[geeklog-devel] Spam, spam, bacon, eggs, and spam

[Tom Willett]

On 2/9/2005 4:14 PM, Dirk Haun wrote:

>Our special "friend" continues to flood geeklog.info with trackback spam.
>A few of them went through since he now also seems to start using HTML
>entities to obfuscate his posts:
>
>  
>
>>&#111;nl&#105;n&#101; p&#111;k&#101;r</a> von &
>>#111;nl&#105;n&#101; p&#111;k&#101;r<br>
>>Please visit some information in the field of online
>>poker poker party poker
>>    
>>
>
>Tom, would you consider this a feature request? ;-)
>
>  
>
Its actually pretty easy to get around this.  A minor change will need 
to be made in three files:

All current cvs:

Blacklist.Examine.class.php
Change line 44 from
if (preg_match("#$val#", $comment)) {
to
if (preg_match("#$val#", html_entity_decode($comment))) {

IPofUrl.Examine.class.php
change line 41 from
$num = preg_match_all("#{$regx}#",$comment,$urls);
to
$num = preg_match_all("#{$regx}#",html_entity_decode($comment),$urls);

MTBlackList.Examine.class.php
change line 47 from
if (@preg_match("#$val#", $comment)) {
to
if (@preg_match("#$val#", html_entity_decode($comment))) {

-- 

Tom Willett
tomw at pigstye.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist8.pair.net/pipermail/geeklog-devel/attachments/20050210/26b93a2b/attachment.html>