Spamprotection again

[Thomas]

Hi,

today I noticed while answering a comment that the spam protection (or comment module) returns after posting that the comment was not inserted because commenting of this article (1 day old) has been closed. Comments to the article are enabled, captchas too. Actually it is inserted. From some point it gets a wrong return code but I do not know from where.

Additionally when someone is entering his homepage location not the clickable link is displayed but the content of the link.
Means instead of displaying <a href="http://www.domain.com/exit.php?=...">My location</a>(sourcecode) it just displays http://www.domain.com/exit.php?=... as text, not clickable.

Any hints?

Regards, Thomas

[garvinhicking]

Please enable logging of the spamblock plugin and see where it adds a failure header.

If it returns with a "comment not added" this can only come if a comment gets moderated or rejected - it can't be added normally...

Did you check in the "Edit Entry" page that your entry does not have "[x] This entry requires moderation" feature set?

HTML is never allowed in comments. You need to use BBCode or other markups to include clickable links. HTML markup in comments is potentially very dangerous because of XSS attacks. You don't want visitors to drop HTML code in your blog...

Regards,
Garvin

[Thomas]

Hi,

well, I a problem is the font used in the captchas. I saw that with s9y 3 different fonts are delivered.
What font are used with the original capthas? And what dimension is used for? 0-9, a-z, A-Z, whatever which .png file is found in the directory?
I think I'm going to modify the letters to any other font for better display.

Regards, Thomas

[garvinhicking]

The spamblock plugin currently uses

Code: Select all

        $this->chars = array(2, 3, 4, 7, 9); // 1, 5, 6 and 8 may look like characters.
        $this->chars = array_merge($this->chars, array('A','B','C','D','E','F','H','J','K','L','M','N','P','Q','R','T','U','V','W','X','Y','Z')); // I, O, S may look like numbers

That may change in the future, though, since some more characters look alike.

Serendipity only uses the PNG images when GDLib is not present. If GDLib is present, it uses the 4 bundled TTF files to create the lettering.

Regards,
Garvin

[Thomas]

Hi Garvin,

means that I can easily modify the letters and also use my own font if necessary by changing the arrays for the digits/letters and the one for the fonts.

Regards, Thomas