Re: [PHP-DEV] Spammer on Bugs page

2004-07-31 Thread Derick Rethans
On Thu, 29 Jul 2004, Jakub Vrana wrote: Derick Rethans wrote: Perhaps limiting the number of bug report by IP per day and/or limiting the number of bugs with the same words should be implemented. I agree. No one likes Write here the text from image. IPs can be easily spoofed; we want a

Re: [PHP-DEV] Spammer on Bugs page

2004-07-29 Thread Jakub Vrana
Derick Rethans wrote: Perhaps limiting the number of bug report by IP per day and/or limiting the number of bugs with the same words should be implemented. I agree. No one likes Write here the text from image. IPs can be easily spoofed; we want a turing test. Will you agree with this

Re: [PHP-DEV] Spammer on Bugs page

2004-07-21 Thread Jakub Vrana
Olivier Hill wrote: Perhaps limiting the number of bug report by IP per day and/or limiting the number of bugs with the same words should be implemented. I agree. No one likes Write here the text from image. Jakub Vrana -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe,

Re: [PHP-DEV] Spammer on Bugs page

2004-07-21 Thread Paul G
- Original Message - From: Jakub Vrana [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, July 21, 2004 5:17 AM Subject: Re: [PHP-DEV] Spammer on Bugs page Olivier Hill wrote: Perhaps limiting the number of bug report by IP per day and/or limiting the number of bugs

Re: [PHP-DEV] Spammer on Bugs page

2004-07-21 Thread Derick Rethans
On Wed, 21 Jul 2004, Jakub Vrana wrote: Olivier Hill wrote: Perhaps limiting the number of bug report by IP per day and/or limiting the number of bugs with the same words should be implemented. I agree. No one likes Write here the text from image. IPs can be easily spoofed; we want a

[PHP-DEV] Spammer on Bugs page

2004-07-20 Thread Uwe Schindler
There is some spammer on the bugs page who updates all bugs and adds a new comment to every bug with a URL to a porn page. What can we do? My mailbox gets fuller and fuller... - Uwe Schindler [EMAIL PROTECTED] - http://www.php.net NSAPI SAPI developer Erlangen, Germany -- PHP Internals -

Re: [PHP-DEV] Spammer on Bugs page

2004-07-20 Thread Jason Garber
Hello, Perhaps we should implement one of the read this obscure image and type the number into this text box scheme into all the bug post and update forms? -- Best regards, Jasonmailto:[EMAIL PROTECTED] Tuesday, July 20, 2004, 11:57:25 AM, you wrote: US

Re: [PHP-DEV] Spammer on Bugs page

2004-07-20 Thread Daniel Convissor
On Tue, Jul 20, 2004 at 12:53:08PM -0400, Jason Garber wrote: Perhaps we should implement one of the read this obscure image and type the number into this text box scheme into all the bug post and update forms? I'm in the middle of making a quick and dirty CAPTCHA routine for the bug

Re: [PHP-DEV] Spammer on Bugs page

2004-07-20 Thread Derick Rethans
On Tue, 20 Jul 2004, Daniel Convissor wrote: On Tue, Jul 20, 2004 at 12:53:08PM -0400, Jason Garber wrote: Perhaps we should implement one of the read this obscure image and type the number into this text box scheme into all the bug post and update forms? I'm in the middle of

Re: [PHP-DEV] Spammer on Bugs page

2004-07-20 Thread Daniel Convissor
On Tue, Jul 20, 2004 at 07:47:41PM +0200, Derick Rethans wrote: On Tue, 20 Jul 2004, Daniel Convissor wrote: I'm in the middle of making a quick and dirty CAPTCHA routine for the bug form on pear.php.net. I'll post the diff when it's ready. We'll also need something like that for cvs

Re: [PHP-DEV] Spammer on Bugs page

2004-07-20 Thread Wez Furlong
I know this is just a quick measure, but isn't the whole idea to not emit the code in plain text on the form? It's really very easy to scrape it out. --Wez. On Tue, 20 Jul 2004 14:32:44 -0400, Daniel Convissor [EMAIL PROTECTED] wrote: It's pretty crude. All it does is set a session var with

Re: [PHP-DEV] Spammer on Bugs page

2004-07-20 Thread Daniel Convissor
Hi Wez: On Tue, Jul 20, 2004 at 08:17:04PM +0100, Wez Furlong wrote: I know this is just a quick measure, but isn't the whole idea to not emit the code in plain text on the form? It's really very easy to scrape it out. Yes, it is simple to scrape. But, I suspect that the problem is coming

Re: [PHP-DEV] Spammer on Bugs page

2004-07-20 Thread Daniel Convissor
On Tue, Jul 20, 2004 at 03:38:26PM -0400, Daniel Convissor wrote: Hmm... guess it would be a good idea to delete the CAPTCHA value from the session data after the form is submitted to avoid multiple submissions using the same value. Done. Here are the complete diffs...

Re: [PHP-DEV] Spammer on Bugs page

2004-07-20 Thread Derick Rethans
On Tue, 20 Jul 2004, Daniel Convissor wrote: Hi Wez: On Tue, Jul 20, 2004 at 08:17:04PM +0100, Wez Furlong wrote: I know this is just a quick measure, but isn't the whole idea to not emit the code in plain text on the form? It's really very easy to scrape it out. Yes, it is simple to

Re: [PHP-DEV] Spammer on Bugs page

2004-07-20 Thread Daniel Convissor
On Tue, Jul 20, 2004 at 10:17:59PM +0200, Derick Rethans wrote: You're wrong, for each comment there were four requests done with curl... Crap. Thanks for the heads up. Back to the drawing board... --Dan -- T H E A N A L Y S I S A N D S O L U T I O N S C O M P A N Y

Re: [PHP-DEV] Spammer on Bugs page

2004-07-20 Thread Jacques Marneweck
Hi Daniel, Take a look over @ Colin Viebrock's Blog and see how his turing test works (http://www.viebrock.ca/code/11/email-protection) and I posted to you earlier how to do sound turing links. Hope this enspires you. Regards --jm On Tue, 20 Jul 2004 16:28:06 -0400, Daniel Convissor [EMAIL

Re: [PHP-DEV] Spammer on Bugs page

2004-07-20 Thread Jeremy Johnstone
On Tuesday 20 July 2004 04:46 pm, Jacques Marneweck wrote: Hi Daniel, Take a look over @ Colin Viebrock's Blog and see how his turing test works (http://www.viebrock.ca/code/11/email-protection) and I posted to you earlier how to do sound turing links. I was gonna hack a quick image

Re: [PHP-DEV] Spammer on Bugs page

2004-07-20 Thread Olivier Hill
Jeremy Johnstone wrote: I was gonna hack a quick image generation script together, but the URL you gave seems to work fine already. The links directly to the relevant code are: And if you follow the link at the end of the page, you should read some reasons why Turing protection is not a good