BOT対策

view/login.maron

@@ -16,19 +16,27 @@
         <form action="/login" method="POST">
           {$ $username = randstr() $}
           {$ $password = randstr() $}
+          {$ $botUsername = randstr() $}
+          {$ $botPassword = randstr() $}
           <table>
             <tbody>
               <tr>
                 <td><label for="{{ $username }}">ユーザー名：</label></td>
-                <td><input type="text" id="{{ $username }}" name="{{ $username }}" /></td>
+                <td><input type="text" id="{{ $username }}" name="{{ $username }}" value="{{ $nyuU }}" /></td>
               </tr>
               <tr>
                 <td><label for="{{ $password }}">パスワード：</label></td>
-                <td><input type="password" id="{{ $password }}" name="{{ $password }}" /></td>
+                <td><input type="password" id="{{ $password }}" name="{{ $password }}" value="" /></td>
               </tr>
               <tr>
                 <td></td>
                 <td>
+                  <div style="position:absolute; left:-9999px;">
+                    <input type="text" id="{{ $username }}" name="{{ $botUsername }} value="" />
+                    <input type="password" id="{{ $password }}" name="{{ $botPassword }}" value="" />
+                  </div>
+
+                  <a href="/?bot=1" style="display:none"></a>
                   <input type="hidden" id="csrf_token" name="csrf_token" value="{{ make_csrf_token() }}" />
                   <button>サインイン</button>
                 </td>