@mark-coniglio I like Stop Forum Spam. Free is not always good, but in this case it is. Nothing will be a magic bullet. Layered onions, etc. Google is evil so I naturally prefer hCaptcha.
The spam is real.
-
@Ted the new markdown library functions in the same capacity as the old one, on the server-side. If it does happen again, please let me know!
-
So far we've been without spam - hopefully that didn't jinx us - so I don't see myself incorporating Akismet support in the plugin anytime soon. In the event that it becomes an issue, I'll look into it.
Then once everything's broken, I'll let you know @julian
-
We also happened to be on an old version of spam-be-gone (
.4instead of something like.24), though @bentael assures me it makes no differenceI'd never enabled Askimet because the free plan is supposed to be for non-commercial use only. This morning I decided that this forum constitutes a non-commercial entity (that being a support forum for an open source project), so that was ok.
-
do you require email confirmation before allowing new users to post?
-
@bentael We do not, no, as this forum was up before that particular option made it into the ACP, and we saw no reason to restrict it.
I could turn it on, though I'd also point out that with some of these "temporary email" services, it's almost trivial to automate the email verification process.
(I keep spelling it as Marinator
) -
okay.. i dont know.. how are these bots bypassing captcha on registration? Mechanical Turk? OCR ?
-
The fact that they're getting past spam-be-gone makes me think it's manual. Now that I turned on Askimet, I haven't seen them, but it's been < 24 hours.
-
@julian said:
The fact that they're getting past spam-be-gone makes me think it's manual. Now that I turned on Askimet, I haven't seen them, but it's been < 24 hours.
They're baaaaaaaaaaaaaaaaaack :squirrel:
-
@bentael said:
do you require email confirmation before allowing new users to post?
This is enabled on this forum now.
-
@bentael, any chance akismet can be trained to look at the topic title as well as the post content. Current spam is only in the title. Whether the title is included in post content or something like that.
-
@a_5mith said:
@bentael, any chance akismet can be trained to look at the topic title as well as the post content. Current spam is only in the title. Whether the title is included in post content or something like that.
Could it be something as simple as changing
comment_content: data.content,to:
comment_content: data.title + data.content, -
That was my thinking. As akismet doesn't have a specific title field, could be combined with content.
-
@xbenjii said:
@a_5mith said:
@bentael, any chance akismet can be trained to look at the topic title as well as the post content. Current spam is only in the title. Whether the title is included in post content or something like that.
Could it be something as simple as changing
comment_content: data.content,to:
comment_content: data.title + data.content,As the title could be considered a top-level header, how about we add a couple newlines?
comment_content: data.title + "\n\n" + data.content, -
Not really, at least Akismet API does not have anything to do with a title, http://akismet.com/development/api/#comment-check
however, I just combined
title + '\n' + contentto get sent to AkismetAn embarrassing thing i just noticed, is that the spam-be-gone plugin is only listening to
filter:topic.replyso all the topics creation are not getting checked because they firefilter:topic.post@julian, @a_5mith opened my eyes that Akismet was not checking new Topics creation, only topic replies, so I added it
I just published [email protected] that fixes this issue.
-
@Xiph i think you and i were typing at the same time. I just did exactly what you suggested. thank you.
-
More spam digests. But, on a positive note I've found an excellent practitioner of black magic in Mumbai.
-
Tried to post here, but nothing appeared? (after confirming email).
Edit: now the posts are showing.
-
The latest spam-be-gone from @bentael should hopefully stop them once and for all!
Cautiously optimistic...
-
It was all a matter of time
-
@julian In before they just start sending chat messages with it in.
