Problem with Guestbook

[HarterHans]

Hello @ all,

i have a problem with the Guestbook.
The last 2 weeks i got new entrys, something like this:

__________________________________________________
? ?? ??????? ??????? ????, ?????? ??? ????. ? ???? ???????? ????. ? ???? ?? ???? ????? ??? ????? ?????? ?????? ????????? ??? ??????? ?????? ?? ????. sidt8kij0inob.dyndns-free.com mo2i9joy7ssun.dyndns.org hiieoqom6sfix.dyn-o-saur.com ??? ???? ??????? ??????????. ??????? ??????? ? ?????? ?????. ? ?????, ?? ???? ????????. ??? ???? ???????? ???? ?? ?????. ??? ????????? ? ???????????. ? ?? ??????????? ?? ??????? ?????????! ???? ?????? ???? ???? ?????? ?????????. tuqgt3wejb0ki.selfip.net riw88vxos3iqa.dyn-o-saur.com herdg2desytvi.dnsalias.net ? ?????? ?????, ??????? ??? ??????. ??? ???? ???????????? ?????????! ????????? ????? ?? ???? 82 ????. ???? ???? ?????????? ???????????? ???? ?????. ??????, ????? ?? ? ???, ?? ? ??????? ?????? ?? ?????. ???? ?? ???? ????? ???????. ???? ??????? ??? ??? ?? ??????????? ? ?? ???????? ??????? ? ??????????. forqpfwokrcdi.dnsalias.net yajk6vzitz1xo.merseine.nu feiwhcuri4voy.merseine.nu ???????, ??? ?? ?????? ???????? ??????????? ? ???????????. ? ??????? ? ?????, ????? ??? ?????. ?? ??, ??? ?????? ????, ????? ????????? ?????? ??????. ??? ????? ? ???? ????? ??? ???? ???????? ????????, ???????? ? ??? ?????? ????? ? ??, ?????????, ??? ?? ?????? ?? ????. ?????????? ??? ? ????? ???????. ?? ? ??? ????? ????? ???? ????. xeyq3xjogqygi.gotdns.org zedwuikakzfri.dnsalias.net minwd9detr6hi.dyndns-free.com ??????, ? ???? ???? ??????? ?? ???. ?????, ?????? ????? ??????????, ??????? ???? ?? ? ?? ????? ????????, ????, ??? ?? ? ???? ??????. ? ??????? ??? ?????? ???????! ??? ?? ???????? ??????? ???????? ?????? ???????. ????????? ???? ???????? ????????? ? ??????, ???? ????????? ????????? ????. ???? ??? ?? ???????? ?? ?????? ?????, ?????. ?? ?????????, ???????? ??, ?? ???????? ??????????. puj688royi5hi.dyndns-free.com kol0e9vig8rjo.dyndns-free.com zaw5voxay92de.dyndns-free.com ???? ??? ??? ???????? ???????????? ? ?????? ??????? ????. ?? ? ??? ?? ??? ? ????? ?????? ??????? ? ???????, ??? ? ??. ??????, ? ????? ??? ??? ??? ????????. ??????? ???? ????? ????! ????? ???, ???? ?? ?? ?????? ? ????. ? ?? ?????????, ??? ??? ???? ??? ??????? ???? ???? ????? ????????? ? ?????? ???????? ? ???? ????????? ? ??? ??? ????????. ?? ???? ???????, 007. pe0a1hery6pah.selfip.net lamm6hjig02yo.gotdns.org kol0e9vig8rjo.dyndns-free.com ????? ??? ??? ?????????. ? ???????? ?????? ????????. ???????? ?????????? ?? ??????, ???? ????. ???? ???? ??????? ?? ??????! ?????, ?? ?? ??? ??????? ??? ??????? ??????, ???? ?? ??????? ???? ???????, ??????, ?????? ?????? ??? ???? ???? ??????? ???????? ??????. ?????????? ????? ? ??????? ? ???????????. ????? ????????? ? ?????? ???, ???????? ??? ????? ? ???????? ??? ?? ?????. zon2ygfib73gi.dyndns.org tocu0rawchkom.dyn-o-saur.com zoyx0ftociqhu.dnsalias.net ???? ???? ??????????? ??? ???????????. ??? ??????????? ???????????? ???? ???????? ????????????? ??????? ????????? ??????????? ?? ?????????????? ????????. ? ????? ? ????? ??, ??? ????. ??? ????????? ????? ?????????. ? ??? ???? ????? ???????? ?????, ????? ? ????????? ????? ? ?, ????????, ?? ????? ???????! ??? ??? ???????, ? ?? ???? ??????? ????????? ??????? ?? ? ???? ?????????? ?????? ????????? ?????! ? ?????? ?????????? ??????! ???? ?? ???? ???????? ?????????? ?????? ??? ?????????, ??? ? ?? ????????, ? ?? ???? ????? ????? ?? ???????. ????????, ????? ?????? ???? ???? ??????? ?????????! ????????? ??? ?? ?????????? ????? ????? ???????. sobb99rebmmgo.merseine.nu fuon3roxxdwep.dyndns-free.com jethh3debsayo.gotdns.org ? ???? ???? ????????? ???????. ????? ?? ??????? ???? ??????. ???? ??????????? ???, ????????? ?????? ????????????? ? ????????????, ???????? ????? ????????? ?? ????????????? ????????? ????????? ????????. ??? ??????????? ? ?? ??? ?????? ????? ????????? ???? ?? ?????. ???, ??????, ??? ????? ??????. ??? ??????? ?? ????????? ??????? ????? ??. hatackofvslem.dyndns-free.com bo48xropmisiw.dyn-o-saur.com tomuvupoxa3qe.merseine.nu ? ??? ???? ??? ??????? ?????. ? ?? ??????, ? ??????????? ???? ????? ?? ?????. ???? ?? ????? ??????????????, ?????? ???? ?????, ??? ????? ???? ????? ?????? ?? ????????.
_________________________________________________

This is not a problem, "i can turn approve entry" on.
The thing is the plugin "Gästebuch-Seitenleiste" shows the not approved entrys...

So what can i do?

Thx,

Hans

Serendipity 1.5.5 und PHP 5.2.9
Guestbook 3.20
Gästebuch-Seitenleiste 1.12

[Timbalu]

Hi Hans

Could you please check if you have a config variable dbversion with the value 3.0 in your serendipity_config mysql table?
The table field name looks like this

Code: Select all

serendipity_event_guestbook:c7356v9573f43fb3dzl7f5kdc3d6ce7e/dbversion

Please check if the guestbook table entries have an approved and timestamp field, also.

If you can answer these questions with yes:
Just make a dump via PhpMyAdmin (replace '{$serendipity['dbPrefix']}' with your 'Prefix_'

Code: Select all

SELECT timestamp, name, homepage, email, approved, body FROM {$serendipity['dbPrefix']}guestbook WHERE approved=1 ORDER BY timestamp DESC LIMIT 3

What do you get?

And my last question:
Do these SPAM entries happen with activated captchas?

Ian

[HarterHans]

In the serendipity_config i have an entry like the one you mention,
timestamp and approved ia also there.

I got only 3 entrys...
Ok, i wait till tomorrow then i will have some Spam, then i will redo the Test.

But i have some additional informations for you.
When i got Spam, i can see the Spam in "Gästebuch-Seitenleiste" you know the Side-Plugin.
When i go to the guestbook administration, i see the Spam entry not in the approved list.
The Spam is not approved but it shows up in the "Gästebuch-Seitenleiste".
I think its a Bug.

Another Bug is, when the Spam entry happend, i got an empty Email:

The User XXX send you:

Nothing...

Tomorrow i will give you more informations



Yes the SPAM entrys happens with activated captchas!

Hans

[Timbalu]

Ok, I see what happend...
Please copy this attached sidebar plugin file into your guestbook plugin folder, go to the config of the sidebar guestbook plugin and set show approved to true. Then everything should be alright.

If you want to test it with version 3.21 just replace the whole folder with the zipped one. This may be working better to prevent the bots from entering your form. If they are still coming in, you could additionally give a chance to the bayes plugin, but I don't know if this workes together with the guestbook. It will also fix the email thing, hopefully.

Please give feedback, so I can relase this version if everything workes fine.

Ian

[*]reedit: Downloaders, please wait until it is released in spartacus

[HarterHans]

Thanks for your help,

i have installed 3.21.
Everything looks fine.
Until now no Spam Attack, but i will tell you, when it happend.

Hans