PLUGIN WEEKENDS

[baris]

Who needs chat roulette when you have @Mr_Waffle + NodeBB

[bentael]

@planner said:

awesome security plugin

what do u have in mind? im bored.

[finid]

@bentael

A complete Web application firewall that offers login protection (brute force login attack protection), IP blocking, automated or manual site scan for intrusions, anti-spam, any feature we can think that will boost the security profile of the platform.

Maybe add the ability to put the site in maintenance mode, if it does not already have it.

Lock down of core files to prevent unauthorized modifications, etc

And I think we need some type of anti-spam for the registration page.

[bentael]

@planner said:

A complete Web application firewall that offers login protection (brute force login attack protection), IP blocking, automated or manual site scan for intrusions,

isn't easier to achieve that on the server level? doens't sound like a plugin.

Maybe add the ability to put the site in maintenance mode, if it does not already have it.

I don't think a plugin should be able to do that, sounds like a core NodeBB feature, but im with you on that one.

Lock down of core files to prevent unauthorized modifications, etc

again, server layer.

And I think we need some type of anti-spam for the registration page.

im working on one that uses this API

Stop Forum Spam

StopForumSpam - a database of known forum and blog spam, its sources and the email addresses reported

(stopforumspam.com)

but im not too convinced, i think we might need something like Akismet

[Chris]

stopforumspam is nowhere near as effective as akismet, not neccessarily because it's bad, but akismet gets much more traffic thanks to wordpress, therefor better data and better sample size.

on an ipb forum that is on a site that sees a ton of traffic I switched from stopforumspam to akismet and it was night and day.

[finid]

@bentael

So what's it going to take to code one using Akismet?

[bentael]

@planner not a lot.
I think we can have both filters, stopforumspam on user.create as a first line of defense, and the Akismet on post.create. I'll add Akismet tomorrow or tuesday, but API key is not free right? and I am little worried about latency with the API calls on every post creation. unless I call the Akismet API async but then remove the post if the response says it's spam. which is weird but it might work, since, hopefully most posts wont be spam

[StuartH]

Would a simple question & answer plugin work and be the quickest to produce? this would be my preferred method to start with.

[Chris]

@bentael said:

@planner not a lot.
I think we can have both filters, stopforumspam on user.create as a first line of defense, and the Akismet on post.create. I'll add Akismet tomorrow or tuesday, but API key is not free right? and I am little worried about latency with the API calls on every post creation. unless I call the Akismet API async but then remove the post if the response says it's spam. which is weird but it might work, since, hopefully most posts wont be spam

They do have a free option for personal use.

[Schamper]

Thanks guys Still a load of bugs but pretty happy with what I managed to cook up in an evening/night.

@julian said:

Oh right, we never clarified whether a new week began on Sunday or Monday

To be fair it was nearly 2AM for me when I posted that, so Monday for me