[geeklog-devel] Spam, spam, bacon, eggs, and spam

Tony Bibbs tony at tonybibbs.com
Thu Feb 10 14:19:06 EST 2005


Just harder to get at.  In one case we clearly state our intentions for 
all to see.  The other way we force these yahoo's to lift the hood and 
figure it out on their own.

--Tony

Tom Willett wrote:

> On 2/10/2005 9:30 AM, Tony Bibbs wrote:
>
>> Makes me wonder if we shouldn't have a mailing list for 
>> developer-only spam discussions where strategy and stuff can be 
>> discuss less openly. Just a thought.
>>
>> --Tony
>>
>> Tom Willett wrote:
>>
>>> On 2/9/2005 4:14 PM, Dirk Haun wrote:
>>>
>>>> Our special "friend" continues to flood geeklog.info with trackback 
>>>> spam.
>>>> A few of them went through since he now also seems to start using HTML
>>>> entities to obfuscate his posts:
>>>>
>>>>  
>>>>
>>>>> &#111;nl&#105;n&#101; p&#111;k&#101;r</a> von 
>>>>> &
>>>>> #111;nl&#105;n&#101; p&#111;k&#101;r<br>
>>>>> Please visit some information in the field of online
>>>>> poker poker party poker
>>>>>   
>>>>
>>>>
>>>>
>>>> Tom, would you consider this a feature request? ;-)
>>>>
>>>>  
>>>>
>>> Its actually pretty easy to get around this.  A minor change will 
>>> need to be made in three files:
>>>
>>> All current cvs:
>>>
>>> Blacklist.Examine.class.php
>>> Change line 44 from
>>> if (preg_match("#$val#", $comment)) {
>>> to
>>> if (preg_match("#$val#", html_entity_decode($comment))) {
>>>
>>> IPofUrl.Examine.class.php
>>> change line 41 from
>>> $num = preg_match_all("#{$regx}#",$comment,$urls);
>>> to
>>> $num = preg_match_all("#{$regx}#",html_entity_decode($comment),$urls);
>>>
>>> MTBlackList.Examine.class.php
>>> change line 47 from
>>> if (@preg_match("#$val#", $comment)) {
>>> to
>>> if (@preg_match("#$val#", html_entity_decode($comment))) {
>>>
>>> -- 
>>>
>>> Tom Willett
>>> tomw at pigstye.net
>>>  
>>>
>>
>> _______________________________________________
>> geeklog-devel mailing list
>> geeklog-devel at lists.geeklog.net
>> http://lists.geeklog.net/listinfo/geeklog-devel
>
>
> Would it make any difference if cvs is publically available?
>




More information about the geeklog-devel mailing list