http://bbpress.org/forums/ bbPress support forums Tag: spam en Sun, 20 Jul 2008 05:18:50 +0000 http://bbpress.org/forums/topic/plugin-to-block-multi-characters-in-a-row#post-17200 Fri, 11 Jul 2008 17:53:35 +0000 _ck_ 17200@http://bbpress.org/forums/ <p>There is a long words/long links plugin for wordpress that someone ported to bbPress. Search for it around here somewhere... </p> http://bbpress.org/forums/topic/plugin-to-block-multi-characters-in-a-row#post-17041 Tue, 01 Jul 2008 13:56:03 +0000 bobbyh 17041@http://bbpress.org/forums/ <p>Yeah, that should work. If you have trouble with this, post a link and I'll tell you what CSS you need. :-) </p> http://bbpress.org/forums/topic/plugin-to-block-multi-characters-in-a-row#post-17037 Tue, 01 Jul 2008 00:02:21 +0000 wilcosky 17037@http://bbpress.org/forums/ <p>hmm, well, I'm not worried about it breaking my theme, it's my rss feed that I have on my main page. I have the forum's rss feed showing as html on my main page of my site. And, the other day someone made a post with "===========================" in it just to break up their post. They weren't trying to mess things up, they were just making a long post and wanted to break it up. </p> <p>ANYWAY, long story short, it caused my main page to look all messed up because the =========================== pushed outside of my main div. I already have everything in a wrapper and in a fixed width table, so I don't know how that was able to push everything out, but it did.</p> <p>So, if I add {overflow:hidden;} to my style sheet for my main page, do you think that will still solve my problem?</p> <p>I would be nice if there was a plugin that would allow you to block posts if someone uses the same character more than 10 times in a row for example.... </p> http://bbpress.org/forums/topic/plugin-to-block-multi-characters-in-a-row#post-17036 Mon, 30 Jun 2008 23:21:47 +0000 bobbyh 17036@http://bbpress.org/forums/ <p>wilcosky, I don't know a plugin that does this, but if you're worried about a string like <em>aaaaabbbbbbbbb</em> "breaking your theme", you can just apply a CSS overflow to the post class. This theme actually does so with this code: <code>.post {overflow:hidden;}</code> </p> http://bbpress.org/forums/topic/plugin-to-block-multi-characters-in-a-row#post-17033 Mon, 30 Jun 2008 18:18:22 +0000 wilcosky 17033@http://bbpress.org/forums/ <p>Hello,</p> <p>I'm looking for a plug in that will block posts if the post contains multiple characters in a row. For example, if someone puts</p> <p>"=========================================="</p> <p>or</p> <p>"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaabbbbbbbbbbbbbbbbbbbbbbbb"</p> <p>is there a plug in for this? </p> http://bbpress.org/forums/topic/typepad-antispam#post-16690 Wed, 11 Jun 2008 00:05:18 +0000 chrishajer 16690@http://bbpress.org/forums/ <p>A quick <a href="http://bbpress.org/forums/search.php?q=typepad">search of the forum</a> indicates it hasn't been talked about here before. That doesn't mean no one has done it, but it hasn't been brought up here before. </p> http://bbpress.org/forums/topic/typepad-antispam#post-16684 Tue, 10 Jun 2008 19:53:52 +0000 ntutak 16684@http://bbpress.org/forums/ <p>Has anyone tried installing Typepad Antispam on bbpress? Will it work? </p> http://bbpress.org/forums/topic/new-type-of-profile-spam#post-16207 Tue, 13 May 2008 15:33:15 +0000 chrishajer 16207@http://bbpress.org/forums/ <p>Hi Sam. It was pretty easy to insert text into the profile and have it turned into links. I did it with my old alpha install from a year ago, and I also did it with a 0.9.0.2 installation. See here:</p> <p><a href="http://www.riversideinfo.org/bbpress0902/profile.php?id=2" rel="nofollow">http://www.riversideinfo.org/bbpress0902/profile.php?id=2</a></p> <p>I registered as that user "spammer", removed the form field maximum lengths with the Web Developer Toolbar for Firefox, then inserted this text into the occupation and interests fields:<br /> <a href="http://www.chrishajer.com/bbpress/profilespam.txt" rel="nofollow">http://www.chrishajer.com/bbpress/profilespam.txt</a></p> <p>Interestingly, the <a href="http://" rel="nofollow">http://</a> part becomes linkified automatically, not <a href="whatever">this part</a> inside the link.</p> <p>No plugins in this 0.9.0.2 installation. </p> http://bbpress.org/forums/topic/new-type-of-profile-spam#post-16204 Tue, 13 May 2008 15:08:07 +0000 chrishajer 16204@http://bbpress.org/forums/ <p>Hi Sam.</p> <p>They <strong>are</strong> actually links on the profile page (in the screenshot they are green and clickable.) I didn't actually click any of them to be 100% certain, and I don't have any now that I can check to be sure.</p> <p>I have very few plugins installed, none for the profile I don't think. Here is a screenshot of my plugin page.<br /> <a href="http://www.chrishajer.com/bbpress/plugins.png" rel="nofollow">http://www.chrishajer.com/bbpress/plugins.png</a></p> <p>If one comes through again, I will make sure the links are clickable. It actually looks like they did some tricks escaping the quotes (backslash and space.) If none come through, I will try to recreate it, and if I can, I will try it with the 0.9.0.2 release. </p> http://bbpress.org/forums/topic/new-type-of-profile-spam#post-16202 Tue, 13 May 2008 14:30:33 +0000 sambauers 16202@http://bbpress.org/forums/ <p>Are those URLs actually turning into links on the profile page? That is not how trunk or the 0.9 branch behaves now. We don't strip tags, we just turn them into entities instead. Is there possibly some plugin that is filtering your profile field text and turning those URLs into links? </p> http://bbpress.org/forums/topic/new-type-of-profile-spam#post-16101 Fri, 09 May 2008 19:16:19 +0000 dampfire123 16101@http://bbpress.org/forums/ <p>Oh yeh? </p> http://bbpress.org/forums/topic/new-type-of-profile-spam#post-16100 Fri, 09 May 2008 19:11:34 +0000 HowToGeek 16100@http://bbpress.org/forums/ <p>Same thing has been happening to me left and right. I've added in my own keyword-based spam filter, but it doesn't catch everything.</p> <p>I think there should be a heck of a lot more protection built in against spamming... there's simply no reason to allow a URL in any field other than website.</p> <p>I've been getting a really irritating spam lately, nothing but random characters, like 8-10 in each field. </p> http://bbpress.org/forums/topic/new-type-of-profile-spam#post-16095 Fri, 09 May 2008 15:24:54 +0000 chrishajer 16095@http://bbpress.org/forums/ <p>Has anyone seen profile spam like this? In the past couple days, I have been getting a different sort of spam registration. Instead of cramming just one link in their occupation and interests fields, they are cramming 4, 5 or 6 links in there. When you view their profile page, the links all appear there. If you go to edit their profile page (which is where I go to delete the user) you can't see the links displayed in those fields, but the links do appear in the source of the page. Take a look here:</p> <p><a href="http://www.chrishajer.com/bbpress/profile.txt" rel="nofollow">http://www.chrishajer.com/bbpress/profile.txt</a><br /> This is the source of the user's profile page (caution, porn links in there.)</p> <p><a href="http://www.chrishajer.com/bbpress/profile.png" rel="nofollow">http://www.chrishajer.com/bbpress/profile.png</a><br /> That is the profile view showing the data they crammed into the occupation and interests fields.</p> <p><a href="http://www.chrishajer.com/bbpress/profile-edit.png" rel="nofollow">http://www.chrishajer.com/bbpress/profile-edit.png</a><br /> That is the view you get when you click the [Edit] tab link. The only data shown in the occupation and interests fields is "My lovely sites:", but if you view the source, it's all there. </p> <p>When registering a new user, the max length is 140 and the display length is 30 for the occupation and interests fields. When viewing the profile, the field lengths are the same. But here are 577 characters in this spammer's occupation and interests fields, but when viewing that page, all you see is "My lovely sites:". </p> <p>It's trivial to get around a form's field length restriction with something like the Web Developer Toolbar, or maybe they're doing it in a different way. I have an integrated install so the value is held in the wp_usermeta table, and the field is defined as longtext, which is a LOT of characters.</p> <p>Has anyone else seen this, and does anyone think there should be some validation done on the data that's input to ensure that it's less than 140 characters before inserting it into the database?</p> <p>This was Firefox 2.0.0.14 on Windows XP SP2, running bbPress 1.0-alpha from around March 2007, PHP 5.2.5, MySQL 4.0.27, Apache 1.3.34. </p> <p>Thanks for reading. </p> http://bbpress.org/forums/topic/blocking-registrations-by-email#post-15481 Thu, 17 Apr 2008 16:43:10 +0000 sambauers 15481@http://bbpress.org/forums/ <p>Ah, in that case all you need to put there is <code>mail.ru</code> without the asterisk or leading dot. </p> http://bbpress.org/forums/topic/blocking-registrations-by-email#post-15450 Thu, 17 Apr 2008 00:29:05 +0000 RyanNutt 15450@http://bbpress.org/forums/ <p>By adding the period wouldn't that only block stuff from @123.mail.ru, @whateverelse.mail.ru, etc. and not @mail.ru? It's the @mail.ru that seems to be the problem and not subdomains of mail.ru. </p> http://bbpress.org/forums/topic/blocking-registrations-by-email#post-15414 Wed, 16 Apr 2008 03:06:40 +0000 sambauers 15414@http://bbpress.org/forums/ <p>You should make that:</p> <pre><code>*.mail.ru</code></pre> http://bbpress.org/forums/topic/plug-in-needed-only-active-members-can-post-urls#post-15406 Tue, 15 Apr 2008 18:51:14 +0000 glanceup 15406@http://bbpress.org/forums/ <p>I am switching my board from phpbb to bbpress and am very worried about porn spamming robots that register and post urls to porn sites.</p> <p>In phpbb, there is a mod that didn't stop the registration, but was COMPLETELY EFFECTIVE in stopping the posting of porn sites. It simply would not allow brand-new members to post URLs. </p> <p>Is anyone capable of writing such a plug in for bbpress? </p> <p>Here's a link to the phpbb mod --</p> <p><a href="http://www.phpbb.com/mods/db/index.php?i=misc&#38;mode=display&#38;contrib_id=1649&#38;sid=11350f22f9dec93e4361bf7b1d53a801" rel="nofollow">http://www.phpbb.com/mods/db/index.php?i=misc&#38;mode=display&#38;contrib_id=1649&#38;sid=11350f22f9dec93e4361bf7b1d53a801</a> </p> http://bbpress.org/forums/topic/blocking-registrations-by-email#post-15364 Mon, 14 Apr 2008 14:01:29 +0000 RyanNutt 15364@http://bbpress.org/forums/ <p>Perfect. Thank you.</p> <p>Just to make sure I've got it setup right. I've checked the Enable checkbox on top and added *mail.ru in the blacklist box. Whitelist box is empty. Sound correct? </p> http://bbpress.org/forums/topic/blocking-registrations-by-email#post-15330 Sun, 13 Apr 2008 16:51:24 +0000 _ck_ 15330@http://bbpress.org/forums/ <p>This is the plugin to do exactly what you want:<br /> <a href="http://bbpress.org/plugins/topic/restrict-registration-for-bbpress/#post-173" rel="nofollow">http://bbpress.org/plugins/topic/restrict-registration-for-bbpress/#post-173</a></p> <p>You might also want to add my "Human Text" plugin to help stop bot (automated) registrations:<br /> <a href="http://bbpress.org/plugins/topic/human-test" rel="nofollow">http://bbpress.org/plugins/topic/human-test</a> </p> http://bbpress.org/forums/topic/blocking-registrations-by-email#post-15329 Sun, 13 Apr 2008 14:59:32 +0000 RyanNutt 15329@http://bbpress.org/forums/ <p>The first two user registrations I've had on my new forum are both using @mail.ru email addresses. Experience with other forums tells me these are probably spam registrations. On the SMF forums I admin I block @mail.ru email addresses from being able to register at all. Is there a way to do this in bbPress? Maybe have them default to Inactive or Blocked depending on the email address used? </p> http://bbpress.org/forums/topic/getting-around-50-fake-profiles-set-up-a-day-help#post-14028 Sun, 24 Feb 2008 10:45:04 +0000 hitec7 14028@http://bbpress.org/forums/ <p>I installed your plugin _ck_ but i when i activated it din't auto inserted the math field in my registration page. Strange so i did it my self by inserting in my register.php / bbpress theme file the function:<br /> <code>&lt;?php human_registration_test(); ?&gt;</code><br /> and then it worked ok. ;) </p> http://bbpress.org/forums/topic/getting-around-50-fake-profiles-set-up-a-day-help#post-13992 Thu, 21 Feb 2008 22:57:15 +0000 hitec7 13992@http://bbpress.org/forums/ <p>i like the way u think :)</p> <p>ill try your plugin and post feedback. </p> http://bbpress.org/forums/topic/getting-around-50-fake-profiles-set-up-a-day-help#post-13988 Thu, 21 Feb 2008 21:17:42 +0000 _ck_ 13988@http://bbpress.org/forums/ <p>&gt;&gt; are u sure _ck_ ?<br /> &gt;&gt; how about the hired Chinese ? :)</p> <p>That gives me a great idea to spell the numbers out as words in captcha-like graphics, which would be an interesting variation for non-english speakers. </p> http://bbpress.org/forums/topic/getting-around-50-fake-profiles-set-up-a-day-help#post-13984 Thu, 21 Feb 2008 20:21:50 +0000 mdata 13984@http://bbpress.org/forums/ <p>Still have to learn my days of the week though! </p> http://bbpress.org/forums/topic/getting-around-50-fake-profiles-set-up-a-day-help#post-13983 Thu, 21 Feb 2008 20:20:10 +0000 mdata 13983@http://bbpress.org/forums/ <p>Just installed/activated your "Human Test" plug-in. I am using bbPress version 0.8.3.1. Everything works fine. No issues.</p> <p>Thank you.</p> <p>By the way, I heard of WordPress for the first time on Sunday, found it a few minutes later, installed it a few minutes after that and input two years of articles I had written that same day. I installed a few plug-ins the next day and then found bbPress. Installed that the same day (Monday). It was working fine and found a matching template for both WordPress and bbPress the next day (Wednesday). With very little tweaking (mostly my errors) and no visits to the WordPress or bbPress forums for help, I am up and running with a very presentable, professional looking, and fully functional blog/user forum. Absolutely incredible!!! I am notifying my subscribers later this morning about their new resource via email. Not bad for four days of work.</p> <p>Thank you good folks behind WordPress and bbPress! </p> http://bbpress.org/forums/topic/getting-around-50-fake-profiles-set-up-a-day-help#post-13978 Thu, 21 Feb 2008 17:27:15 +0000 hitec7 13978@http://bbpress.org/forums/ <p>are u sure _ck_ ?<br /> how about the hired Chinese ? :) </p> http://bbpress.org/forums/topic/getting-around-50-fake-profiles-set-up-a-day-help#post-13957 Wed, 20 Feb 2008 11:17:53 +0000 _ck_ 13957@http://bbpress.org/forums/ <p>My solution doesn't need template editing and has stopped all such activity on my site:</p> <p><a href="http://bbpress.org/plugins/topic/human-test/" rel="nofollow">http://bbpress.org/plugins/topic/human-test/</a> </p> http://bbpress.org/forums/topic/fight-against-auto-register-robot#post-13955 Wed, 20 Feb 2008 10:11:51 +0000 _ck_ 13955@http://bbpress.org/forums/ <p>So far this has solved the problem for me completely:<br /> <a href="http://bbpress.org/plugins/topic/human-test/" rel="nofollow">http://bbpress.org/plugins/topic/human-test/</a><br /> I'll augment it as they adapt. </p> http://bbpress.org/forums/topic/getting-around-50-fake-profiles-set-up-a-day-help#post-13954 Wed, 20 Feb 2008 04:14:27 +0000 chrishajer 13954@http://bbpress.org/forums/ <p>With all those links in the posts, it appears that akismet is not working. Do you have an akismet ket and is it entered in your config.php? That would prevent the posts loaded with links, in any case.</p> <p>Regarding the registrations, there is a "Human Test" plugin that might help:<br /> <a href="http://bbpress.org/forums/topic/signupregistration-captcha#post-13429" rel="nofollow">http://bbpress.org/forums/topic/signupregistration-captcha#post-13429</a></p> <p>Or, maybe something more complex like a CAPTCHA:<br /> <a href="http://bbpress.org/forums/topic/spam-registration#post-11879" rel="nofollow">http://bbpress.org/forums/topic/spam-registration#post-11879</a></p> <p>Or this tip:<br /> <a href="http://bbpress.org/forums/topic/fight-against-auto-register-robot#post-12246" rel="nofollow">http://bbpress.org/forums/topic/fight-against-auto-register-robot#post-12246</a></p> <p>Just search this forum for <a href="http://bbpress.org/forums/search.php?q=registration">registration</a> and you'll see lots of approaches to handling it. </p> http://bbpress.org/forums/topic/getting-around-50-fake-profiles-set-up-a-day-help#post-13953 Wed, 20 Feb 2008 04:03:47 +0000 t3ch33 13953@http://bbpress.org/forums/ <p>Did these sources confirm that they're actually getting around the registration process? Did they tell you how this is happening? </p>