-
[Serious] Restricting access to user
I hate spammy spammers, (no offence kregg).
I want to ban them from my site, but, short of employing a mob to shot them all down, I was considering baning IP addresses.
But, a point of which I had picked up on the t'interweb is that because IPs change it will never prevent spammy spammers, and potentially annoy the good people, such as myself...
Any thoughts / alternative suggestions?
-
Re: [Serious] Restricting access to user
Not much you can do. IP blocking is about effective as it's going to get.
Also, why does your website display this in your top blog entry:
Code:
<!– /* Font Definitions */ @font-face {font-family:”Cambria Math”; panose-1:2 4 5 3 5 4 6 3 2 4; mso-font-charset:1; mso-generic-font-family:roman; mso-font-format:other; mso-font-pitch:variable; mso-font-signature:0 0 0 0 0 0;} @font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4; mso-font-charset:0; mso-generic-font-family:swiss; mso-font-pitch:variable; mso-font-signature:-1610611985 1073750139 0 0 159 0;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {mso-style-unhide:no; mso-style-qformat:yes; mso-style-parent:”"; margin-top:0cm; margin-right:0cm; margin-bottom:10.0pt; margin-left:0cm; line-height:115%; mso-pagination:widow-orphan; font-size:11.0pt; font-family:”Calibri”,”sans-serif”; mso-ascii-font-family:Calibri; mso-ascii-theme-font:minor-latin; mso-fareast-font-family:Calibri; mso-fareast-theme-font:minor-latin; mso-hansi-font-family:Calibri; mso-hansi-theme-font:minor-latin; mso-bidi-font-family:”Times New Roman”; mso-bidi-theme-font:minor-bidi; mso-fareast-language:EN-US;} p {mso-style-noshow:yes; mso-style-priority:99; mso-margin-top-alt:auto; margin-right:0cm; mso-margin-bottom-alt:auto; margin-left:0cm; mso-pagination:widow-orphan; font-size:12.0pt; font-family:”Times New Roman”,”serif”; mso-fareast-font-family:”Times New Roman”;} .MsoChpDefault {mso-style-type:export-only; mso-default-props:yes; mso-ascii-font-family:Calibri; mso-ascii-theme-font:minor-latin; mso-fareast-font-family:Calibri; mso-fareast-theme-font:minor-latin; mso-hansi-font-family:Calibri; mso-hansi-theme-font:minor-latin; mso-bidi-font-family:”Times New Roman”; mso-bidi-theme-font:minor-bidi; mso-fareast-language:EN-US;} .MsoPapDefault {mso-style-type:export-only; margin-bottom:10.0pt; line-height:115%;} @page Section1 {size:595.3pt 841.9pt; margin:72.0pt 72.0pt 72.0pt 72.0pt; mso-header-margin:35.4pt; mso-footer-margin:35.4pt; mso-paper-source:0;} div.Section1 {page:Section1;} –>
-
Re: [Serious] Restricting access to user
Microsoft Ajax has a NoBot control that executes client-side DOM calculations and rejects requests sent within a few seconds of a page's loading... both have been extremely effective on my website in preventing spam in an otherwise unprotected shout box. Maybe there's something similar out there you could find?
-
Re: [Serious] Restricting access to user
Quote:
Originally Posted by kasracer
Not much you can do. IP blocking is about effective as it's going to get.
Also, why does your website display this in your top blog entry:
Code:
<!– /* Font Definitions */ @font-face {font-family:”Cambria Math”; panose-1:2 4 5 3 5 4 6 3 2 4; mso-font-charset:1; mso-generic-font-family:roman; mso-font-format:other; mso-font-pitch:variable; mso-font-signature:0 0 0 0 0 0;} @font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4; mso-font-charset:0; mso-generic-font-family:swiss; mso-font-pitch:variable; mso-font-signature:-1610611985 1073750139 0 0 159 0;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {mso-style-unhide:no; mso-style-qformat:yes; mso-style-parent:”"; margin-top:0cm; margin-right:0cm; margin-bottom:10.0pt; margin-left:0cm; line-height:115%; mso-pagination:widow-orphan; font-size:11.0pt; font-family:”Calibri”,”sans-serif”; mso-ascii-font-family:Calibri; mso-ascii-theme-font:minor-latin; mso-fareast-font-family:Calibri; mso-fareast-theme-font:minor-latin; mso-hansi-font-family:Calibri; mso-hansi-theme-font:minor-latin; mso-bidi-font-family:”Times New Roman”; mso-bidi-theme-font:minor-bidi; mso-fareast-language:EN-US;} p {mso-style-noshow:yes; mso-style-priority:99; mso-margin-top-alt:auto; margin-right:0cm; mso-margin-bottom-alt:auto; margin-left:0cm; mso-pagination:widow-orphan; font-size:12.0pt; font-family:”Times New Roman”,”serif”; mso-fareast-font-family:”Times New Roman”;} .MsoChpDefault {mso-style-type:export-only; mso-default-props:yes; mso-ascii-font-family:Calibri; mso-ascii-theme-font:minor-latin; mso-fareast-font-family:Calibri; mso-fareast-theme-font:minor-latin; mso-hansi-font-family:Calibri; mso-hansi-theme-font:minor-latin; mso-bidi-font-family:”Times New Roman”; mso-bidi-theme-font:minor-bidi; mso-fareast-language:EN-US;} .MsoPapDefault {mso-style-type:export-only; margin-bottom:10.0pt; line-height:115%;} @page Section1 {size:595.3pt 841.9pt; margin:72.0pt 72.0pt 72.0pt 72.0pt; mso-header-margin:35.4pt; mso-footer-margin:35.4pt; mso-paper-source:0;} div.Section1 {page:Section1;} –>
Which of my sites was that?
-
Re: [Serious] Restricting access to user
I think he's talking about this blog.
-
Re: [Serious] Restricting access to user
OH!!! I see.
I have absolutely no idea why that code is on my blog?
Thanks for pointing it out
-
Re: [Serious] Restricting access to user
Quote:
Originally Posted by I_Love_My_Vans
I hate spammy spammers, (no offence kregg).
Then why did you add me to your list?
Oh wait... I added you to my list... :blush: http://img511.imageshack.us/img511/8679/eek3xad5.gif
-
Re: [Serious] Restricting access to user
Your previous post is just a blur, my spam glasses are restciting the post.
-
Re: [Serious] Restricting access to user
All you need to know is this: http://www.vbforums.com/
-
Re: [Serious] Restricting access to user
-
Re: [Serious] Restricting access to user
-
Re: [Serious] Restricting access to user
Is this for your blog? Why don't you just disable the comments?
-
Re: [Serious] Restricting access to user
No it isn't for my blog, I have a WordPress pluggin to solve that problem.
-
Re: [Serious] Restricting access to user
CAPTCHA not working? Is it for a guestbook/comments page or is it a contact page?
-
Re: [Serious] Restricting access to user
No no, captcha is working, working well. All I wanted to do is if a spammer were to manually get around the captcha then I would ban their IP, this is indeed for my contact page.
TBH, I have had little experience in this area, so if you guys think captcha is sufficient, say so :)
-
Re: [Serious] Restricting access to user
What do you mean "manually" get around your Captcha? Do you not do any server-side validation?
Btw, Captchas suck. You have to make it difficult to read (i.e. lots of background shapes and colors and lines going through the letters) to fool the OCR software spammers will use but then you make it very difficult for the user. Make it too simple and the spammers can automatically read it.
A good alternative is answering a question such as "To prove you are a human: what is 2 + 3?". Just don't put the answer in JavaScript.
-
Re: [Serious] Restricting access to user
Manual as in a human will physically type it in and me...
Your idea of the maths question sounds interesting, its something I might look into.
-
1 Attachment(s)
Re: [Serious] Restricting access to user
The math thing would be really very easy to break algorithmically even using standard shell commands (see the screenshot).
It would be a bit more robust if you dressed it up in words:
"What is two times three?"
But not much more.
-
Re: [Serious] Restricting access to user
"What is t00 plus thr33?"
-
Re: [Serious] Restricting access to user
-
Re: [Serious] Restricting access to user
Quote:
Originally Posted by wossname
The math thing would be really very easy to break algorithmically even using standard shell commands (see the screenshot).
It would be a bit more robust if you dressed it up in words:
"What is two times three?"
But not much more.
:lol:
-
Re: [Serious] Restricting access to user
What is the color of the background of this page?
What is the fourth letter of this question?
What is the answer to life, the universe and everything?
-
Re: [Serious] Restricting access to user
just ban the IPs for some period of time, like 2 weeks. If the spam continues to come from the same IP after it was blacklisted for the allotted time, then consider a permaban.
You know, sort of like what we do with some folks around here who don't behave.. we ban them for a bit, then forever if they don't get the message ;)
-
Re: [Serious] Restricting access to user
Not to worry. I had a talk with Max, and I believe he fully understands the message. He promised to me that he would never get into trouble again. I think the time away from this lovely place finally started getting to him...
-
Re: [Serious] Restricting access to user
Quote:
Originally Posted by timeshifter
Not to worry. I had a talk with Max, and I believe he fully understands the message. He promised to me that he would never get into trouble again. I think the time away from this lovely place finally started getting to him...
Have you had a talk with yourself?
-
Re: [Serious] Restricting access to user
Why would I need to do that? That'd just be... weird...
-
Re: [Serious] Restricting access to user
-
Re: [Serious] Restricting access to user
Why don't you have users registered, validate with a double-opt in email. When they want to post, they have to be registered by an email. You can with server side coding, get an IP, Mac Address of equipment, OS installation key, motherboard ID that would be unique to the user. There are various solutions to your spam posting, in addition to generating Captcha and validating the generated Captcha.
Also, you could have all comments, or forms validated by a human, before it posts. If the spammers can't blast you, they'll leave you alone.
-
Re: [Serious] Restricting access to user
I would like to know how you can "with server side coding get... OS installation key"...
If that was the case, I feel like people would have their product keys lifted constantly...
-
Re: [Serious] Restricting access to user
Quote:
Originally Posted by
kleinma
I would like to know how you can "with server side coding get... OS installation key"...
If that was the case, I feel like people would have their product keys lifted constantly...
You can't, I was just seeing who was paying attention. Client side, it can be done!
-
Re: [Serious] Restricting access to user
Seeing who was paying attention in the nearly year old post you dug up?
-
Re: [Serious] Restricting access to user
Apparently, you were paying attention. I got an email from DaniWeb asking me to come back. Now I see why I left in the first place!
Also, I know that people get emails alerting them to posts, old, new or otherwise. I'm looking for a solution and I have commented in the past.
I think it's best that I go else where for my answers and to assist.
-
Re: [Serious] Restricting access to user
Quote:
Originally Posted by
soltec
Apparently, you were paying attention. I got an email from DaniWeb asking me to come back. Now I see why I left in the first place!
Also, I know that people get emails alerting them to posts, old, new or otherwise. I'm looking for a solution and I have commented in the past.
I think it's best that I go else where for my answers and to assist.
So you came back, posted incorrect information, were corrected on it and are now leaving because of it?
Uhh okie, buh-bye.
-
Re: [Serious] Restricting access to user
I admitted I was wrong, and YET I still hear from you. That's why I left. There are too many people that are so quick to jump on someone, but not as many willing to help.
I think the reason people need the help, genuinely is because there aren't enough "good" resources out there. Dani Web helped me and I reciprocated in kind. I'm not leaving because I was called out, I'm leaving because I did some thing to attract attention, corrected myself and admitted it was an inaccuracy and I'm still admitting it.
If someone doesn't know and they make a suggestion and it's wrong, they get flammed and I can see why people are reluctant to post. I've been a coder for quite awhile in various medium's and I don't know everything I'll admit that.
I also know that many of these types of webpages people post to and "never" get an answer, because they're not monitored or people don't take the time to pay-it-forward and help other's learn, and teach so other will follow.
I'm not leaving because I was called out. I'm leaving because I will never hear the end of, just like YOUR COMMENT>
-
Re: [Serious] Restricting access to user
Quote:
Originally Posted by
kleinma
Seeing who was paying attention in the nearly year old post you dug up?
I didnt' look at the date, my bad. I was looking for a solution that I'm currently working on. I did a search and haven't been on DaniWeb in a long time and didn't remember the date posting dates.
I again admit that I perfomed a no no boo boo, by posting that you can get OS information from a server side client and admitted my wrong doing.
I won't make the same mistake twice. I'll learn from it!
-
Re: [Serious] Restricting access to user
Quote:
Originally Posted by
soltec
I admitted I was wrong, and YET I still hear from you. That's why I left. There are too many people that are so quick to jump on someone, but not as many willing to help.
I think the reason people need the help, genuinely is because there aren't enough "good" resources out there. Dani Web helped me and I reciprocated in kind. I'm not leaving because I was called out, I'm leaving because I did some thing to attract attention, corrected myself and admitted it was an inaccuracy and I'm still admitting it.
If someone doesn't know and they make a suggestion and it's wrong, they get flammed and I can see why people are reluctant to post. I've been a coder for quite awhile in various medium's and I don't know everything I'll admit that.
I also know that many of these types of webpages people post to and "never" get an answer, because they're not monitored or people don't take the time to pay-it-forward and help other's learn, and teach so other will follow.
I'm not leaving because I was called out. I'm leaving because I will never hear the end of, just like YOUR COMMENT>
I think you need to get a thicker spine. Kleinma did not say a single rude thing to you. He told you that what you were saying was incorrect (so people don't attempt it or believe false information) and then pointed out that you also necro-posted and brought up a post from a year ago.
-
Re: [Serious] Restricting access to user
Quote:
Originally Posted by
kfcSmitty
I think you need to get a thicker spine. Kleinma did not say a single rude thing to you. He told you that what you were saying was incorrect (so people don't attempt it or believe false information) and then pointed out that you also necro-posted and brought up a post from a year ago.
Agreed. Now can we drop it?
-
Re: [Serious] Restricting access to user
I have been posting here for less than an hour and two people commented on my posting, constructively. I've seen other's post and not one person comments. Is it because no one knows, or is it because no one cares?
I keep getting replies on things I posted in 07 when I first signed up; go figure.
-
Re: [Serious] Restricting access to user
Quote:
Originally Posted by
soltec
I have been posting here for less than an hour and two people commented on my posting, constructively. I've seen other's post and not one person comments. Is it because no one knows, or is it because no one cares?
I keep getting replies on things I posted in 07 when I first signed up; go figure.
Typically a post will not get an answer for the following reasons:
1. The question is not clear
2. The user didn't bother to search the forums first
3. No one who has viewed it knows the answer
4. The people who do know the answer have not seen it
This is a volunteer based forum and not everyone checks every thread. I know, personally, I skip a lot of threads just based on the title. If the thread title isn't very specific, I will move onto a thread that catches my interest.
-
Re: [Serious] Restricting access to user
Quote:
Originally Posted by
kfcSmitty
Typically a post will not get an answer for the following reasons:
1. The question is not clear
2. The user didn't bother to search the forums first
3. No one who has viewed it knows the answer
4. The people who do know the answer have not seen it
This is a volunteer based forum and not everyone checks every thread. I know, personally, I skip a lot of threads just based on the title. If the thread title isn't very specific, I will move onto a thread that catches my interest.
5. It takes too much time to explain it or psuedo code it! or worse, validate and test the code for free.
that was my other one, the subject isn't clear and concise enough for an expert to have interest.