Spam prevention

luceos

Discuss has been running with this (and some other minor customizations like truncating the testing tag and refusing other tags in testing) for quite a while. We've fine tuned spam prevention to reduce the necessary effort with moderation. I will do my best to improve the extension based on our experiences here on discuss and our experiences on our managed hosting. I'm glad that more people can finally use something so powerful, yet simple.

Darkle

Wellwisher Quoting luceos, the current Spam prevention extension.

luceos Discuss has been running with this (and some other minor customizations like truncating the testing tag and refusing other tags in testing) for quite a while. We've fine tuned spam prevention to reduce the necessary effort with moderation.

Lurker

luceos We've fine tuned spam prevention to reduce the necessary effort with moderation. I will do my best to improve the extension based on our experiences here on discuss and our experiences on our managed hosting.

Thank you for offering this to the public. Well done! 👍🏼

Does this extension use the same database from stopforumspam? If yes, that’s great! If not, I was wondering if I should install that extension along with this to make the fight against spam even better. My only concern is the incompatibility issue reported between stopforumspam and spamblock (see here).

pkernstock

Thanks @luceos for all the efforts your putting in the flarum ecosystem! Great to see Flarum evolving and getting better and better with each release.

I had to deal with some automated in Chinese language recently, so that extension comes with right timing. But I'm just wondering about one thing for now - taking your example:

->allowLinksFromDomain('luceos.com')

Does that also include the subdomain?

My intention is to whitelist "github.io" and all its subdomains. Is wildcard support possible?

luceos

pkernstock Does that also include the subdomain?

Yes.

pkernstock My intention is to whitelist "github.io" and all its subdomains. Is wildcard support possible?

No need. Just provide the domain and all subdomains are automatically allowed as well. Only if you use a sub domain will this be an exact match with the subdomain.

hey.luceos.com will only allow links from hey.luceos.com and any sub domains like wow.hey.luceos.com.
luceos.com will allow links from all sub domains, including hey.luceos.com and wow.hey.luceos.com

Darkle

luceos I would say that this doesn't work this way with the domain array option (allowLinksFromDomains), I don't know if this is intentional, but I would like to confirm it with another domain to be sure.

I noticed that youtube.com always redirects to www.youtube.com so even if the user types youtube.com the embedding redirects to www.youtube.com anyway, and with the array I had to put www as well so it could be detected properly.

luceos

Darkle stop finding bugs already 😂 Will look into that.

First test result is that deeply nested subdomains don't match, but subdomains do. At least according to the regex test, now I need to confirm check whether the code injects the domain correctly.

Darkle

luceos Haha sorry! I'll try again and confirm it, as it was one of the first domains I added, sometimes it took a while to refresh the new ones from extend.php, maybe that was the reason.

Darkle

I see what happens, if you post only the link (even if it's allowed) in the whole message the post is detected as spam, adding some text apart from the link does not detect it as such, so I was wrong, it does work automatically for subdomains with the array, sorry for the confusion.

This would be a different topic, maybe an option to allow posts that contain just a link if it's within the allowed ones?

Darkle

luceos I've tried v1.1 it works fine, I've done some experiments with my own domain and everything's cool it detects it, I'm not sure if you saw this previous message (Darkle ), I think we published it almost at the same time, it's working with youtube the reason turned out to be a different one.

luceos

I've published v1.1 with a few changes/fixes:

the domain regex would allow any character as subdomain, where it should check for a literal dot .
the domain regex would not allow any deeper nested subdomains
the site url is now properly added to the allow list, a test has been created to confirm

Please give this a spin @Darkle. I think youtube should work though, tests even seem to imply that. If not I'll need your configuration and the string to test (feel free to PR that if you want, there's a special UniqueExamplesTest to confirm workings of real world scenarios).

luceos

Tagged v1.2 which allows elevated users (mods and admins) to post without being hampered by the restriction this extension adds, will deploy to Discuss in a bit. (done)

Justoverclock

in these days flarum.it is literally assaulted from spammers, there's a way with this extension to create a button into the "post approval" modal that

spuspend users
delete all users post at once
ban ip

because now i need to delete manually each post created (a lot sometimes)

luceos

Justoverclock something like that would be interesting. Once I sit down for another update on this extension I will consider adding it. In the meantime PR's are welcome 😉

CyberGene

Justoverclock isn't the FoF Spamblock working similarly to what you suggest?

MarkoK

Justoverclock I've had same issues on flarum.fi and Mass Actions helps with message deletion. Users must be deleted one by one still.

luceos

CyberGene it is, but it requires you to go into the user profile first.. I think @Justoverclock is trying to figure out how to further reduce the weight of moderation when seeing loads of spam.

Justoverclock

luceos exactly

Justoverclock

MarkoK yes this is for sure an options, but what i mean is to have a single action from admin and mod to completely clean, ban and suspend user

MikeJones

Justoverclock yes this is for sure an options, but what i mean is to have a single action from admin and mod to completely clean, ban and suspend user

this would be amazing!

Post approval is blocking spam for me great! But man its becoming a pain to mark the user as spam then delete the all the posts as well. I 100% here you!

luceos

v1.2.1 fixes the issue that duplicate flags were added when edited

CyberGene

Maybe I'm doing something wrong but it appears that all new users go through an approval. I just registered a brand new test user to my forum and posted the following post:

Bach is underrated.

And that was flagged for approval. Is this expected? I'm just noticing that all new users on our forum go through an approval, so something is definitely not right but I'm trying to understand what exactly.

P.S. I also have the auto-moderator and it differentiates between newly registered users (less than 5 posts) and regular users (more than 5 posts) and I have limited new users to require an approval for posts in the "Politics" tag but the post was not in such a discussion. Maybe the permissions are not working correctly?

P.P.S. Is there any logging performed by this extension to see whether it was triggered and for what criteria?

P.P.S.2 @luceos, something is really odd. If I'm a new user that posts Bach is underrated. that post is held for an approval. I then post a second post Bach is my favorite composer. and that is posted without an approval. Then I post a third post after the other two Bach is undertated. and it's held for an approval 😀 Basically I have three posts one after another, the first and the third are held for an approval, the second is OK. Is the word underrated somehow detected as a bad word or something?

« Previous Page Next Page »