Spam prevention

linc

There's currently no license info on the GitHub repository.

luceos

linc oh whoops. It's mit. A PR would be appreciated.

linc

luceos it identifies the language used against the language packs installed

Clever.

I've often wished to just have a simple string match for blocking spammers too. I don't know if you've ever seen it, but I've gotten bots that posted similar garbage as their intro/first post message. It wouldn't trip any of the conditions above but if you could just paste a string into a list it could block an entire category of bots.

Darkle

Now that I have some more time I'm going to stop to configure this extension in detail (as I'm going to have to configure lots of allowed urls).

A few weeks ago I configured Akismet to get out of the way quickly and I got a very negative surprise, basically the spam in English doesn't exist according to Akismet, I don't mean that it filters little, it doesn't detect anything, it only seems to detect spam in Chinese, I was expecting something more accurate taking into account that they have probably one of the largest spam databases and that for any commercial site it's a paid service...

I have a doubt, when it says that it scans emails, is it regarding anything in particular?

luceos

Darkle I don't have a clue what exactly they scan and what not 🙈 But they probably do have some blocklist for emails and potentially mark certain domains as potential senders of spam.

Darkle

This works really well, it has already caught his first two spam discussions, I really appreciate the effort @luceos!

luceos

Darkle 🥳

Discuss has been running with this (and some other minor customizations like truncating the testing tag and refusing other tags in testing) for quite a while. We've fine tuned spam prevention to reduce the necessary effort with moderation. I will do my best to improve the extension based on our experiences here on discuss and our experiences on our managed hosting. I'm glad that more people can finally use something so powerful, yet simple.

Darkle

Wellwisher Quoting luceos, the current Spam prevention extension.

luceos Discuss has been running with this (and some other minor customizations like truncating the testing tag and refusing other tags in testing) for quite a while. We've fine tuned spam prevention to reduce the necessary effort with moderation.

Lurker

luceos We've fine tuned spam prevention to reduce the necessary effort with moderation. I will do my best to improve the extension based on our experiences here on discuss and our experiences on our managed hosting.

Thank you for offering this to the public. Well done! 👍🏼

Does this extension use the same database from stopforumspam? If yes, that’s great! If not, I was wondering if I should install that extension along with this to make the fight against spam even better. My only concern is the incompatibility issue reported between stopforumspam and spamblock (see here).

pkernstock

Thanks @luceos for all the efforts your putting in the flarum ecosystem! Great to see Flarum evolving and getting better and better with each release.

I had to deal with some automated in Chinese language recently, so that extension comes with right timing. But I'm just wondering about one thing for now - taking your example:

->allowLinksFromDomain('luceos.com')

Does that also include the subdomain?

My intention is to whitelist "github.io" and all its subdomains. Is wildcard support possible?

luceos

pkernstock Does that also include the subdomain?

Yes.

pkernstock My intention is to whitelist "github.io" and all its subdomains. Is wildcard support possible?

No need. Just provide the domain and all subdomains are automatically allowed as well. Only if you use a sub domain will this be an exact match with the subdomain.

hey.luceos.com will only allow links from hey.luceos.com and any sub domains like wow.hey.luceos.com.
luceos.com will allow links from all sub domains, including hey.luceos.com and wow.hey.luceos.com

Darkle

luceos I would say that this doesn't work this way with the domain array option (allowLinksFromDomains), I don't know if this is intentional, but I would like to confirm it with another domain to be sure.

I noticed that youtube.com always redirects to www.youtube.com so even if the user types youtube.com the embedding redirects to www.youtube.com anyway, and with the array I had to put www as well so it could be detected properly.

luceos

Darkle stop finding bugs already 😂 Will look into that.

First test result is that deeply nested subdomains don't match, but subdomains do. At least according to the regex test, now I need to confirm check whether the code injects the domain correctly.

Darkle

luceos Haha sorry! I'll try again and confirm it, as it was one of the first domains I added, sometimes it took a while to refresh the new ones from extend.php, maybe that was the reason.

Darkle

I see what happens, if you post only the link (even if it's allowed) in the whole message the post is detected as spam, adding some text apart from the link does not detect it as such, so I was wrong, it does work automatically for subdomains with the array, sorry for the confusion.

This would be a different topic, maybe an option to allow posts that contain just a link if it's within the allowed ones?

Darkle

luceos I've tried v1.1 it works fine, I've done some experiments with my own domain and everything's cool it detects it, I'm not sure if you saw this previous message (Darkle ), I think we published it almost at the same time, it's working with youtube the reason turned out to be a different one.

luceos

I've published v1.1 with a few changes/fixes:

the domain regex would allow any character as subdomain, where it should check for a literal dot .
the domain regex would not allow any deeper nested subdomains
the site url is now properly added to the allow list, a test has been created to confirm

Please give this a spin @Darkle. I think youtube should work though, tests even seem to imply that. If not I'll need your configuration and the string to test (feel free to PR that if you want, there's a special UniqueExamplesTest to confirm workings of real world scenarios).

luceos

Tagged v1.2 which allows elevated users (mods and admins) to post without being hampered by the restriction this extension adds, will deploy to Discuss in a bit. (done)

Justoverclock

in these days flarum.it is literally assaulted from spammers, there's a way with this extension to create a button into the "post approval" modal that

spuspend users
delete all users post at once
ban ip

because now i need to delete manually each post created (a lot sometimes)

luceos

Justoverclock something like that would be interesting. Once I sit down for another update on this extension I will consider adding it. In the meantime PR's are welcome 😉

CyberGene

Justoverclock isn't the FoF Spamblock working similarly to what you suggest?

MarkoK

Justoverclock I've had same issues on flarum.fi and Mass Actions helps with message deletion. Users must be deleted one by one still.

luceos

CyberGene it is, but it requires you to go into the user profile first.. I think @Justoverclock is trying to figure out how to further reduce the weight of moderation when seeing loads of spam.

Justoverclock

luceos exactly

« Previous Page Next Page »