Go to main content

Textpattern CMS support forum

You are not logged in. Register | Login | Help

#37 2010-04-06 20:52:51

Gocom
Developer Emeritus
From: Helsinki, Finland
Registered: 2006-07-14
Posts: 4,533
Website

Re: rah_comment_spam

jstubbs wrote:

Jukka, I am using v0.12 on TXP Tips – I just noticed the update to v0.3 so I’ll upgrade now, but redbot had some problems commenting on the site and I wondered if you know what the error is?

Sorry, I have no idea. Might be the lenght of the message or something, or the code in the message somehow did match to the spamwords(?). The plugin has no “magic” filter or anything. It just does what is set in the preferences. Version 0.1.2 did have some matching issues with cases, but that shouldn’t be it.

Edit. Oh you mean Non-static method timezone::is_dst() should not be called statically in … …txplib_misc.php on line 1265. Didn’t see it at first look. That error is somewhat caused by TXP’s core. See:

Last edited by Gocom (2010-04-06 21:10:25)

Offline

#38 2010-06-25 11:51:58

Grégocentrique
Plugin Author
From: Rouen, France
Registered: 2009-12-19
Posts: 28
Website

Re: rah_comment_spam

Hi,

I installed the plugin two weeks ago and limited the number of url by comment to 1. Unfortunately, I’m still having a lot of spam containing several links or URL (example : [URL=http://, [link=http://, href=“http://) and they’re not blocked. Do you have a trick to block them?

Thanks. :)

Offline

#39 2010-06-25 14:38:48

Gocom
Developer Emeritus
From: Helsinki, Finland
Registered: 2006-07-14
Posts: 4,533
Website

Re: rah_comment_spam

Grégocentrique wrote:

I installed the plugin two weeks ago and limited the number of url by comment to 1. Unfortunately, I’m still having a lot of spam containing several links or URL (example : [URL=http://, [link=http://, href=“http://) and they’re not blocked. Do you have a trick to block them?

Rah_comment_spam basically just counts the amount of http:// mentioned in a comment. If the link doesn’t have http:// in it, it won’t be blocked.

If you set the Max amount of URLs: to 1, it means that every comment can still contain a single link. If you want to limit all links, value 0 (zero) should do it.

You also try to block the bracket tags by setting them as spamwords ([URL=, [link=).

Offline

#40 2010-06-25 17:13:10

Grégocentrique
Plugin Author
From: Rouen, France
Registered: 2009-12-19
Posts: 28
Website

Re: rah_comment_spam

Thank you for your answer. I configured the plugin like you explained, but still have spam with those words. I’m now supposing that maybe there is a conflict with another plugin…

Offline

#41 2010-06-25 17:37:57

Grégocentrique
Plugin Author
From: Rouen, France
Registered: 2009-12-19
Posts: 28
Website

Re: rah_comment_spam

I tested the plugin alone on a local install of textpattern. It worked fine.

Then I disabled htn_antispam on my online site and now it seems to work fine too.

Last edited by Grégocentrique (2010-06-25 17:38:08)

Offline

#42 2010-07-25 10:16:07

mmelon
Member
Registered: 2006-03-02
Posts: 95

Re: rah_comment_spam

Hi,

I just installed this plugin on a 4.2 installtion and I get the following errors flash up briefly

Strict Standards: getdate() [function.getdate]: It is not safe to rely on the system's timezone settings. Please use the date.timezone setting, the TZ environment variable or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/Los_Angeles' for 'PDT/-7.0/DST' instead in /var/www/vhosts//httpdocs/textpattern/lib/txplib_misc.php on line 1262

Strict Standards: mktime() [function.mktime]: It is not safe to rely on the system's timezone settings. Please use the date.timezone setting, the TZ environment variable or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/Los_Angeles' for 'PDT/-7.0/DST' instead in /var/www/vhosts//httpdocs/textpattern/lib/txplib_misc.php on line 1263

Strict Standards: Non-static method timezone::is_dst() should not be called statically in /var/www/vhosts//httpdocs/textpattern/lib/txplib_misc.php on line 1265

Strict Standards: strftime() [function.strftime]: It is not safe to rely on the system's timezone settings. Please use the date.timezone setting, the TZ environment variable or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/Los_Angeles' for 'PDT/-7.0/DST' instead in /var/www/vhosts//httpdocs/textpattern/lib/txplib_misc.php on line 1299

Strict Standards: date() [function.date]: It is not safe to rely on the system's timezone settings. Please use the date.timezone setting, the TZ environment variable or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/Los_Angeles' for 'PDT/-7.0/DST' instead in /var/www/vhosts//httpdocs/textpattern/publish/comment.php on line 246

This is when I add a comment without a message so the validation kicks in and says please supply a message. If I do supply a message, it adds the comment despite my having a hidden field called phone that I have populated.

Does this plugin work with 4.2?

Kind regards,
Mike

Non-working inline code tags into code block (bc..) -Gocom

Last edited by Gocom (2010-07-25 10:51:52)

Offline

#43 2010-07-25 10:19:12

mmelon
Member
Registered: 2006-03-02
Posts: 95

Re: rah_comment_spam

interestingly it only does this when my site status is set to live

Offline

#44 2010-07-25 10:49:09

Gocom
Developer Emeritus
From: Helsinki, Finland
Registered: 2006-07-14
Posts: 4,533
Website

Re: rah_comment_spam

mmelon wrote:

Does this plugin work with 4.2?

Yes it does. The notice made by PHP indicates that Textpattern haven’t defined the TZ. Make sure that you have selected timezone/city in TXP’s preferences (TXP/Admin/Prefs) and set Auto-DST on. Otherwise all datetime functions will result in notices.

The notices are not caused because of the plugin, and theres nothing specific to the plugin. One of the notices is even linkin to the TXP’s commenting system.

interestingly it only does this when my site status is set to live

That should be because TXP’s error suppression. In PHP 5 the E_STRICT notices were moved under different category, which isn’t suppressed in Live mode (when TXP 4.2.0 or older is used) but disabled in debugging and testing modes.

Offline

#45 2010-07-25 11:09:41

mmelon
Member
Registered: 2006-03-02
Posts: 95

Re: rah_comment_spam

I’ve noticed another strange behaviour that is probably my fault…

when I set a field name to be spam trapped, it always gets set to a zero length string in the $_POST array.

If I remove it as a spam trap field in the comment spam config, it dumps the string length correctly.

I thought the point was to detect a populated dummy field and mark as spam. Yet the plugin seems to be removing the assigned spam trap field from the post vars.

Do you know what I am doing wrong?

Mike

Last edited by mmelon (2010-07-25 11:11:06)

Offline

#46 2010-07-25 11:26:43

Gocom
Developer Emeritus
From: Helsinki, Finland
Registered: 2006-07-14
Posts: 4,533
Website

Re: rah_comment_spam

mmelon wrote:

I thought the point was to detect a populated dummy field and mark as spam. Yet the plugin seems to be removing the assigned spam trap field from the post vars.

No, it shouldn’t. Can’t replicate. Filling the field indeed marks the comment as spam.

If you are renaming the field, make sure that you are using field name that is valid. Meaning that it can only contain basic letters (A-z), numbers (0-9), _ and -, or is properly encoded. If the field name has spaces etc, it won’t work as it won’t be submitted/received correctly.

If the variable is received empty, then there must be something that is making it empty (server’s security module etc), or the field is already used by the form. The plugin, doesn’t make it empty.

Offline

#47 2010-07-25 12:10:45

mmelon
Member
Registered: 2006-03-02
Posts: 95

Re: rah_comment_spam

I am using standard comments with a preview button. If I hit preview I see that the hidden field is sat in the post array as a zero length string.

If I remove it from the list of dummy spam fields, it is reported the correct length. I think this is related to the preview stage…

I will let you know if I have a break through

Mike

Offline

#48 2010-08-02 15:24:00

Gocom
Developer Emeritus
From: Helsinki, Finland
Registered: 2006-07-14
Posts: 4,533
Website

Re: rah_comment_spam

Released rah_comment_spam version 0.4. The update includes:

  • Added: now also filters https://, ftp:// and ftps:// protocols, not just links starting with http://.
  • Changed posting limit feature’s maximum post setting from “more than” to “equals or more than”. Setting the value to zero, or leaving empty, will disable the feature.
  • Changed filtering method from and to or. If and when the comment gets flagged by the first spam filter, the spam filtering process ends, instead of going thru all the checks which are no longer needed. Gives slight performance boost.
  • Now posting limits are counted barely by MySQL. No involment of PHP.
  • Merged rah_comment_spam_urlcount() and rah_comment_spam_spamwords().
  • Now admin panel uses same type of sliding panels as seen in rah_sitemap.
  • From version 0.4 onwards requires TXP 4.0.7 or newer.

Mr. Screenie Screenshot (click to see the full-sized shot):

More info and downloads

Last edited by Gocom (2010-08-02 15:25:29)

Offline

Board footer

Powered by FluxBB