Rob McEwen (PowerView Systems) wrote:
Create the rule you mentioned, then create another rule for plan old "advil"
...
But make this additional rule **subtract** points... either the same or a little less than the amount of points added by the obfuscation-catching rule, depending on whether you want to leave a little bit of score in there for the correctly spelled instances or cancel it out altogether.
That runs the risk that someone will include both the target word and advil in a message. A better solution is to use negative lookaheads. I'm not familiar with them myself, but I'm pretty sure you can find examples in either the base SA rules or some of the SARE rules. Lookahead/lookbehind in regular expressions: http://www.regular-expressions.info/lookaround.html Incidentally, this is the only legit .info site I can think of. I'm sure there's at least one other out there somewhere... -- Kelson Vibber SpeedGate Communications <www.speed.net>
