KSP-SpaceDock / SpaceDock

Current Codebase (Python /Flask)
https://spacedock.info
Other
72 stars 33 forks source link

Add admin editable username, email and mod name filter wordlist #485

Open V1TA5 opened 1 year ago

V1TA5 commented 1 year ago

To stop spam and hormone heavy teens going overboard have a wordlist that can be edited by admins and that is applied to modnames, email and usernames (maybe selector to apply it to some and not all of them per word?)

Do we want to warn people when submiting forms with those words that we dont accept their entry and block them before they are created?

HebaruSan commented 1 year ago

Hmm, a warning might result in a spammer simply looking up synonyms from a thesaurus.

User: Mumbai Escorts 69 420 4eva Site: You said "escort", that's not allowed User: OK, I'm a "sexual services expert" Site: You said "sexual", that's not allowed User: How about "intimate services expert" Site: OK! User: Hooray! Spam achieved!

I would definitely think we simply wouldn't create the user on the server side, maybe sending the user to a 404 page.

Two things I'm planning to make cleanup somewhat easier:

I don't think we have to worry about mod names, spam in those has been extremely rare to non-existent.

And I'd definitely apply the filter to user descriptions. That's where the spammiest spam occurs.