Somebody found out how to autogenerate text and post it in the public forum at the site…( its not yet « registrered only » )
what i think happens, is that he/she found a way to autogenerate txt and post it to an article ( forum)
eg. http://mir2.dk/article.php3?id_article=2367#forum104742
( my respons to the « hacker ») (have to remove the discuting links he puts on my site…)
The ( btw. not visible text is) some not working html…
I would be a bit sad, if I have to close the forum, or force it to be a « closed one »
The reason why I also write this, is that if he can hack my site, he can hack all sites containing url « …php3?id_article=… » sites, eg. all spip sites that he can find on google…
PS
I might be lucky, that it is just some that dont like my site, but i doubt it??
yes this is a site comment spammer (like one can spam emails, he can also decide to spam the comments of a site). It's not really a hack, the form is there open to post to everyone, so he has a bot posting comments automatically.
Currently, with SPIP, the sole solution is to go to moderated comments, where you have to validate every comments posted to your site. You will have to follow the last comments on your site and delete the spams and validate the rest every so often (as often as you want/can) so that the messages get to your public site.
A few month ago, I had the same problem, going to moderated comments calmed the spammers and a couple of weeks ago I switch back to open comments. It didn't take long for the spammers to find the site again and start to flood my forums.
It would be nice if there was a better solution against spammers integrated into SPIP which does not involve the login of users... if anyone feels ready to implement something, feel welcome to do so
2 solutions :
- CAPTCHA with accessibility problems (but there is already php
libraries for it)
I don't know that one.
- Bayesian networks : the best solution but I don't know any solution
in PHP - so maybe a plugin which whould interface php/perl ?
I started with the 1.9beta working on a bayesian filter plugin, but the forum code was not modular enough so I didn't get really fat, but you can find open source bayesian filter in php without problems.
On 24 Oct, 2006, at 19:29, Gilles Vincent wrote:
> 2 solutions :
> - CAPTCHA with accessibility problems (but there is already php
> libraries for it)
I don't know that one.
An exemple is here (article in french :
But personally I would prefer to implement a basic turing test with
simple questions like :
"My name is Robinson. What is my name ?"
"Enter TRUE if you think that 1 is less than 2 -- and convinced about it"
..
> - Bayesian networks : the best solution but I don't know any solution
> in PHP - so maybe a plugin which whould interface php/perl ?
I started with the 1.9beta working on a bayesian filter plugin, but
the forum code was not modular enough so I didn't get really fat, but
you can find open source bayesian filter in php without problems.
: