Manage unregistered user messages by screening

I am considering the possibility of users posting on my site without registering or providing any identifying information. If every post is sent to the db queue and I manually look through these messages, what problems can I run? How can I deal with these problems?

+3
source share
5 answers

Screening each message will be tedious and tedious. And prone to annoying admin spam. My suggestion would be to automate as much screening as possible. And besides, providing any identifying information does nothing to prevent spam (the bot will simply generate it).

Many projects implement a recognition system: first, the user must publish 1-2 messages that are approved, then IP and (possibly) cookies, which he identified as a reliable poster, so his messages appear automatically (and later be marked as spam).

You can also use some heuristics for the content of the message (for example, the number of links in the message) to automatically discard potential spam messages.

+6

, , .

, IP- . , , .

+5

Tedium, -, - ( , , ), .

, ?

+2

, (, "2 + 3 - 4 =", "captcha", ), Javascript .

, "" ( ). , , . , .

, , . jQuery:

<script type="text/javascript">
//   Hash function to mask the answer
function answerMask()
{
  var a = $('#a').val();
  var c = $('#c').val();
  var h = hex_md5(hex_md5(a) + c);
  $('#a').val(h);
}
</script>
  <form onsubmit="answerMask()" action="/cgi-bin/comment.py" method="POST">
    <table>
      <tr><td>Comment</td><td><input type="text" name="comment" /></td></tr>
      <tr><td># put image here #</td><td><input id="p" type="text" name="a" size="30" /></td></tr>
      <tr><td><input id="c" type="hidden" value="ddd8c315d759a74c75421055a16f6c52" name="c" /></td><td><input type="submit" value=" Go "></td></tr>
    </p>
  </form>

...

-, , , , .

. : " : glark snerm hork morf", , , , .

, -, , script kiddie.

+2
  • , ,

, .

0

Source: https://habr.com/ru/post/1705145/


All Articles