Not signed in (Sign In)

Vanilla 1.1.10 is a product of Lussumo. More Information: Documentation, Community Support.

    •  
      CommentAuthorsilverwing
    • CommentTimeMay 6th 2006
     
    I'm thinking about putting plogger on my site and a friends site, but the way comments work it seems as if it's just a spam target. (And yes, I definately want comments enabled!)

    So is it a problem? Any thoughts on incorporating Akismet http://akismet.com/ or Bad Behavior?

    silverwing
    •  
      CommentAuthormike
    • CommentTimeMay 7th 2006
     
    I haven't gotten a single peice of spam on any of my Plogger installations in over a year, but this could probably be attributed to the fact that Plogger is not really that popular compared to some of the better known CMS systems.

    It is possible though, and I'm sure as Plogger grows in popularity this may become a problem. Integrating a spam filtering solution is not currently on the roadmap, but may materialize if the need presents itself.
    •  
      CommentAuthorgangavalli
    • CommentTimeMay 8th 2006
     
    yes, no spam yet. but a firewall script is important. it would be very bad to see on one fine day that all plogger users start getting comment spam because some useless idiot finds how to spam plogger galleries finally and make money.
    •  
      CommentAuthormike
    • CommentTimeMay 9th 2006
     
    We have put in place basic comment moderation in version 3, but I fear this will be insufficient if the spammers really get going... maybe time to consider a stronger solution.
    • CommentAuthoroats
    • CommentTimeJun 22nd 2006
     
    i'm getting spam like crazy in my plogger, and the link to the plogger isn't even a very prominant one. i'm about to put together my own simple filter in plogger which will filter out spam wil common words, like "viagra" and whatnot.
    • CommentAuthorskeeboo
    • CommentTimeJun 25th 2006 edited
     
    I'm also getting lots of "viagra" spam on my installations. It seems limited to certain images though and not generally across the board. I wonder if that means someone is using some sort of script.

    Moderation will be a nice feature as I'd rather approve something before it goes live on the site. But yes, it can be annoying if you're getting a ton of spam.

    oats, please share your solution if its a success on your site.
    • CommentAuthoroats
    • CommentTimeJul 4th 2006 edited
     
    sure, here is my solution, works fantastic! like i said, its very simple... edit the plog-functions.php file, then search for this text:


    if (empty($author)) {
    return array("errors" => "Your comment did not post! Please fill the required fields.");
    };


    AFTER this text, insert the following:

    // SDC - check if the message contains common SPAM words.
    if ( stristr($comment,'xanax')
    || stristr($comment,'tramadol')
    || stristr($comment,'phentermine')
    || stristr($comment,'levitra')
    || stristr($comment,'soma')
    || stristr($comment,'ultram')
    || stristr($comment,'viagra')
    || stristr($comment,'enzyte')
    || stristr($comment,'cialis')
    || stristr($comment,'meridia')
    || stristr($comment,'ativan')
    || stristr($comment,'vicerex')
    || stristr($comment,'prozac')
    || stristr($comment,'diazepam')
    || stristr($comment,'valium')
    || stristr($comment,'hydrocodone')
    || stristr($comment,'ambien')
    )
    {
    return array("errors" => "<h1><font size='24pt'>It appears that you are a <font color=red><i>SPAMMER</i></font>. Your posts are not welcome here. Please make a quick buck elsewhere.</font></h1>");
    }



    thats it! hopefully someone can find it useful... if you have improvements, let me know! also, i have added additional words as more spammers get through... some of the words would not be rated PG, so I didn't bother to post them here,but you get the idea.
    •  
      CommentAuthormike
    • CommentTimeJul 5th 2006
     
    Nice =)
    • CommentAuthorfp
    • CommentTimeSep 28th 2006 edited
     
    Yes, I'm have a *massive* problem with spam comments on my plogger right now. I've tried blocking terms but a manual blacklist obviously will never work. Integration with existing spam filters/plugins is the only way. Why reinvent the wheel?

    Right now I end up deleting several thousand comments a day. It seems there is no simple way to just turn off comments, believe it or not. And the admin interface only allows you to select 50 at a time so if you have a popular site and you are not comfortable hacking the back end to keep it free of abuse, plogger is in fact a spam target.
    •  
      CommentAuthormike
    • CommentTimeSep 28th 2006 edited
     
    It seems there is no simple way to just turn off comments, believe it or not.


    Except for the "allow user comments" checkbox in the options menu, right?
    • CommentAuthorfp
    • CommentTimeOct 2nd 2006
     
    "Except for the "allow user comments" checkbox in the options menu, right?"

    Right. You have the non-option of either no comments, or thousands of spam messages to delete each day.

    Here are the normal "simple" methods that turn off spam comments without disabling all comments:
    1) moderated comments
    2) authenticated comments
    3) turing test (human) comments (although this is increasing useless as spammers hire humans to type the tests for them)
    4) spam filtered comments
    • CommentAuthorjb
    • CommentTimeJan 12th 2007 edited
     
    I implemented oats' temporary fix but also decided that I would like to have a more direct way to delete spam comments all at once rather than going through each collection/album/picture via the manage tab. So I created a new tab called comments by adding the following line to the display function in the admin/plog-globals.php file:

    $tabs['comments'] = array('url' => 'plog-comments.php','caption' => 'Comments');

    Then I created a file called plog-comments.php in the admin directory that has the following code
    <?php
    require("plog-globals.php");
    require_once("../plog-load_config.php");
    require_once("plog-admin-functions.php");

    $comments = $_POST["comments"];

    $output = '';
    if (isset($_POST["submit"])) {
    for ($i=0; $i<=$_POST["numcomments"]; $i++) {
    if ($comments[$i]) {
    $query = "DELETE FROM ".$TABLE_PREFIX."comments WHERE id=".$i;
    //echo $query . "<br>";
    $result = mysql_query($query) or die("Some error occurred.");
    $comments[$i]="";
    }
    }
    $output .= '<p class="actions">Comments have been deleted.</p>';
    }

    $date_formats = array(
    "n.j.Y",
    "j.n.Y",
    "F j, Y",
    "m.d.y",
    "Ymd",
    "j-m-y",
    "D M j Y");


    $i = 0;
    $output .= '
    <h1>Manage Comments</h1>
    <form action="'.$_SERVER["PHP_SELF"].'" method="post">
    <div id="comments_section">
    <table style="width:550px;text-align:left;font:georgia">
    <tr style="background-color:#E8EBF0;">
    <td style="border-bottom:1px solid grey; border-top:1px solid grey"><strong>delete</strong></td>
    <td style="border-bottom:1px solid grey; border-top:1px solid grey"><strong>author</strong></td>
    <td style="border-bottom:1px solid grey; border-top:1px solid grey"><strong>email</strong></td>
    <td style="border-bottom:1px solid grey; border-top:1px solid grey"><strong>url</strong></td>
    <td style="border-bottom:1px solid grey; border-top:1px solid grey"><strong>date</strong></td>
    <td style="border-bottom:1px solid grey; border-top:1px solid grey"><strong>comment</strong></td>
    </tr>';

    $comments_array = array();
    $query = "SELECT * FROM `".$TABLE_PREFIX."comments`";
    $result = run_query($query);
    while ($row = mysql_fetch_array($result)) {
    $i++;
    if ($row["approved"]==1) {
    if ($i % 2 == 1) {
    $output .= '<tr style="background-color:#eee">';
    } else {
    $output .= '<tr>';
    }
    ($comments[$i]) ? $checked = "checked" : $checked = "";
    $output .= '
    <td><input type="checkbox" name="comments['.$row["id"].']" value="1" '.$checked.' /></td>
    <td>'.$row["author"].'</td>
    <td>'.$row["email"].'</td>
    <td>'.substr($row["url"],0,25).'</td>
    <td>'.$row["date"].'</td>
    <td>'.$row["comment"].'</td>
    </tr>';
    $numcomments = $row["id"];
    }
    }

    $output .= '
    <tr><td colspan="6">
    <input type="hidden" name="numcomments" value="'.$numcomments.'" />
    <input class="submit" type="submit" name="submit" value="Delete Selected Comments" />
    </td></tr>
    </table>

    </div>';

    display($output, "comments");
    ?>


    That's just a quick stab at it and it could no doubt use some improvement, but it seems to work so far so maybe it will help some others as well...
    • CommentAuthorZappu
    • CommentTimeJan 16th 2007 edited
     
    Just written a small javascript code to prevent a bit more for spamming the comments at plogger, maybe it will help the one or other as well

    Changes are made to gallery.php
    find line ~1050 to apply them to the comment form there.


    unset($_SESSION['comment_post_error']);
    };

    $output .= '
    <script>
    <!-- Begin
    function getCaptcha() {
    form.captcha_hidden.value = form.comment.value.length;
    }

    function check_captcha() {
    if (form.captcha_number.value != form.captcha_hidden.value) {
    alert("Please push the Get-Captcha Button once and enter the given number into the text field to the right of the button");
    return false;
    }
    else { return true;}
    }
    // End -->
    </script>

    <a name="comment-post"></a><h2 class="comment-heading">Post a comment:</h2>
    '.$error_message.'
    <form action="' . $config["baseurl"] . 'plog-comment.php" method="post" id="commentform" name="form" onsubmit="return check_captcha()">

    .....
    .....
    ....
    <label for="comment">Your Comment</label>
    <br /><textarea name="comment" id="comment" cols="70" rows="4" tabindex="4" onBlur="getCaptcha()"></textarea>
    </p>
    <p>
    <label for="captcha_number">Click the captcha button before you submit your coment to enter the captcha code</label>
    <input type="hidden" name="captcha_hidden" value="2222">
    <input type="text" name="captcha_number" size="5" maxlength="10">&nbsp;&nbsp;<input type="button" value="Get-Captcha Code" name="captcha_get" onClick="alert('Please enter the number below into the Captcha Filed to the rightnnt'+captcha_hidden.value)">
    </p>
    <p>
    <input class="submit" name="submit" type="submit" tabindex="5" value="Post Comment!" />
    </p>
    </form>';


    If somebody could make this also for php it would be much better in the case the user has not JavaScript enabled
    Zappu
    • CommentAuthordavid2
    • CommentTimeNov 19th 2007
     
    Here are some lines I added to oats code (above, Jul 4 2006) based on spam I have been getting at the rate of a couple hundred a day

    || stristr($comment,'chasemastercard')
    || stristr($comment,'instantbulletin')
    || stristr($comment,'spazioblog')
    || stristr($comment,'harrypotterbook')
    || stristr($comment,'forumsvibe')
    || stristr($comment,'cartierreplica')
    || stristr($comment,'Betty Crocker Cookbook')
    || stristr($comment,'ontheinter')
    || stristr($comment,'creditcardconsolidationloan')
    || stristr($comment,'phpbbnow')
    || stristr($comment,'forum66')
    || stristr($comment,'chasecreditcardonline')

    And then, I figured instead of beating around the bush, I also added this:

    || stristr($comment,'http')
    || stristr($comment,'url')

    We'll see how it works.

    -Dave
    • CommentAuthorDrive002
    • CommentTimeJun 9th 2008
     
    Hey jb, which version of Plogger are you using?
    I tried to look for the "display function in the admin/plog-globals.php file"
    to insert the code:
    $tabs['comments'] = array('url' => 'plog-comments.php','caption' => 'Comments');

    But did not find anything...
    I have more than 1000 pages of spam to delete and brute force is simply not attractive =)

    Thanks for your help.

    Cheerio
    •  
      CommentAuthorsidtheduck
    • CommentTimeJun 9th 2008
     
    Drive002,

    Can you not just delete the spam comments under the "Feedback" tab? You should be able to check all the comments you want and click the "Delete Checked" button and they should be deleted (I believe). I think jb's code is pretty much included under the "Feedback" tab now.
    • CommentAuthorDrive002
    • CommentTimeJun 11th 2008
     
    Oh, I thought jb had an even more powerful plugin...
    I did the whole invert selection/delete thing a couple of times but I was just not particularly motivated to do it for the 1000 pages (literally) of spam that I have at the moment. Thanks anyway =)
    • CommentAuthorDrive002
    • CommentTimeJun 11th 2008 edited
     
    Is there a way to increase the number of displayed messages on the feedback tab in the Plogger admin console?
    Lets say, increase the maximum entries per page from 50 to 500 for instance?
    •  
      CommentAuthorsidtheduck
    • CommentTimeJun 11th 2008
     
    Posted By: Drive002Is there a way to increase the number of displayed messages on the feedback tab in the Plogger admin console?
    Lets say, increase the maximum entries per page from 50 to 500 for instance?
    Sure you can. Just open 'Plogger/admin/plog-functions.php' and look for the following code:$possible_values = array("5"=>5, "10"=>10, "20"=>20, "50"=>50);Then add any values you want:$possible_values = array("5"=>5, "10"=>10, "20"=>20, "50"=>50, "100"=>100, "250"=>250, "500"=>500);

    And if you want the default something other than 20, find the following code further down:if (!isset($_SESSION['entries_per_page'])) $_SESSION['entries_per_page'] = 20;and change it to equal whatever you want for the defaults.
    • CommentAuthorDrive002
    • CommentTimeJun 12th 2008
     
    Awesome! Thanks...
    In my version of Plogger the file is actually at admin/plog-feedback.php
    However, when I go over 400 entries per page, I get a server error:

    " Request-URI Too Large
    The requested URL's length exceeds the capacity limit for this server.
    request failed: URI too long"

    So I had to limit the number to 350 =)