe (for instance, we're really only saving $49.23 rather than $101 by going with the 10 year plan).
We actually lose money by taking the 2-year plan.

Point #2 is important to note, as most of us would simply think that paying $70 for 2 years up-front is the same as paying $35 now and $35 a year from now, but it is not. Instead, we could pay $35 now and put $33.73 into a high-yield savings account earning 3.75% interest. In a year we'd have $35 which we could use to pay for another 1-year contract. Thus, our second year really only costs $33.73 rather than $35.

Deal or No Deal
In this case we see that the longer-term deals (5 and 10 years) with Register.com are certainly money-savers right now, but will they always be? Maybe, maybe not.

In our analysis above we assumed two things:

The annual registration fee will remain constant at $35 over the next 10 years.
The annual interest rate of our high-yield savings account will remain constant at 3.75% over the next 10 years.

If both of our assumptions remain true over the next 5 or 10 years, then we know that we've saved money by taking the multi-year deal. But what if we take the multi-year deal and one (or both) of our assumptions prove to be false? Let's find out what happens...

What happens if the annual registration fee changes?
If we take the multi-year deal and the registration fee changes then we may not have made a good deal. If the annual fee goes up, then clearly we'll have saved even more than we'd initially thought over the contract term. However, if the annual registration fee goes down, then it's certain that we're saving less than we initially thought, and it's possible that we're actually losing money over the course of the contract. It all depends on how much the annual fee goes down and how far into the contract term we are. Generally speaking, smaller price changes will have a greater impact earlier in the contract than they will later.

What happens if the annual savings yield changes?
Similarly, if we take the multi-year deal and the annual yield of the savings account changes, then it is possible that we've not made a good deal. Generally speaking, if the interest rate goes down then we'll have saved more money with our long-term contract than we initially thought. But, if the interest rate goes up then it's certain that we're saving less than we initially thought, and it's possible that we're actually losing money. Again, this depends on how much the interest rate goes up and how far into the contract term we are. And, just like price changes, smaller interest rate changes earlier in the contract will have a greater impact than the same changes later in the contract.

What happens if both the interest rate and the registration fee change?
Once again, the extent to which our potential savings is affected depends on how much each changes. If the interest rate goes up AND the registration fee goes down, then the two effectively compound and we'll have saved far less money than we initially thought when we signed the multi-year contract. However, if the interest rate goes up but the registration fee also goes up (or if they both go down), then it's possible that the two changes will simply cancel each other, and the net savings will be comparable to the deal we had initially.

Other Risks of Multi-year Deals
There are certainly other risks associated with multi-year domain registration contracts that go beyond interest rates and registration fees. Chief among your concerns should be the longevity of your potential registrar, however there are other things to consider as well. Be sure to read your contract carefully, as there may be additional fees incurred for certain services, and the terms of the contract might make it painfully difficult and costly for you to get out of the deal if it goes south (or if you find a better deal...).

At the end of the day, the question of whether or not you should engage in a multi-year domain name registration will depend largely on your firm's goals over the next 2 to 10 years, while the financial implications of a long-term deal may not be the first thing that comes to mind. Nonetheless, it is important to take those financial concerns into consideration! If you're unsure about it right now, stick with a yearly renewal plan. After all, you can always decide at a later date to go with a long-term commitment.

Piping Up About Yahoo! Pipes

2008-02-12T11:35:00.003-05:00

Syndicated content is, in my opinion, the boon of the Web 2.0 age. Both casual and power internet users incorporate feeds into their daily lives - some without even realizing it. Syndication allows us to quickly and easily get the up-to-date information that we want or need with a minimum of effort (given readily available consumption mediums such as desktop readers, mobile devices, web browsers, and email clients).

Of course, syndication does have its downsides. One problem is that of "over-subscription", meaning that a feed consumer is subscribed to more feeds than he can possibly read in a reasonable amount of time. Couple with this problem the fact that many feeds contain the same (or very similar) content, and it's easy to see why the novelty wears off for most users. Add, just for fun, the fact that most people who subscribe to syndicated content do so through different consumption media, and the world of syndicated content consumption becomes a mess rather quickly.

Take my father-in-law, a devout New England sports fan, for example. A recent inspection of his home computer revealed that he is subscribed to several different sports-related feeds, including: 1 feed for score updates, 1 feed for news, and 2 editorial blog feeds. I suspect that my father-in-law has also subscribed to these same four feeds on his computer at work. So, in total, he has loaded eight separate URLs and clicked on a "subscribe" link (or icon) eight separate times in order to get his daily sports fix, which seems like a lot of work.

Shouldn't there be an easier way?

Enter Yahoo! Pipes

If you've never heard of Yahoo! Pipes, you're probably wondering what it is exactly. Put simply, it's a way to aggregate (and/or manipulate) content from multiple sources, and output that content to a single source. Anyone with a Yahoo! account can create new Pipes, and the surprisingly intuitive drag-and-drop interface makes it as easy as can be to aggregate content from multiple sources.

For my father-in-law, I fetched the sports news feed from ESPN, scores from totallyscored.com, and his hometown team blogs from the Boston Globe. With the data in hand, I filtered the ESPN feed to include only news for his teams and sorted all of the data by date (most recent first). Then, I simply saved and published my new Pipe, and it was all ready to go. But, to make my new Pipe easy to remember, I used Yahoo's convenient pipe naming feature... so now I can always find it at http://pipes.yahoo.com/driscollwebdev/newenglandsports

So now my father-in-law only has to put one address into his feed reader in order to get caught up on his teams' news, scores, and editorials. Truthfully, though, I haven't even gotten to the part where Pipes shines.

Let's say that my father-in-law decides that he wants to add another blog and another news feed to his syndicated content. Under the old regime, he would have to subscribe to each in all of his feed readers, meaning that he would have to type the URI into his browser and then click 'Subscribe' at least twice (four times if we assume that he'll do it at work too).

But with Pipes, all he has to do is log in and add the URI to the list of feeds already aggregated in his Pipe... and that's it. There's nothing else to subscribe to because he's already subscribed to the Pipe - so the new data will just start flowing in to all of his reader applications!

From a developer's perspective, Pipes is a great shortcut for the kind of work that would normally take up quite a bit of time. Rather than spending time creating the code to filter, sort, and format syndicated content from multiple sources, we can simply retrieve our new Pipe's RSS feed and use the pre-formatted, pre-sorted, and pre-filtered data in whatever manner we choose. This allows us to focus more on building a cool application (a Boston-sports-skinned SpringWidget perhaps), and less time worrying about data cleanliness.

I've only really scratched the surface here of what Yahoo! Pipes can do - I highly recommend that you give it a try for yourself. If you want to see some examples of our Pipes, you can check them out at http://pipes.yahoo.com/driscollwebdev.

Brian

It's a Web 2.0 World, baby, and you'd better get on the bus now before you (and your revenue generating properties) miss out!

2008-02-02T12:30:00.000-05:00

You're a small business owner. Your business has a website. You have children.

You could learn a thing or two from your children about how to make the most of your company's presence on the web.

How?

First, an aside: you've probably heard about this whole "Web 2.0" business the last couple of years. But how many times have you heard it defined? Do you really know what Web 2.0 is? Do you know what it stands for?

In its simplest sense, the term Web 2.0 simply conveys the message that the World Wide Web has come a long way since its humble beginnings. From a developer's perspective, Web 2.0 defines websites that are standards-compliant and optimized for interoperability (there's a lot that goes into both aspects, but we'll skip that for now). From a user's perspective, Web 2.0 defines the ability to create and share content from multiple sources, whether it be a blog, a news feed, photos, music, or just about anything else that can be served up online.

It's probably no big surprise that the 18-24 demographic represents the largest proportion of visitors to Web 2.0 sites like YouTube, Flickr, and Wikipedia according to Hitwise, a market data research firm that specializes in internet marketing. Further, research from Avenue A | Razorfish suggests in its Digital Consumer Behavior Study that 55% of online consumers rely on user reviews to determine whether a product or service is worth purchasing.

Of course, many big companies have taken advantage of the opportunities to reach the wide audiences of the aforementioned sites, as well as social networks such as MySpace and Facebook. Smaller outfits that lack the advertising budgets of the retail giants have used sites like YouTube, MySpace, Facebook, and Flickr to their advantage by creating profiles, uploading "soft" ad videos, uploading photos of new products (or even better, uploading photos of people using those products), and creating social groups around their products and services. And, many companies have also managed to attract a following of Friends on social networking sites.

The true advantage of these types of sites is that they allow users to leave comments for other users pertaining to photos, blog entries, videos, you name it... so, it's likely that a user who has purchased a product from a certain company will leave a comment for that company on its social networking profile. And, it's likely that the comment will be an ad-hoc review of the product. With the assumption that the review is positive, this will serve effectively as a public endorsement for your product. Collect a few such comments, and don't be surprised when traffic to your company's website begins to pick up.

Of course, in order to take full advantage of all the marketing opportunities that this Web 2.0 world has to offer, you have to have the time and ability to create your own user-created content on Web 2.0 sites. This is where your kids (or your neighbor's kids) come in: chances are that they are well-versed in the lingua franca of these sites already, and they could probably give you quite a tutorial.

-DWD Staff

Technology for the Holidays

2007-12-21T19:59:00.000-05:00

So in case you haven't heard, Christmas is right around the corner - which means 2008 is coming up fast. We're gearing up for a new year at DWD, and we have some pretty cool prospects in front of us for oh-eight.

First and foremost, we're all-in on a consulting contract with one of the Philly area's leading WBT/E-Learning software development firms. We've spent a few weeks with the folks at this growing company, and so far it has been a blast. We're looking forward to working with them throughout 2008.

"Hey, what's with the title?!? I thought this post was supposed to be about technology?", you might be wondering aloud.

Well, fear not, we have some juicy tidbits for you from inside the walls of DWD!

As part of our contract with the aforementioned E-Learning firm, we've been looking into new ways to develop and deliver the firm's software. What did we find? We found the Flex 3 beta SDK and Adobe AIR, of course! After unzipping everything and flying through the code in the sample apps, we put together a few POCs for our client. All told, it was a lot of fun playing around with Flex and AIR, and we already have some ideas for some desktop RIAs that we plan to work on in our spare time.

While we wouldn't qualify this as a review of either Flex or AIR, they do have their downside - most notably the fact that Adobe has opted not to support Flex or AIR development in pre-CS3 versions of Dreamweaver and Flash. This is not very surprising, of course, as Adobe is doing everything it can to bring users of the Macromedia product line into the CS3 fold. However, it would be nice if Adobe gave some consideration to those who purchased Macromedia Suite 8.0 just before the merger was announced.

Seeking an IDE that would support both Flex and AIR development, we came across Aptana Studio 1.0. At first seemingly lightweight, we found some pleasant surprises in Aptana Studio's plugins to support AIR, PHP, AJAX, and Ruby on Rails development. We were also quite happy to find that we could build in support for Flex development simply by specifying the Flex compiler. What's more, Aptana Studio includes several Javascript libraries for RIA development - including Scriptaculous, Yahoo! UI, MooTools, and several others. Best of all, Aptana Studio supports iPhone application development via plugin, which is really exciting (almost as exciting as an iPhone under the tree).

As you can see, we have a lot to look forward to in the new year, and we hope you do as well. Happy and Safe Holidays from us to you... We'll see you in 2008!

Brian Driscoll
Owner, Driscoll Web Development

4 Ways to Keep Your Forms Safe

2007-11-30T10:02:00.000-05:00

It's every webmaster's deepest fear, and as developers we hear about it more and more each day: brute force attacks on online forms that litter websites, databases, blogs, forums, and inboxes with unwanted Spam. From the webmaster's perspective it's both tedious and costly to remove database records and blog/forum comments that promise everything from free Viagra to... well, things we won't even mention here. And, not only do these Spam attacks cause eyesores in visual content, they also eat up bandwidth and storage space - both precious commodities these days.

Here are some ideas for webmasters and web developers to implement in order to keep their forms from becoming targets for Spam attacks.

1. Validate Form Input on the Server
This seems like an obvious step to take, but there are still so many websites out there that do not implement server-side validation of form input. Web developers often complain that server-side input validation impedes usability and page flow by adding an additional step to the form-filling process, but the rise of AJAX has rendered that complaint all but obsolete. Current technologies such as AJAX make communicating with the server in real-time (as the form is being filled) possible, thus form inputs can easily be validated on the server without causing headaches for the end-user. We recommend using Regular Expressions to search for unwanted input.

2. Implement CAPTCHA Verification on Your Form
CAPTCHA, short for "Completely Automated Public Turing test to tell Computers and Humans Apart", is quickly becoming the de-facto standard for protecting forms against brute force attacks. The method typically involves the use of an image that contains heavily distorted text on a "noisy" background (see image below). The way in which the image appears prevents computers from successfully solving the problem of identifying the character sequence, however to a human it's easy to see that the words are "following" and "finding."

We subscribe to the DRTW principle when it comes to this topic, so we highly recommend implementing a third-party CAPTCHA solution on your form rather than trying to code it yourself (freeCap, available from pureMango, is our favorite). However, if you're really in an ultra-nerd mood and want to see how it's done, we recommend taking a look at this article.

3. Make Your Form Un-searchable
If the page that contains your form shows up in search engine results, you're pretty much asking to be spammed. There are four things that you can do to get your forms out of search engine results:

Add a <meta> tag to the <head> of the page to keep search engines from indexing your form page.
Create a robots.txt file and upload it to the root directory of your web server to keep search engines from indexing your form page.
Remove all <url> elements from your sitemap that contain references to your form page.
Request that the specific URL for your form page be omitted from search results (See Yahoo! SiteExplorer and/or Google Webmaster Tools for more information on this).

Of course, many webmasters and business owners bristle at the idea of making their forms "invisible" to the eyes of potential visitors, but in our opinion the benefits of doing this outweigh the risks of being spammed.

4. Make Your Form Load Dynamically
The idea of loading page content dynamically from a database or script when the page loads is certainly not a new one. However, when it comes to forms, most developers hard-code form elements into the page. A dynamically loaded page is nearly impossible to cache, making it nearly impossible for attackers to find (the attacker's user-agent would have to load the page in order to discover the form).

It is difficult to guarantee the safety of online forms against malicious attacks. As much as we use new technologies and coding practices in our work, those who seek to do us harm are learning those same technologies in an attempt to find ways to exploit them. So, while these 4 tips will help you a great deal to keep Spam attacks from occurring on your website, you should always be looking for new and different ways to secure your form from attacks.

-DWD Staff

Welcome from Driscoll Web Development

2007-11-27T13:11:00.000-05:00

Hello there!

Welcome to the official blog of Driscoll Web Development. In the future you will find all sorts of helpful information and tips about how to put the resources of the world wide web to the best use for your small business website.

We plan to update this blog on a regular basis, and hope that you'll enjoy reading our articles, reviews, tutorials, and general musings as much as we love writing them.

In the meantime, if you have any suggestions for topics please email them to us! We're looking forward to hearing from you!

-DWD Staff