Welcome to Geeklog, Anonymous Friday, November 29 2024 @ 03:31 am EST
Geeklog Forums
Spam-X example & unfinished HTML tags
Status: offline
LWC
Forum User
Full Member
Registered: 02/19/04
Posts: 818
I've added Spam-X protection to Chatterblock and I'd like to test it.
Alas, Spam-X's log only reports IP addresses and the code the spam thanks to which the spam was catched, so can someone give me (based on the newest MT-Blacklist) a phrase or even just a word that should definitely trigger Spam-X and if it doesn't, something must have not worked?
Also, Chatterblock limits the message's text, which results in unfinished HTML tags (usually unfinished "a href"s). How does Spam-X handle unfinished HTML tags?
Thanks!
Alas, Spam-X's log only reports IP addresses and the code the spam thanks to which the spam was catched, so can someone give me (based on the newest MT-Blacklist) a phrase or even just a word that should definitely trigger Spam-X and if it doesn't, something must have not worked?
Also, Chatterblock limits the message's text, which results in unfinished HTML tags (usually unfinished "a href"s). How does Spam-X handle unfinished HTML tags?
Thanks!
13
11
Quote
Status: offline
Dirk
Site Admin
Admin
Registered: 01/12/02
Posts: 13073
Location:Stuttgart, Germany
How about you simply add a spammy keyword to your personal blacklist? Spam-X doesn't care which module reports a post as spam.
Most of the Spam-X modules don't care about broken HTML - they do a simple pattern matching.
bye, Dirk
Most of the Spam-X modules don't care about broken HTML - they do a simple pattern matching.
bye, Dirk
12
11
Quote
Status: offline
LWC
Forum User
Full Member
Registered: 02/19/04
Posts: 818
But the whole thing is I want to see if what my spammers use would be catched.
Seems like some spam keeps getting though. Mainly Google links. Actually, what bothers me most is the broken tags it leaves due to Chatterblock's cuttings. Sometimes those broken tags break the chatlog (thus I can't directly delete them) or even the phpblock.
But then again, if it bypasses MT-Blacklist, how come the same spam doesn't get to my stories' comments too?
Seems like some spam keeps getting though. Mainly Google links. Actually, what bothers me most is the broken tags it leaves due to Chatterblock's cuttings. Sometimes those broken tags break the chatlog (thus I can't directly delete them) or even the phpblock.
But then again, if it bypasses MT-Blacklist, how come the same spam doesn't get to my stories' comments too?
11
12
Quote
Status: offline
Dirk
Site Admin
Admin
Registered: 01/12/02
Posts: 13073
Location:Stuttgart, Germany
All spam is treated the same, i.e. all posts (comments, stories, trackbacks, ...) are run through Spam-X in the same way. In fact, Spam-X doesn't even know whether the post it's looking at is a story submission or a trackback or whatever.
The only difference is that the new trackback code also does a check for backlinks, i.e. it checks if the site that supposedly sent the trackback is actually linking to you. That's something that Spam-X can't do (since it doesn't know what a trackback is). Therefore, this catches spam that Spam-X wouldn't normally catch.
The Google posts you mention are test runs by a certain trackback spammer, e.g.
this is related article <a href="http://www.google.com/">[read more]</a><br>
Tracked on Tuesday, August 22 2006 @ 02:41 PM EDT
Obviously, unless you want to block everyone linking to Google, those can't be easily blocked when they come in as a comment. But with the backlink check in the trackback handling, they are easily identified as spam.
bye, Dirk
The only difference is that the new trackback code also does a check for backlinks, i.e. it checks if the site that supposedly sent the trackback is actually linking to you. That's something that Spam-X can't do (since it doesn't know what a trackback is). Therefore, this catches spam that Spam-X wouldn't normally catch.
The Google posts you mention are test runs by a certain trackback spammer, e.g.
Text Formatted Code
<a href="http://www.google.com/">this is very good</a> from this is very good<br>this is related article <a href="http://www.google.com/">[read more]</a><br>
Tracked on Tuesday, August 22 2006 @ 02:41 PM EDT
Obviously, unless you want to block everyone linking to Google, those can't be easily blocked when they come in as a comment. But with the backlink check in the trackback handling, they are easily identified as spam.
bye, Dirk
13
12
Quote
Status: offline
LWC
Forum User
Full Member
Registered: 02/19/04
Posts: 818
Here's an example that always gets through:
But an example that actually breaks the page (at least the chatlog page) because Chatterblock always cuts it in the end) is:
[cut]
Guess what? The forum identified the latter example as Spam! How come Spam-X doesn't?!
I wonder how come the same spammer doesn't try to use this text in a normal comment. After all, it should come through there just as well.
Text Formatted Code
tlpwgdWe advice http://www.google.com/pda%3Fq%3Dzyrtec%2Bsite%3Adrugstore.home.pl%26filter%3D0 a http://www.google.com/pda%3Fq%3Dwellbutrin%2Bsite%3Adrugstore.home.pl%26filter%3D0 o http://www.google.com/pda%3Fq%3Dvaltrex%2Bsite%3Adrugstore.home.pl%26filtBut an example that actually breaks the page (at least the chatlog page) because Chatterblock always cuts it in the end) is:
[cut]
Guess what? The forum identified the latter example as Spam! How come Spam-X doesn't?!
I wonder how come the same spammer doesn't try to use this text in a normal comment. After all, it should come through there just as well.
12
12
Quote
Status: offline
Dirk
Site Admin
Admin
Registered: 01/12/02
Posts: 13073
Location:Stuttgart, Germany
(dug out of a spam notification email)
You seem to be confused. The forum uses Spam-X. The above contains the word "viagra" which is in the personal blacklist here on geeklog.net (and I can only use it since I've activated the Spam-X plugin's admin_override option).
May I suggest you go back to square one and take a moment to think about how Spam-X actually works?
bye, Dirk
Quote by LWC: But an example that actually breaks the page (at least the chatlog page) is:
a <a href="http://www.google.com/pda%3Fq%3Dcialis%2Bsite%3Acolin.pl%26filter%3D0">cialis</a>
o <a href="http://www.google.com/pda%3Fq%3Dultram%2Bsit
(Because Chatterblock always cuts it in the end)
Guess what? The forum identified the latter example as Spam! How come Spam-X doesn't?!
Text Formatted Code
mtojbfWe advice <a href="http://www.google.com/pda%3Fq%3Dviagra%2Bsite%3Acolin.pl%26filter%3D0">viagra</a>a <a href="http://www.google.com/pda%3Fq%3Dcialis%2Bsite%3Acolin.pl%26filter%3D0">cialis</a>
o <a href="http://www.google.com/pda%3Fq%3Dultram%2Bsit
(Because Chatterblock always cuts it in the end)
Guess what? The forum identified the latter example as Spam! How come Spam-X doesn't?!
You seem to be confused. The forum uses Spam-X. The above contains the word "viagra" which is in the personal blacklist here on geeklog.net (and I can only use it since I've activated the Spam-X plugin's admin_override option).
May I suggest you go back to square one and take a moment to think about how Spam-X actually works?
bye, Dirk
10
8
Quote
Status: offline
Dirk
Site Admin
Admin
Registered: 01/12/02
Posts: 13073
Location:Stuttgart, Germany
Quote by LWC: All I want to know is how come (given the default list) this spam appears only in Chatterblock and not in the comments.
Sorry, I don't understand what you're saying.
If your Chatterblock mod calls PLG_checkForSpam (which is what is called during a comment submission) and you have identical input in both cases, then of course you will get identical results ...
bye, Dirk
10
11
Quote
All times are EST. The time is now 03:31 am.
- Normal Topic
- Sticky Topic
- Locked Topic
- New Post
- Sticky Topic W/ New Post
- Locked Topic W/ New Post
- View Anonymous Posts
- Able to post
- Filtered HTML Allowed
- Censored Content