Geeklog Forums

I'm using Geeklog 1.4.0sr5-1 and have just moved from an internal server to a remote web host. And literally minutes after the DNS changed, I started getting slammed by comment spam. We're talking about dozens a minute.

I wrote a script that does a nice job at cleaning out the comment spam, but I'm thinking of another approach: stopping the spam before it is entered into the database. I've noticed some patterns, and was wondering a) if there is existing functionality that I'm just not aware of in geeklog to take care of this or b) if you could point me in the right direction as to where (which files, etc) I could implement the following.

1. The comment spam is coming from many different IP addresses. I don't know if this is due to spoofing, or if it's due to zombie machines. So IP address is not a sufficient variable to check against when deciding whether to allow the comment.

2. Title- The most glaring thing I keep seeing is that the title of the comment is different from the post. When the title of the comment is different, it's spam 99% of the time. And a lot of the time, the title of the comment is "Nice!"

Is there a way to create a blacklist of comment titles? I can be pretty sure that if the title of the comment is "Nice!", it's a spammer. So, if I could check the title of the comment against a spam title blacklist before entering it into the database, I'm sure this would eliminate a LOT of the spam.

3. Moderated comments- Is there a way to set geeklog to place a comment in a moderation queue? For instance, if a comment has more than 2 links, could I place it in moderation?

I want to thank you in advance for reading my post, and any suggestions or comments would be greatly appreciated.

Thank You!

Activate your Spam-X plugin.

I've got spamx activated.

Try the Captcha plugin, that should handle it.

---

Dutch Geeklog sites about camping/hiking:
www.kampeerzaken.nl | www.campersite.nl | www.caravans.nl | www.caravans.net

Disable comments for anonymous users. And if you've done that already, use GL-Captcha to stop the spambots from signing up. Install SLV. Read Dealing with Spam (on the wiki).

bye, Dirk

Where could I find that plugin so I could download it and install it?

Captcha is not a plugin is is a hack that currently works for creation of new users.

http://www.geeklog.net/filemgmt/index.php?id=754

It would be nice to include this in the next version of geeklog with the ability for plugins to access it as well.

---

One of the Geeklog Core Developers.