How To add BotDetect CAPTCHA protection to ASP forms

documentation > asp captcha > how to

This page will guide you through the steps necessary to protect your ASP forms with the Lanapsoft BotDetect ASP CAPTCHA.

LanapBotDetectHandler.asp
Rendering a CAPTCHA image
Using an audio CAPTCHA
Validating user input
Sample ASP CAPTCHA projects

LanapBotDetectHandler.asp

The Lanapsoft BotDetect ASP CAPTCHA installation package includes LanapBotDetectHandler.asp, an ASP file that you can use as a helper in your ASP applications.

This file uses the BotDetect CAPTCHA COM control to create a random CAPTCHA image, which is then rendered in the calling ASP page. You can use it "as is" and you don't need to modify it – just copy it to the same folder where your form's ASP source is located.

Always use the POST method!

The ASP code that calls the LanapBotDetectHandler.asp module has to be inside a <form> tag that uses the POST method.

[back to top]

Rendering a CAPTCHA image

The easiest way to render a CAPTCHA image is to put an <img> tag like this one in the HTML code of your ASP page:

<img src="LanapBotDetectHandler.asp?Command=CreateImage" 
  alt="CAPTCHA image" />

If you have BotDetect installed and you copied the LanapBotDetectHandler.asp module to the same folder as your form, this will result in a picture similar to this being rendered:

Setting additional CAPTCHA image properties

If you want to set aditional properties (like choosing the image size, type etc...) just specify them as querystring parameters. For example:

<img src="LanapBotDetectHandler.asp?Command=CreateImage&
  TextStyle=28&ImageWidth=300&imageHeight=40&CodeLength=7&
  CodeType=1&Format=PNG" alt="CAPTCHA image" />

The resulting picture would look like this:

All other parameters (besides ?Command=CreateImage) are optional, and if a parameter is not specified, the default value is used.

For example, the TextStyle parameter specifies the CAPTCHA image drawing algorithm used (out of 50 BotDetect CAPTCHA algorithms). You can find the list of all valid values, examples of use and screenshots for this parameter at theTextStyle reference page.

You can find detailed information about all available CAPTCHA parameters in the BotDetect Component Interface reference documentation.

[back to top]

Using an audio CAPTCHA

If you want to also use a sound CAPTCHA to improve the accessiblity of your page, the simplest way to access it is as follows:

<a href="LanapBotDetectHandler.asp?Command=CreateSound">
  <img src="speaker.gif" alt="Play Sound" style="border:0;" />
</a>

A speaker icon (it can be found with the samples coming with the installation) is used as a link which invokes the sound CAPTCHA playback. You could also use a text link (e.g. "Play Sound") or a different picture if that's more suitable for your application.

Using JavaScript to play the sound CAPTCHA

The previous example is simple, but not very polished - it opens the sound CAPTCHA directly, which will prompt the user to download it.

It would be more user-friendly to play the audio CAPTCHA automatically (in the background of the current page), if the user's browser supports it. This can be achieved with the following code:

<a href="LanapBotDetectHandler.asp?Command=CreateSound" 
  onclick="LBD_LoadSound('soundPlaceholder', 
    'LanapBotDetectHandler.asp?Command=CreateSound'); 
    return false;">
  <img src="speaker.gif" alt="Play sound" style="border:0;" />
</a>
<div id="soundPlaceholder" style="visibility:hidden; border:0; 
  width:0; height:0;"></div>

This code uses the SoundPlayer.js helper script to dynamically add the CAPTCHA sound object to the page, and start it's playback in the default media player plugin configured in the user's browser (.waw files are usually handled by Windows Media Player for IE users, and QuickTime for Firefox, Opera and Safari users).

Note that this code will revert to the behavior of the first script for clients without JavaScript support, providing a form of graceful degradation for such users and ensuring the audio CAPTCHA is accessible by the widest possible audience.

The SoundPlayer.js script can also be found in the samples folder of BotDetect ASP CAPTCHA installations, and you can copy it to your projects just like the LanapBotDetectHandler.asp file. You can learn more about the way it works by reading the source code.

[back to top]

Validating user input

In a typical CAPTCHA usage scenario, you will have a text box on the page to receive the user's input, and compare it's submitted value to the code rendered in the CAPTCHA image. The Validate method of the BotDetect CAPTCHA component compares the hashed values of the CAPTCHA code and the passed parameter value.

<%
Dim strUsersInput
'TODO: read it from the submitted text box value
strUsersInput = USER_INPUT 
Dim result
result = False

If Session("LanapBotDetectCodeHash") <>"" Then
 Dim obj
 Set obj = CreateObject("Lanap.BotDetect")
 result = obj.Validate(UCase(strUsersInput), _ 
   Session("LanapBotDetectCodeHash"))
 Set obj = Nothing
End If 

If result = True Then
  'TODO: the user entered the correct value
  Response.Redirect ("CORRECT_INPUT_PAGE.ASP")
Else
  'TODO: the user entered an invalid value
  Response.Redirect ("INCORRECT_INPUT_PAGE.ASP")
End If
%>

[back to top]

Sample ASP CAPTCHA projects

You can see several examples of code similar to the snippets described on this page used by the BotDetect CAPTCHA Sample ASP Projects coming with the BotDetect installation. Beside copying the files you need (LanapBotDetectHandler.asp, SoundPlayer.js, speaker.gif) to your projects, you can also study their source code and see how to integrate these code snippets in full ASP pages.

[back to top]