EN - Technical supportReal working anti spam


25.04.2012, 18:16 - Dr3dd2 - webSPELL newbie - 9 Posts
Hi guys

Even if i don't write at all in this forum i always read threads so i know that what i'm going to say is boring and has been asked millions of times. I know by heart all standard replies so please if possible don't stress me with the same copy/pasted messages. On Webspell we have a big situation: spam.

- Yes! I'm running the latest version of webspell
- Yes! I've installed all security fixes
- Yes! I tryied with tens of anti-spam modules
- Yes! Even recaptcha

The result is clear and simple. Spammers can spam and skip all these supposed-to-be anti-spam modules. Few days ago i finally decided to uninstall all those useless wannabe anti-spam modules since the result with or without them is the same (spam fest).

The question is simple: what can we do? Is there any official fix or workaround? I see a lot of persons posting links to unknown, untested or unofficial patch and modules. I'm tired to install tens of useless scripts! What's the one that is working for real?
 
26.04.2012, 12:28 - Getschonnik - webSPELL newbie - 76 Posts
Hey Dr3dd2,

the problem is simply that everyone would like to be rid of the spam, but nobody would do nothing for this. Our team has a free and convenient solution. The problem here is that while all screaming for a solution but no one wants to test this. (Beta on three websites).

With our solution replace the existing files and see if the filter helps or not.
100% security does not exist but we can filter up to 70% of spam. We maintain the filter. If anything is wrong contact us!

*With spam we know here the advertising spam.

Restriction:
- max. 3 links in a message/post
- max. ~1000 Words
- international chars are not supported (accent aigu-grave, tilde, zirkumflex, cedille)
- jpn/cn messages/post are marked as spam

If you're interested on this solution (beta) we want to send you a link for the files you need. Currently we adjusted for the webspell guestbook and forum but its easy to adjust it in another operations.

Regards... .

//update

If you not want to test it on your running system you can copy/paste your spam message into the textarea on this website. Click submit and see if the message is protected as spam or not.
antiSPAM.protection / Demo

To include it in your website you can get the files on the following url.
Hint: If you do that send us a message that we know that you use this add-on because if we change the asp.url to our TLD domain (faster) that we can inform you.

For: Guestbook and Forum (comments update soon..)
direct download

It's not perfect but a good first step.






[center] [url=http://www.Getschonnik.de]w w w . G e t s c h o n n i k . d e[/url] [url=https://www.facebook.com/ZNT.Dev]Visit us on facebook.[/url] [/center]

 
27.04.2012, 13:24 - Bmad - webSPELL newbie - 22 Posts
i had the same problem but sinds i installed member activation http://www.webspell.or...rum_topic&topic=33380 (german) i don't have troubles with spam anymore.
And make sure that when you post newsposts that you turn on "enable user comments" so that only members can reply saves aswell in the spam.

Greetz Bmad
 
27.04.2012, 15:06 - Getschonnik - webSPELL newbie - 76 Posts

It's not perfect but a good first step.


I think it is not user friendly. If a guest want to register on your website they do it because they want anything and want it after the registration and not after hours if the admin comes and activate him. Not all guests are SPAM users or bots. What is when a sponsor for a clan comes to sponsoring you but they must wait of you? But it is your decision what you want to use.

Regards... .

[center] [url=http://www.Getschonnik.de]w w w . G e t s c h o n n i k . d e[/url] [url=https://www.facebook.com/ZNT.Dev]Visit us on facebook.[/url] [/center]

 
27.04.2012, 17:28 - Dr3dd2 - webSPELL newbie - 9 Posts
Uhm i see...

I really appreciate your effort to develop custom modules to prevent spammers registering and posting on all our websites but as Getschonnik said they're not user-friendly at all. For sure they're all brillant workarounds but i we can't adopt them on websites. At the moment i've 7.641 registered users submitting tons of threads/posts and comments. I can't manually accept them to prevent them to write a maximum of X chars per message or again limit the number of links they can publish. Maybe it could be tolerable for small websites but not for med-big ones.

I have a question. I'm using Webspell from 2005 (first releases) and i always had this problem. Of course in past spam was very very limited because my website was really small but know spam is a pain in the a**. Is possible that from 2005 dev team of Webspell have never developed a more secure registration module or at least a massive-moderation tool to delete thousand of messages in one click? I'm manually deleting ONE-BY-ONE every single message form years. At least from 2011 i can use this crappy-but-useful tool to remove spam in one click...

http://www.virusgaming.net/extra/spamassassin.jpg

But come on! And also i'm still forced to manually delete threads and post and manually ban all spammers. We were forced to turn off our shoutbox because of massive spam. We all have a huge problem on Webspell but it seems to me that it has not been taken seriously by developers. Personally i don't want new functions on Webspell, i want a patch to fix this huge hole. Just think about it. I was forced to migrate my website on a more expensive hosting plan because of high loads on comments and posts tables on database due to spam botters (5AM with no user connected!). Who will ever use a CMS which needs you to rent a VPS because 90% of INSERT INTO are made by bots?
 
27.04.2012, 19:22 - HenningK - webSPELL lover - 1022 Posts
Dr3dd2 wrote:

Is possible that from 2005 dev team of Webspell have never developed a more secure registration module or at least a massive-moderation tool to delete thousand of messages in one click?

A more secure registration? What do you mean, there is already a captcha to prevent bots which is save enough. Keep in mind, that all spam on your page is done manually by real persons - no bots! That applies also on the registration process.
For your first problem there is already a mod somewhere on this forum..

Dr3dd2 wrote:

Personally i don't want new functions on Webspell, i want a patch to fix this huge hole

What "hole" are you talking about? That there is no protection against spam yet or the deleting function?
Prevent non-bot spam is very difficult. There are 100 mods/addons around the web for against spam but most of them are useless for this special case.
The only way is using a so-called "bayesian spam filter". The most famous of these is "Akismet". I made an adaption for this on webspell. It works well but there are some countries where the usage of akismet is not 100%-legal.
The webSPELL team itself - or Phil - is working on an own bayesian filter including database. But this takes also some time, so be patient. This is why webSPELL has this great community, where many people develop addons. zwinkern

regards

[URL]http://www.henningk.de[/URL] | no support for addons etc. via PN or IM.

 
29.04.2012, 06:13 - Dr3dd2 - webSPELL newbie - 9 Posts
HenningK it's not made by humans. After some time (a couple of years) spent deleting spam i know for sure that they're not humans.

- They start to spam always at the same exact time (hh:mm:ss)
- When they start spamming their links they do the same on other website made with Webspell i know
- They use a sort of necro-thread mode. They spam their messages bringing up all threads in the last page of the that board
- They register with the same exact string on database

It's not made by human. Anyway spam is everywhere on the web but on all other CMS it's not a big problem. Right now on the left i can see a pile of topics about spam and this is the OFFICIAL website! It's depressing and looks horrible for a CMS.

The webSPELL team itself - or Phil - is working on an own bayesian filter including database. But this takes also some time, so be patient


It sounds really really strange to me. Are they joking? lächeln Be patient? F-I-V-E years of spam and do we have to wait more? Anyway i understand that this is a free CMS and that i can't pretend anything but imo instead of releasing new exciting versions of Webspell they should fix big holes.


 
29.04.2012, 07:40 - derchris - Administrator - 1454 Posts
Dr3dd2 wrote:

It sounds really really strange to me. Are they joking? lächeln Be patient? F-I-V-E years of spam and do we have to wait more? Anyway i understand that this is a free CMS and that i can't pretend anything but imo instead of releasing new exciting versions of Webspell they should fix big holes.


There are no known holes, which will bypass the current user permission to write comments and/or forum threads/topics.
And if you had a spam problem for the last five years, then don't blame us.
There are several solutions available, and most of them don't even require much coding skills.
This CMS is what it is, a CMS. Spam protection was never part of it, and if it was only as an addon.


perl -e 'print $i=pack(c5,(41*2),sqrt(7056),(unpack(c,H)-2),oct(115),10);'

 
29.04.2012, 13:52 - Dr3dd2 - webSPELL newbie - 9 Posts
So if there are several solutions available why your own website (webspell.org) is full spam?
 
29.04.2012, 20:39 - LoRd - Moderator - 4519 Posts
show me the spam...

If you see me laughing, you better have a backup!

 
30.04.2012, 05:07 - derchris - Administrator - 1454 Posts
Dr3dd2 wrote:

So if there are several solutions available why your own website (webspell.org) is full spam?


Who said that we have implemented anything against spam on this site?

perl -e 'print $i=pack(c5,(41*2),sqrt(7056),(unpack(c,H)-2),oct(115),10);'

 
02.05.2012, 05:29 - Dr3dd2 - webSPELL newbie - 9 Posts
LoRd wrote:

show me the spam...

Uhm... ?

http://img232.imageshack.us/img232/3023/spamnh.jpg

Every single night it's full of spam on Webspell.org and of course also on my website (going to delete it now). No offense but i can't belive that with your 4345 posts and "Registered since 2007" you have never seen spam on Webspell.org or even on other websites based on this CMS. Probably i didn't understand something.

derchris wrote:

Dr3dd2 wrote:

So if there are several solutions available why your own website (webspell.org) is full spam?


Who said that we have implemented anything against spam on this site?


This is exactly what i'm saying! amüsiert You told me "There are several (unofficial) solutions available" but no one is working. As you said on Webspell there's nothing against spam and in fact it's full of spam. So we have:

a) Websites not using unofficial anti-spam addons like Webspell.org ---> SPAM 24/7/365
b) Websites using tens of unofficial anti-spam addons (or at least tryed to) like my website ---> SPAM 24/7/365

So, again, we all have the same problem. It doesn't matter if you are running or not unofficial addons, if you use the latest version of Webspell, if you are the owner of Webspell.org or whatever.com (...) we all have tons of spam in years. You (Webspell staff) should be the solution to this problem. If you keep ignoring this problem i think that many ppl will find (no offence, it's just logical) a different CMS-solution.
 
02.05.2012, 05:58 - Dr3dd2 - webSPELL newbie - 9 Posts
And if you keep saying that they're not bots but humans check this out: Webspell.org vs My website (right click to zoom).

http://img535.imageshack.us/img535/8813/samev.png

Same time, author, registration date, number of posts, message, title, flood (...) in short same everything. And again if you keep saying that there's no hole well take a look at these semi-abandoned Webspell websites where there's no one deleting spam.

http://wemake-it.de/in...hp?site=forum&board=3
http://www.unitedlegio...hp?site=forum&board=1
http://night-sports-ev...g.de/index.php?site=forum
http://night-sports-ev...hp?site=forum&board=1
http://www.venompball....hp?site=forum&board=1
http://www.patrick-zie...hp?site=forum&board=1
http://gamers.rs/index.php?site=forum&board=1
http://www.m3-gaming.c...hp?site=forum&board=1
http://shadowsofdarkne...hp?site=forum&board=1

And this is the best. Probably 25k posts of spam:
http://mw3headquarters.com/index.php?site=forum

All Webspell websites are suffering spam-bot attacks. The fact that you can't see spam in most famous websites based on Webspell doesn't mean that Webspell is cool, it means that there are persons like me and other admins who manually delete all spam every day so please take it serious.
 
02.05.2012, 17:43 - Desertdestroyer - webSPELL user - 431 Posts
Dont like it dont use it simple.
 
03.05.2012, 04:53 - Dr3dd2 - webSPELL newbie - 9 Posts
Don't like it? Don't post.

I'm trying to focus on the biggest problem of this CMS and if you don't care just walk away. I read a lot of comments like your and i simply hate it. There are tens of threads of people complaining about this problem and all i can see is flame, arrogance and bs like your. No one single answer. Minimize the problem is the way. What a strange community. Yeah "don't like it don't stay" i know the story. This is the answer to all problems of the world! "Don't like AIDS? Don't make love" Oh come on!
 
03.05.2012, 11:03 - blue.tiger - Administrator - 3188 Posts
We are currently working on a solution for the spam problem. At the moment our anti-spam implementation is in learning mode, so you can not see any effects.
 
04.05.2012, 02:27 - Dr3dd2 - webSPELL newbie - 9 Posts
Thank you <3