Home : Products : Links 2.0 : Discussions :

Products: Links 2.0: Discussions: Re: [Andy] SPAM in Links 2.0: Edit Log

Here is the list of edits for this post
Re: [Andy] SPAM in Links 2.0
Thank you for the email code Andy, I tested it for a few days and found that it motivated them to do more on a daily basis.

Then, I searched the Gossamer Threads for effective ways to stop this SPAMMER and implemented the following:

As previously mentioned, installed Human CAPTCHA and effectively stopped all automatic computer bots SPAMMING the directory. Then updated the following in hopes of stopping the few manual SPAMMERs:

Changed this line in add.cgi...
Code:
if (@db_referers and $ENV{'HTTP_REFERER'}) {


Into...
Code:
if (@db_referers) {


Updated these in add.cgi for more information gathering...
Code:

Remote Host: $ENV{'REMOTE_HOST'}
Remote IP: $ENV{'REMOTE_ADDR'}
Referer: $ENV{'HTTP_REFERER'}
Submitted Using: $ENV{'HTTP_USER_AGENT'};


Lastly, after getting the SPAMMER's remote host and IP information, checked them on Network Solutions and added the entire range in the server's host.deny file, even adding individual specific IP addresses from their submissions. These changes have reduced the 10 a day submissions, down to 5 a day. However, they are still able to get through. Here's the latest submission:
Quote:
Title: Strategic potential of the company
URL: www . all about strategies . com
Category: Health
Description: Realization of strategic decisions changes potential of enterprise, and a return to the previous state of object of management even if it is possible, demands time, resources or efforts.
Contact Name: Janice
Contact Email: janicevenezia@i.ua
Remote Host: shkarupilo.idegp.com
Remote IP: 193.201.100.187
Referer: http://www.ourdomain.com/cgi-bin/links.add.cgi

Submitted Using: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; SU 3.21; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; InfoPath.1);


How are these manual SPAM bastards able to bypass all these precautions and are there any other solutions to keep this beneficial ADD feature available without requiring user registrations or upgrades? I firmly believe right shall ultimately prevail. Any guidance will be appreciated.

Last edited by:

Zoro: May 18, 2009, 8:57 PM

Edit Log: