Page 1 of 1

Comments

Posted: Sun Jul 17, 2011 12:49 pm
by vickyg2003
Rob is there anything you can do to lockout comments by guests.

My extender has hundreds of comments about male enhancement products. from guests and I don't have the ability to delete comments.

https://www.hifi-remote.com/forums/dload ... le_id=9561


I assume this has something to do with the database crash earlier this month. I think they got greedy when inserting these comments.

Posted: Sun Jul 17, 2011 8:09 pm
by The Robman
wow, I hadn't noticed that loophole in the system before. let me see what I can do.

Posted: Sun Jul 17, 2011 8:19 pm
by The Robman
OK, I deleted all the spam, now I have to find out how to block it.

Posted: Sun Jul 17, 2011 9:04 pm
by The Robman
I found the problem, that one folder didn't have the permissions set correctly, which is my guests could post comments. They won't be able to any more.

Thanks for bringing it to my attention.

Posted: Mon Jul 18, 2011 5:03 am
by vickyg2003
Wow, they can sniff out any weakness.

Thanks for fixing that.

Posted: Mon Jul 18, 2011 5:33 am
by vickyg2003
Oh by the way, between the time that you deleted the spam and plugged the hole they were quite busy with the other file in that folder.

So there is more spam to be deleted. You might want to check to see if they are spamming any other folders.

Posted: Mon Jul 18, 2011 6:38 am
by The Robman
It was just the two files in that one extender folder because the settings were too weak on that folder. I deleted the spam from both files and then checked the settings on all the other folders and they're all good, so I think we're set.

Posted: Mon Jul 18, 2011 10:12 am
by vickyg2003
You have to wonder how hard they looked to find that hole!

Do you think this was the cause of that file system crash earlier this month?

Oh and btw that last spammer that I had put on the watch list, the guy that you spotted right off, has now gone to spam on all those other websites.

He joined many forums on one day, posted a reply a week later and then went back and entered the spam links this weekend. They are such sneaks!

Posted: Mon Jul 18, 2011 3:12 pm
by The Robman
The guest stuff is all automated, that's entered by a robot not a real person, so they just go around all of the forums that use a specific forum software (so they know the format) and they enter crap wherever possible. They would have tried to enter comments on every single file in the system, but it was just the 2 files in your extender folder that would let them do it.

I assume that the spammers who use a userid are real people, as their posts try to sound like they are related to the main thread. However, I assume they also have a robot that goes back and enters the spam links later.