Hi,
We have been getting clobbered with forum spam lately, and have had to disable some features.
The forum spammer's goal is to write links in the forum that point to some site or other.
So we have turned off bbcode in all forums, which disallows links in forum posts.
We have also turned off signatures for free users, which disallows links in signatures. We left signatures on for non-free users. All forum spammers are free users.
We hope to come up with a better solution shortly, but this should give us the maximum usefulness and hopefully discourage future spam.
Sorry about the incovenience, I know people love their sigs :)
Jon
turned off signatures for some users
# 1
Bummer, never really seen much spam in sig files myself... is this a permanent change?
# 2
Are all these spammers required to verify their emails etc?
I can't remember if Guitar Tricks still does the whole "enter the number above to verify" and "reply by email verification" thing.
If not it might help. (even though it's annoying as hell)
I can't remember if Guitar Tricks still does the whole "enter the number above to verify" and "reply by email verification" thing.
If not it might help. (even though it's annoying as hell)
# 3
Hi Jon,
Most spammers are bots. It has been my experience that implementing a couple of things will significantly slow them down, if not stop them entirely.
1. Use CAPTCHA to complete the registration process. Bots cannot read the graphic, so they cannot register.
2. Disable posting by guests (unregistered users).
I'm not trying to step on any toes here. I'm just trying to help. :)
Originally Posted by: Jon BroderickWe have been getting clobbered with forum spam lately, and have had to disable some features.
Most spammers are bots. It has been my experience that implementing a couple of things will significantly slow them down, if not stop them entirely.
1. Use CAPTCHA to complete the registration process. Bots cannot read the graphic, so they cannot register.
2. Disable posting by guests (unregistered users).
I'm not trying to step on any toes here. I'm just trying to help. :)
# 4
I'm a guest and have been posting here for a couple of years. I've thought about registering a few times but I reckon I know enough about playing guitar already... there are quiet a few regulars in and out of the boards that are not registered members too (Maestro Shaz & Speedster to name but two of the most advanced players on the site). I'm not sure ihow many would upgrade just to be able to post but I probably wouldn't (no offense intended - just the way it is with me)...
# 5
You wouldn't have to upgrade to paying member status to become a registered user.
It's just basically a verification system showing that you're a real person and not a bot by using CAPTCHA and clicking a link in an email.
I think the forum already requires verification by email but they stopped using CAPTCHA cause it was a pain to use.
I think Guests are allowed to post in the Open Forum though, which might be part of the problem.
It's just basically a verification system showing that you're a real person and not a bot by using CAPTCHA and clicking a link in an email.
I think the forum already requires verification by email but they stopped using CAPTCHA cause it was a pain to use.
I think Guests are allowed to post in the Open Forum though, which might be part of the problem.
# 6
Hi Superhuman,
By guests, I was not targeting folks such as yourself. You are a registered user. By guests, I mean folks that can post, without first registering for an account.
By guests, I was not targeting folks such as yourself. You are a registered user. By guests, I mean folks that can post, without first registering for an account.
# 7
Hi Kevin,
I enjoy your lessons, by the way. Good stuff. :)
I would rather deal with the minor inconvenience of CAPTCHA than this constant bombardment of spam, but that's just me. ;)
CAPTCHA would be a far better solution, IMHO, than stripping features away from us regular folks. :cool:
I enjoy your lessons, by the way. Good stuff. :)
Originally Posted by: Kevin TaylorI think the forum already requires verification by email but they stopped using CAPTCHA cause it was a pain to use.
I would rather deal with the minor inconvenience of CAPTCHA than this constant bombardment of spam, but that's just me. ;)
CAPTCHA would be a far better solution, IMHO, than stripping features away from us regular folks. :cool:
# 8
Originally Posted by: LChanceHi Jon,
Most spammers are bots. It has been my experience that implementing a couple of things will significantly slow them down, if not stop them entirely.
1. Use CAPTCHA to complete the registration process. Bots cannot read the graphic, so they cannot register.
2. Disable posting by guests (unregistered users).
I'm not trying to step on any toes here. I'm just trying to help. :)
I run another board that uses captcha and it isn't even slowing them down these days.
It seems there is something new afoot in bot-land.
# 9
Originally Posted by: SuperhumanBummer, never really seen much spam in sig files myself... is this a permanent change?
Until we get a better idea.
The sig allows a clickable url, and that is what the bots are after.
# 10
Originally Posted by: Jon BroderickI run another board that uses captcha and it isn't even slowing them down these days.
It seems there is something new afoot in bot-land.
I wonder what board script you are using? CAPTCHA stops bots at my sites. IMO, stripping BB code does nothing to stop bots (they don't think). They will post their garbage whether the link is "clickable" or not.
There are only two ways that I can think of for bots to beat CAPTCHA. 1) Text is used instead of graphics. 2) There is no randomization of the code written to the graphic file. Assuming, of course, posting has been disabled for gusts. I digress.
# 11
Originally Posted by: LChanceHi Superhuman,
By guests, I was not targeting folks such as yourself. You are a registered user. By guests, I mean folks that can post, without first registering for an account.
I hear ya. Do spammers actually get any returns out of all of this spamming? I mean, surely the web culture has evolved to the stage now that spamming is like exposing yourself in public.... looked at with disdain (for the most part!).
# 12
It's all about the money so they don't care.
I think they're getting paid by the click, so they use bots to post millions of these things in the hopes of getting a couple of hundred people to click on the link.
I think they're getting paid by the click, so they use bots to post millions of these things in the hopes of getting a couple of hundred people to click on the link.
# 13
Just noticed that since the signatures have been done away with there are even more spam posts... ridiculous stuff too. Maybe one of the mods should do a check and delete these posts once a day?
Is the sig file change permanent seeing as the spam happens regardless? A little more moderation should at least keep the problem at bay - some of those explicit posts stay as the top post in a section for a few days at times, not really a good advertisement for new members.
Is the sig file change permanent seeing as the spam happens regardless? A little more moderation should at least keep the problem at bay - some of those explicit posts stay as the top post in a section for a few days at times, not really a good advertisement for new members.
# 14
Some days are worse than others.. I just deleted about a dozen but they are pretty much deleted within 12 hours if not sooner.. I think about 4 to 6 hours is pretty normal for detecting and deleting. To aid us though, people can report the bad posts with the report bad post button on each post. This will send us an email to tell us. I receive my emails on my mobile phone, so I know within 5 minutes of someone reporting a bad post. Can't always get to a computer immediately but I know to check the next time I am near a computer.
# 15
Nice one, about to hit the bad post button on the 'teen porn discussion' thread! :eek:
# 16
Originally Posted by: light487. To aid us though, people can report the bad posts with the report bad post button on each post. This will send us an email to tell us.
Didn't even realize that button was there until yesterday. Definitely a lot easier than posting a link in the admin forum every time :)
# 17
