Spamblock plugin doesn't seem to work correctly

[WebComPas]

Hallo!

I'm using the spamblock plugin to prevent trackback and comment spam. With comments it works fine. But with trackbacks the word filter doesn't block trackbacks with words that are in the filter list. My word filter lists for author and content checking looks like follows:

[...] Levitra; Nizoral; Cozaar; Phentermine [...]

The last word is in the author and content checking list, but today there was a trackback which contained it in both values.

So I think there is a bug in this plugin so that the values aren't checked correctly. I hope this will be fixed soon.

Regards,
Pascal

[garvinhicking]

Hi!

Which version of Serendipity/Spamblock are you using, and please tell us your exact settings of the plugin.

Regards,
Garvin

[WebComPas]

Hi Garvin!

Actually I'm using the plugin version 1.71 on S9Y 1.4. The plugin option "activate word filter" is set to reject. Do you need to know any other configuration values?

Regards,
Pascal

[garvinhicking]

Hi!

Yes, I need all of them to try to reproduce your problem.

Do you by chance have spamblock logging enabled, so we could see if there was anything logged to your incoming spam-trackback?

Regards,
Garvin

[WebComPas]

OK, this is my actual plugin configuration:

Emergency comment shutdown: No
Disable spamblock for Authors: All Authors
Do not allow duplicate comments: Yes
Reject comments which only contain the entry title: Yes
IP block interval: 5
Forbid direct comments (XSRF protection): No
Enable Captchas: Yes
Force captchas after how many days: 0
Background color of the captcha: 238,238,238
Force comment moderation after how many days: 0
What to do with comments when being auto-moderated? Moderate
Trackback/Pingback: ip validation: Moderate
Force API comment moderation after how many days: 0
What to do with trackbacks/pingbacks when being auto-moderated? Moderate
How to treat comments made via APIs: Moderate
Check trackback/pingback URLs: No
How many links before a comment gets moderated: 7
How many links before a comment gets rejected: 13
Activate wordfilter: Reject

Wordfilter for URLs:
8gold\.com;911easymoney\.com;canadianlabels\.net;condodream\.com;crepesuzette\.com;debt-help-bill-consolidation-elimination\.com;fidelityfunding\.net;flafeber\.com;gb\.com;houseofsevengables\.com;instant-quick-money-cash-advance-personal-loans-until-pay-day\.com;mediavisor\.com;newtruths\.com;oiline\.com;onlinegamingassociation\.com;online\-+poker\.com;popwow\.com;royalmailhotel\.com;spoodles\.com;sportsparent\.com;stmaryonline\.org;thatwhichis\.com;tmsathai\.org;uaeecommerce\.com;learnhowtoplay\.com;www\.yahoo\.com;incest;lefora\.com; www\.yahoo\.com

Wordfilter for author names:
very good site!; Real good stuff!;all about; incest; sex; casino; phentermine; credit; loans; poker; Hydrocodone; Cialis; Viagra; pharmacy; Handjob; clomid; Xanax; precrition; dosage; joint; antibiotic; Levaquin; bloetura; shlaenura; shupitoriko; triponuridon; virdabonot; grotokoli; badaruniter; kolmertino; Ritalin; Tramadol; Amoxicillin; Purchase; Phentermine; Ephedrine; Prednisone; cellulitis; Celexa; Valium; Soma; Cephalexin; Lipitor; Diflucan; Levitra; Nizoral; Cozaar; Phentermine

Wordfilter for comment body:
very good site!; Real good stuff!;all about; incest; sex; casino; phentermine; credit; loans; poker; Hydrocodone; Cialis; Viagra; pharmacy; Handjob; clomid; Xanax; precrition; dosage; joint; antibiotic; Levaquin; bloetura; shlaenura; shupitoriko; triponuridon; virdabonot; grotokoli; badaruniter; kolmertino; Ritalin; Tramadol; Amoxicillin; Purchase; Phentermine; Ephedrine; Prednisone; cellulitis; Celexa; Valium; Soma; Cephalexin; Lipitor; Diflucan; Levitra; Nizoral; Cozaar

Wordfilter for comment E-mail: (empty)

Activate URL filtering by blogg.de Blacklist: None
Akismet API Key: (empty)
How to treat Akismet-reported spam: Reject
Hide E-Mail addresses of commenting users: Yes
Check e-mail addresses? Yes
Required comment fields: name, email, comment
Block bad IPs via HTaccess? Yes
Choose logging method: Database
Logfile location: (empty)

The corresponding entries in the spamblock log are those:

"timestamp";"type";"reason";"entry_id";"author";"email";"url";"useragent";"ip";"referer";"body"
"1233778884";"MODERATE";"Keine API-erstellten Kommentare (u.a. Trackbacks) erlaubt";"14";"Phentermine.";;"http://crackle.com/members/2457883";"Jakarta Commons-HttpClient/3.1";"67.159.45.96";;"Phentermine."
"1233778884";"MODERATE";"IP Validierung : crackle.com [208.78.224.202] != Sender IP [67.159.45.96, ua=\"Jakarta Commons-HttpClient/3.1\"]";"14";"Phentermine.";;"http://crackle.com/members/2457883";"Jakarta Commons-HttpClient/3.1";"67.159.45.96";;"Phentermine."

I hope you can solve the problem now.

Regards,
Pascal

[garvinhicking]

Hi!

The problem is your text filters, they all have a space in front of them. If you remove those spaces, the wordfilter would apply.

However I do consider this a bug, I've committed a fix to SVN to ignore pending and trailing spaces.

Regards,
Garvin

[WebComPas]

Thank you for your help. Will this change be available as a new plugin version via spartacus or how can I get the new one?

Regards,
Pascal

[Don Chambers]

The spam protector is a core plugin - meaning it is included with serendipity itself. It will be available in the nightly download package tomorrow since it was included today.

You can get the files directly from svn if you have a svn client, or you can browse the files here: http://svn.berlios.de/svnroot/repos/ser ... spamblock/

[WebComPas]

I've checked the URL, but the plugin version is still 1.71. Shouldn't this be 1.72 or is this not the actual (fixed) version?

Regards,
Pascal

[garvinhicking]

Hi!

I could not bump the version due to the plugin already being at version 1.72 in the s9y 1.4 branch. But it's the right file.

Regards,
Garvin

[WebComPas]

OK, thanks for this information. According to the last entries in my spamblock log the filters are working correctly now.

Regards,
Pascal