michield / dokuwiki-plugin-botbouncer

BotBouncer plugin for Dokuwiki
2 stars 1 forks source link

Reports spam if only ONE field matches with stopforumspam #1

Open phred opened 11 years ago

phred commented 11 years ago

Thanks for this plugin, it's already cut down on our wiki spam!

This was dumping one me to the spam error page during login. The plugin requests this from StopForumSpam: http://www.stopforumspam.com/api?username[]=Fred&email[]=fred.alger%40foxycart.com&ip[]=69.1.26.101&&unix

Which gives this response:

     <root>
          <success>1</success>
          <username>
               <value>Fred</value>
               <lastseen>1368463209</lastseen>
               <frequency>95</frequency>
               <appears>1</appears>
          </username>
          <email>
               <value>fred.alger@foxycart.com</value>
               <frequency>0</frequency>
               <appears>0</appears>
          </email>
          <ip>
               <value>69.1.26.101</value>
               <frequency>0</frequency>
               <appears>0</appears>
          </ip>
     </root>

The issue is that "Fred" is a common spam account name. However, it's also a common firstname, my first name in fact :smile:. My IP and email aren't used for spam, and I shouldn't be blocked from logging in (especially as site admin :exclamation:)

I manually hacked my plugin to check if $isSfsSpam > 1 so that we can get back to work. Can do a pull request if you'd like.

michield commented 11 years ago

You can use the whitelist setting to avoid being locked out. But I see your point....