Captcha (even stronger ones) not secure enough`?

Random stuff about serendipity. Discussion, Questions, Paraphernalia.
Post Reply
jaal
Regular
Posts: 63
Joined: Thu Oct 26, 2006 2:48 pm
Location: Guetersloh, Germany
Contact:

Captcha (even stronger ones) not secure enough`?

Post by jaal »

Hi,

is it possible that the captchas have been "solved" by the spammers? (Like the gmail or hotmail ones...)

I'm receiving more and more spam in my blogs, even if I have enabled stronger cpatchas.

Jan
sonichouse
Regular
Posts: 196
Joined: Sun May 11, 2008 2:53 am
Contact:

Post by sonichouse »

Are they supplying the correct captcha on submit ?

Have you tried using recaptcha- this is quite strong ?

Using the Spam Protector plugin I validate the IP of the poster against known spammers using Akismet.
Steve is occasionally blogging here
jaal
Regular
Posts: 63
Joined: Thu Oct 26, 2006 2:48 pm
Location: Guetersloh, Germany
Contact:

Post by jaal »

Mhm... I grabbed my linux computer and checked my blog:
http://photoblog.janalbrecht.de/archive ... l#comments

It seems that the captchas have been totally gone... Any idead why this could happen? Even recaptcha didn't solved the problem.-..
kleinerChemiker
Regular
Posts: 765
Joined: Tue Oct 17, 2006 2:36 pm
Location: Vienna/Austria
Contact:

Post by kleinerChemiker »

are you shure, you have activated them?
jaal
Regular
Posts: 63
Joined: Thu Oct 26, 2006 2:48 pm
Location: Guetersloh, Germany
Contact:

Post by jaal »

Yes, I am. But only if there isn't any other activation than in the SPAM plugin.
garvinhicking
Core Developer
Posts: 30022
Joined: Tue Sep 16, 2003 9:45 pm
Location: Cologne, Germany
Contact:

Post by garvinhicking »

Hi!

Are you sure you are getting COMMENT spam, and not TRACKBACK spam?

For trackbacks, Captchas cannot be used.

Regards,
Garvin
# Garvin Hicking (s9y Developer)
# Did I help you? Consider making me happy: http://wishes.garv.in/
# or use my PayPal account "paypal {at} supergarv (dot) de"
# My "other" hobby: http://flickr.garv.in/
jaal
Regular
Posts: 63
Joined: Thu Oct 26, 2006 2:48 pm
Location: Guetersloh, Germany
Contact:

Post by jaal »

*gnah* Garvin, your right, as always.

It is trackback Spam. Is there any way to prevent that?

But on the other side my non showing captcha problems does still exist. (Or is anyone of you capable of seeing captchas on blog.salid.de?)

Tks

J
garvinhicking
Core Developer
Posts: 30022
Joined: Tue Sep 16, 2003 9:45 pm
Location: Cologne, Germany
Contact:

Post by garvinhicking »

Hi!
It is trackback Spam. Is there any way to prevent that?
Only by using and relying on Akismet. Or by disabling trackbacks.

But captchas I don't see on your side, that is true. how exactly did you configure the anti-spam plugin, with which options?

Regards,
Garvin
# Garvin Hicking (s9y Developer)
# Did I help you? Consider making me happy: http://wishes.garv.in/
# or use my PayPal account "paypal {at} supergarv (dot) de"
# My "other" hobby: http://flickr.garv.in/
jaal
Regular
Posts: 63
Joined: Thu Oct 26, 2006 2:48 pm
Location: Guetersloh, Germany
Contact:

Post by jaal »

Hi,

sorry for the delay, but my to-do list is killing me...

[Part1]
Image

[Part2]
Image

[Part3]
Image

I hope I didn't missed a part.

Thanks
J
garvinhicking
Core Developer
Posts: 30022
Joined: Tue Sep 16, 2003 9:45 pm
Location: Cologne, Germany
Contact:

Post by garvinhicking »

Hi!

Could it be that you ever modified your comments.tpl or commentform.tpl template file? To me the only reason why this would not work is if you removed the event hook to call the captcha plugin...?!

Do captchas show up if you use an unmodified /templates/default file for your blog?

Regards,
Garvin
# Garvin Hicking (s9y Developer)
# Did I help you? Consider making me happy: http://wishes.garv.in/
# or use my PayPal account "paypal {at} supergarv (dot) de"
# My "other" hobby: http://flickr.garv.in/
jaal
Regular
Posts: 63
Joined: Thu Oct 26, 2006 2:48 pm
Location: Guetersloh, Germany
Contact:

Post by jaal »

Hi,

good point.

But that's the only difference:

diff comments.tpl /tmp/serendipity/templates/default/comments.tpl
21c21
< (<a class="comment_source_url" href="{$comment.url}" title="{$comment.url|@escape}" rel="nofollow">{$CONST.HOMEPAGE}</a>)
---
> (<a class="comment_source_url" href="{$comment.url}" title="{$comment.url|@escape}">{$CONST.HOMEPAGE}</a>)

Don't ask me why I've changed that

But even replacing the comments.tpl didn't resolved the problem...

Jan
garvinhicking
Core Developer
Posts: 30022
Joined: Tue Sep 16, 2003 9:45 pm
Location: Cologne, Germany
Contact:

Post by garvinhicking »

Hi!

What about commentform.tpl?

Regards,
Garvin
# Garvin Hicking (s9y Developer)
# Did I help you? Consider making me happy: http://wishes.garv.in/
# or use my PayPal account "paypal {at} supergarv (dot) de"
# My "other" hobby: http://flickr.garv.in/
jaal
Regular
Posts: 63
Joined: Thu Oct 26, 2006 2:48 pm
Location: Guetersloh, Germany
Contact:

Post by jaal »

Uhm, there wasn't any.
I've copied the default one in the directory (we're talking about ~/templates/<whatever>, right?) but that didn't helped.

Jan
garvinhicking
Core Developer
Posts: 30022
Joined: Tue Sep 16, 2003 9:45 pm
Location: Cologne, Germany
Contact:

Post by garvinhicking »

Hi!

Hm, okay, if you had no custom file, the default one would be fetched.

I'm really stumped, this shouldn't happen. I'm a bit out of clues as I've never seen this before, nor has it ever been reportedf. I would need FTP access to the installation to debug things, so if you'd like that, please send me a PM.

Regards,
Garvin
# Garvin Hicking (s9y Developer)
# Did I help you? Consider making me happy: http://wishes.garv.in/
# or use my PayPal account "paypal {at} supergarv (dot) de"
# My "other" hobby: http://flickr.garv.in/
Post Reply