[geeklog-devel] About the forum spammer

[Tom Willett]

On 1/19/2005 5:09 PM, Blaine Lang wrote:

>Yeh - Thanks Tom :)
>Another nice addition.
>
>So ... are you up for another extension to query the IP's if there are 
>multiple links in the post?
>
>Or maybe we just reject posts with more then a set number of links :)
>
>Blaine
>
>----- Original Message ----- 
>From: "Dirk Haun" <dirk at haun-online.de>
>To: <geeklog-devel at lists.geeklog.net>
>Sent: Wednesday, January 19, 2005 4:02 PM
>Subject: Re: [geeklog-devel] About the forum spammer
>
>
>  
>
>>Here you go.
>>    
>>
>
>Thanks, Tom :-)
>
>But I guess line 44 in IP.Examine.class.php:
>
>    if ($val = $_SERVER['REMOTE_ADDR'])) {
>
>should really read
>
>    if ($val == $_SERVER['REMOTE_ADDR']) {
>
>i.e. add one '=', remove one ')'.
>
>
>Also, this seems to block by IP address. What I meant was that all the
>domains in the spam post resolve to a certain IP address. The spam post
>itself is sent from one of the hijacked PCs under the spammer's control,
>so blocking by their IP address won't help much in this case.
>
>It's still useful for other cases, so I'll probably be adding it to CVS
>anyway.
>
>bye, Dirk
>
>
>  
>
Ok here is one that will check the IP of the urls and reject based on 
the IP I had brush up on regex for this one.

-- 

Tom Willett
tomw at pigstye.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist8.pair.net/pipermail/geeklog-devel/attachments/20050120/8eb362a1/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Spamx.IPofURL.tar.gz
Type: application/x-gzip
Size: 1637 bytes
Desc: not available
URL: <https://pairlist8.pair.net/pipermail/geeklog-devel/attachments/20050120/8eb362a1/attachment.bin>