> Can't you add a form field hidden with CSS, labeled "do not fill this out",
> that Trac checks for and discards the post if it has value? Spambots almost
> always fill out every field they can find, and this sort of spam confirms
> it. Most of the users will not even see the field, while non-sighted users
> will be warned against it by its label.
>
> Also, no human will ever post a comment with tens of links inside with the
> same text (or href). I don't see why this spam pattern is not checked for
> and blocked.

We used to do exactly that.  But the thing is, patches *do* contain
heaps of links, especially when they include an html document:

<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd";>
<html xmlns="http://www.w3.org/1999/xhtml"; xml:lang="en-US" lang="en-US">
<head profile="http://www.w3.org/2000/08/w3c-synd/#";><meta
http-equiv="Content-Type" content="text/html; charset=utf-8" />

We do have filters in place which blocks a bunch of spam.  The reality
is, everything you do to block spam increases the number of false
positives.  We're going to have to require logins, there's no way
around it.

-- 
Cheers

Koz

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Ruby 
on Rails: Core" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/rubyonrails-core
-~----------~----~----~----~------~----~------~--~---

Reply via email to