Win a copy of Reactive Streams in Java: Concurrency with RxJava, Reactor, and Akka Streams this week in the Reactive Progamming forum!
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
programming forums Java Mobile Certification Databases Caching Books Engineering Micro Controllers OS Languages Paradigms IDEs Build Tools Frameworks Application Servers Open Source This Site Careers Other all forums
this forum made possible by our volunteer staff, including ...
Marshals:
  • Campbell Ritchie
  • Liutauras Vilda
  • Junilu Lacar
  • Jeanne Boyarsky
  • Bear Bibeault
Sheriffs:
  • Knute Snortum
  • Tim Cooke
  • Devaka Cooray
Saloon Keepers:
  • Ron McLeod
  • Stephan van Hulst
  • Tim Moores
  • Tim Holloway
  • Carey Brown
Bartenders:
  • Piet Souris
  • Frits Walraven
  • Ganesh Patekar

Feature request: better spam management

 
Ranch Hand
Posts: 17424
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi,

I'd like to request three new features:

1) Better spam prevention. I believe the existing captcha system has been broken. Please investigate replacing it with newer generation spam prevention mechanisms.

2) If a spammer does get through and posts 10,000 new messages it should be possible to tell JForum to delete all posts by X instead of iterating through them one by one.

3) Consider what happens if spammers register 10,000 new spam accounts. Ideally you don't want to have to delete them one by one either. I don't have a solution for this one but it's worth giving this some thought.

PS: I noticed other forums prevent new users from posting URLs for some undetermined amount of time. Perhaps we could add a similar feature.

Thank you,
Gili
[originally posted on jforum.net by cowwoc]
 
Migrated From Jforum.net
Ranch Hand
Posts: 17424
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Why do you think the current captcha engine has been broken?

Rafael
[originally posted on jforum.net by Rafael Steil]
 
Migrated From Jforum.net
Ranch Hand
Posts: 17424
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi Rafael,

A few months ago some spammers posted thousands of messages on my forums using 2-3 accounts. Now it could very well be they created the accounts by hand and went on from there but having read articles as of late about Yahoo and Google's captchas getting cracked I think we should assume that JForum's captcha is no better.

I'd like to see some administration tools for recovering once spam has already been posted and maybe we can review the status of the captcha later on. Last time I got spammed there was way too much to remove by hand so I simply fired up an SQL query to remove all posts between a specific time frame. The problem with this shotgun approach is that you end up deleting good posts alongside the bad so I'd like to avoid having to do that a second time around.

How about a feature to "delete user and all his posts"?
[originally posted on jforum.net by cowwoc]
 
Migrated From Jforum.net
Ranch Hand
Posts: 17424
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
I see. You can register them in Jira - http://www.jforum.net/jira

Until then, please note that you can activate Captcha for new messages as well, although that will apply to all users. It is also possible to set a minimum time between each new message sent by the same user - e.g, you can instruct JForum to reject a new message from the same user if the last he sent was less than 60 seconds ago.

Take a look at Admin Panel -> Configurations -> Delay (in ms) between each post from the user

Rafael
[originally posted on jforum.net by Rafael Steil]
 
Been there. Done that. Went back for more. But this time, I took this tiny ad with me:
Java file APIs (DOC, XLS, PDF, and many more)
https://products.aspose.com/total/java
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
Boost this thread!