malhuda/fictioneer
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases 112 Wiki Activity

Improve Spam protection #1

New Issue
Closed
opened 2023-01-21 08:36:35 +08:00 by Tetrakern · 1 comment
Tetrakern commented 2023-01-21 08:36:35 +08:00 (Migrated from github.com)
Copy Link

Currently, the spam protection is extremely simple (although surprisingly effective). Just a combination of limiting the number of links (can be set) and a client-side generated field (if enabled). Any bot not running JavaScript, which is the vast majority, automatically fails here. However, the field is static and could easily be fooled by more sophisticated spammers.

Anti-spam plugins should still work, so perhaps going crazy here is not necessary.

Possible Enhancements:

  • Randomized field value that must match (requires a session)
  • Hashcash (make spamming expensive)
  • Additional honeypots

Resources:

Currently, the spam protection is extremely simple (although surprisingly effective). Just a combination of limiting the number of links (can be set) and a [client-side generated field](https://davidwalsh.name/wordpress-comment-spam) (if enabled). Any bot not running JavaScript, which is the vast majority, automatically fails here. However, the field is static and could easily be fooled by more sophisticated spammers. Anti-spam plugins should still work, so perhaps going crazy here is not necessary. **Possible Enhancements:** * Randomized field value that must match (requires a session) * [Hashcash](http://www.hashcash.org/) (make spamming expensive) * Additional honeypots **Resources:** * Partial: [_comments_controller.php](https://github.com/Tetrakern/fictioneer/blob/main/includes/functions/comments/_comments_controller.php) * Option: `fictioneer_require_js_to_comment` * Action: `fictioneer_preprocess_comment`
Tetrakern commented 2024-05-11 22:05:12 +08:00 (Migrated from github.com)
Copy Link

Since there has not been any issue with spam yet that could not be dealt with, I'm closing this

Since there has not been any issue with spam yet that could not be dealt with, I'm closing this
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
Something isn't working
customization
Can be achieved with actions, filters, and some CSS.
documentation
Improvements or additions to documentation
duplicate
This issue or pull request already exists
enhancement
New feature or request
help wanted
Extra attention is needed
invalid
This doesn't seem right
question
Further information is requested
wontfix
This will not be worked on
No Label
enhancement
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: malhuda/fictioneer#1
No description provided.
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?