That annoying human spammers - Simple Solution for Spam in Drupal
Last couple of months we started to notice spam comments on our site. We have installed image captcha but obviously there are more and more human persons whose job is to manually spam sites.
We quickly created couple of triggers and actions that are sending emails and notify us when a new comment is created. Then we would manually check that comment and if it is a spam (>95% chance) we would put it into moderation.
Not a perfect process (and quite boring too) but it worked for us relatively OK. Spam gradually increased on our site - we started to get 2-3 human spam comments every day but we are always very busy with other projects... so we kept the non-perfect but working system.
Until one day we notice that we have about 20 spam comments that are laying around in our site and that were posted in the last month or so. Pfffft.... After quick investigation we figured out that our actions are disconnected from our triggers - who knows why, maybe some upgrade went wrong or somebody clicked in a bad place in a hurry...
We quickly reconnected actions and triggers but it was obvious to me that we should find a better solution. There are very advanced Drupal modules for spam out there like mollom... but they are all big and complex and I really wanted something dead simple.
So I started to investigate the situation and quickly figure the fundamental flaw of every spam - every spam needs to have at least one link that is leading to some spammer site. If somebody really wants to write a real comment on our blogs, he/she will maybe put some links inside, but a spammer will always put at least one link.
After 2h I had a module called spam_watchdog that is addressing this specific issue. This module will check newly added comments. If a link has been found in the comment, the module will put that comment in moderation and send a notification to site admin.
After 10 days of using it on our site we finally have perfect solution (or at least we have it for now ;) . spam_watchdog automatically moderates all comments with links. First 2-3 days of using we had 2-3 human spam comments per day. After that, they started to loose interest for our site (they are still trying, but there is nothing we can program against stubbornness ;-) . Now we have about one or two attempt of human spamming per week.
And this is exactly the solution I wanted to have: dead simple to install, just enable the module and forget about it. Combined with image captcha we eliminated the spam on our site (at least for now).
I am also attaching spam_watchdog module, maybe somebody else will find it useful.
| Attachment | Size |
|---|---|
| spam_watchdog-6.x-0.1-dev.zip | 8.42 KB |
tags
Recent blog posts
- CAPTCHA AFTER module released!
- Drupalcamp Timisoara/Romania
- That annoying human spammers - Simple Solution for Spam in Drupal
- Web Community Examples (drupalcamp.at) slides
- Securing your Drupal site - slides from drupalcamp.at
- MontenaSoft on DrupalCon 2009 in Paris, France
- How and why you should get Acquia Partnership – a presentation
- Press conference: Austrian Research Strategy 2020 officially introduced
- Drupal Media Camp in Aarau, Switzerland
- Switzerland here we come :)
Recent comments
- guys...really...
3 weeks 6 days ago - Ironic
10 weeks 6 days ago - Drupal is less secure, eh?
13 weeks 21 hours ago - There will be spam...
15 weeks 2 days ago - I would to thank Ignacio
18 weeks 9 hours ago - Apples & Oranges
21 weeks 1 day ago - There will be spam...
21 weeks 2 days ago - good for spam boots
21 weeks 6 days ago - Human SPAM?
21 weeks 6 days ago - hi Zeljko, thanks for the
32 weeks 3 days ago
Contact
MontenaSoft e.U.
Erne Seder Gasse 8/3/403
A-1030 Wien, Österreich
office (at) montenasoft (dot) com
www.montenasoft.com
tel: +43 (0) 699 19084898
fax:+43 (0) 1 91 6789 5


Comments
hi Zeljko, thanks for the
hi Zeljko,
thanks for the t-shirt.
I see drupal is expanding in Ireland
groups.drupal.org/ireland
R
Human SPAM?
I've been receiving human-like SPAM these last days. It looks "quite human", but they're bots, and I found a way to stop almost all of them. Yesterday I received 52 SPAM attempts, but I developed a method that is working fine more than 95% of the times. This is acceptable with 50 attempts a day, but what if I become popular and receive, say, 500 attempts?
Therefore, I accept suggestions to improve my method. Please have a look at it.
http://www.isegura.es/blog/stop-spam-your-site-being-invisible-honeytrap...
good for spam boots
Hi Ignacio,
I have checked your code and logic - its perfectly OK for automated spam boots and it will probably work very well.
However on our site, because we are using image captcha protection form, we do not have problem with spam bots. But we have a problem with human spammers - and for human spammers your solution will probably not work very well.
There will be spam...
until google changes it's pagerank algorithm. There are too many programms on the market to search for high ranked pages with automated text fill in. The only thing a human has to do is fill out the captcha form, and that's done in a few seconds.
I would to thank Ignacio
I would to thank Ignacio Segura for his comment. Really helpful thnx.
There will be spam...
In response to nemag, maybe it's not Google's PR algorithm that should change but their SERP ranking algorithm. PR doesn't drive that much revenue to a website anymore but SERP rankings. It's what these Internet marketers are after. They are the human spammers and indeed they are very much annoying. I'm a wordpress user and these spammers are also frequent visitors to my website. Nice tool for Drupal you have here. :)
Post new comment