iEntry 10th Anniversary Forum Rules Search
WebProWorld
Register FAQ Calendar Mark Forums Read
Search Engine Optimization Forum SEO is much easier with help from peers and experts! The WebProWorld SEO forum is for the discussion and exploration of various search engine optimization topics. Any non (engine) specific SEO or SEM topics should go here.

Share Thread: & Tags

Share Thread:

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 07-15-2008, 03:45 AM
WebProWorld Veteran
 
Join Date: Jun 2004
Location: Australia
Posts: 531
watto RepRank 2watto RepRank 2
Default SPAM Attack!

I am receiving spam listings through my site more and more every day through this page Business Trader Register . When I go to my admin to approve new listings I always have junk listing obviously submitted by auto posting spammers.

I was thinking about incorporating a code which the user has to manually enter at the bottom of this page. Would this work? Any other suggestions would also help.

Regards

watto
Reply With Quote
  #2 (permalink)  
Old 07-15-2008, 08:57 AM
bobchrist's Avatar
WebProWorld Veteran
 
Join Date: Jan 2007
Posts: 394
bobchrist RepRank 2bobchrist RepRank 2
Default Re: SPAM Attack!

You could configure SpamAssassin- e-mail spam filtering system.
Reply With Quote
  #3 (permalink)  
Old 07-15-2008, 10:55 AM
danlefree's Avatar
WebProWorld Pro
 
Join Date: Jun 2005
Location: Seattle
Posts: 265
danlefree RepRank 4danlefree RepRank 4danlefree RepRank 4danlefree RepRank 4
Default Re: SPAM Attack!

SpamAssassin may be useful for e-mail filtering, however, it sounds as though you need a human verification solution to validate form posts.

There are a slew of useful solutions out there, however, ReCAPTCHA is the easiest one to implement if you are not a developer.

One caution: users who have disabled off-site images may not see the ReCAPTCHA form. Be sure to include an instruction for visitors who have disabled images or are using ad-blocking software on the same page as your form, or as part of an error message displayed when your form is submitted without a valid ReCAPTCHA string.
__________________
Dan LeFree | Product Manager (Linux VPS Hosting) | Owner/Operator (Web development, marketing)
Reply With Quote
  #4 (permalink)  
Old 07-15-2008, 07:10 PM
WebProWorld Veteran
 
Join Date: Jun 2004
Location: Australia
Posts: 531
watto RepRank 2watto RepRank 2
Default Re: SPAM Attack!

Thanks for the advice guys. I'll check out recaptcha and see how it goes...

Regards

watto
Reply With Quote
  #5 (permalink)  
Old 07-16-2008, 03:22 PM
WebProWorld Member
 
Join Date: Apr 2005
Location: UK
Posts: 36
sunbedkid RepRank 0
Angry Re: SPAM Attack!

One thing I might add with regard to a Captcha, is that it's not foolproof. As I have a site that suffers from Spam contact form submissions, even though there is a Captcha.

It is a never ending problem, and is the bain of my life at times. I get their i.p address submitted to me via the form, and block their access, as soon as I find out that there is an attack. Sometimes, I get hundreds before I can block 'em.
__________________
The world is getting smaller, so make the most of it before it disappears.
Holiday Rentals | Swimwear | Travel Directory | Rentals Directory
Reply With Quote
  #6 (permalink)  
Old 07-16-2008, 04:06 PM
craigmn3's Avatar
WebProWorld Veteran
 
Join Date: Jan 2004
Location: California
Posts: 335
craigmn3 RepRank 1
Default Re: SPAM Attack!

The use of of a code pasted in an unscannable graphic is the standard prevention device used for this purpose
Reply With Quote
  #7 (permalink)  
Old 07-16-2008, 04:40 PM
WebProWorld Member
 
Join Date: Nov 2005
Posts: 95
danners02 RepRank 0
Default Re: SPAM Attack!

another option is to include a blank form input field named "url" or "website" - either make it a hidden form field or hide the input using CSS. his hides it from human visitors.
If the input has any content on submission then you know it is an automated submission and delete automatically.
I have found this works really well.
below is the code - it will return any form fileds you add to your form - just keep 'Name' and 'Email' fields plus the hidden 'website' field.


FORM:

<form action="formail.php" method="post">
<label>Your Name</label> <input type="text" name="Name" size="12"/><br/>
<label>Telephone</label> <input type="text" name="Company" size="12"/><br/>
<label>Your Email</label> <input type="text" name="Email" size="12"/><br/>
<label>Message</label> <textarea name="Message" rows="4" cols="40"></textarea><br/>
<span style="display:none">Website <input type="text" name="website" size="34"></span>
<input type="submit" name="" value="Send Enquiry"/>
</form>


FORMAIL.PHP

<?php

if($_POST["website"] != ""){
// spam bot
exit;
}else{
// human
// continue as normal...

// Configuration Settings
$SendFrom = $_POST['Name'] . "<" . $_POST['Email'] . ">";
$SendTo = "Your Name <yourname@yourdomain.com>";
$SubjectLine = "Enquiry from Website";
$Divider = "------------------------------";

// Build Message Body from Web Form Input
$MsgBody = @gethostbyaddr($REMOTE_ADDR) . "\n$Divider\n";
foreach ($_POST as $Field=>$Value) {
if($Field != "website" && strlen($Value) > 0) {
$MsgBody .= "$Field: $Value\n";
}
}
$MsgBody .= $Divider . "\n" . $HTTP_USER_AGENT . "\n";
$MsgBody = htmlspecialchars($MsgBody); //make content safe

// Send E-Mail to admin
mail ($SendTo, $SubjectLine, $MsgBody, "From: " . $SendFrom);
// delete the initial double slash below to send to another admin recipient, replacing email address
// mail ("admincc@domain.com", $SubjectLine, $MsgBody, "From: " . $SendFrom);

$User_Name = $_POST['Name'];

// Send Autoresponse
mail ($SendFrom, $SubjectLine, "Dear $User_Name

[text for autoresponder]

",

"From: " . $SendTo);

}

?>


<html>
<body>
</body>
</html>
Reply With Quote
  #8 (permalink)  
Old 07-16-2008, 07:25 PM
WebProWorld Veteran
 
Join Date: Jun 2004
Location: Australia
Posts: 531
watto RepRank 2watto RepRank 2
Default Re: SPAM Attack!

where exactly would I paste this code? ( http:ww.business-trader.com.au/newuser.php )

regards

watto
Reply With Quote
  #9 (permalink)  
Old 07-17-2008, 03:49 AM
Webnauts's Avatar
WebProWorld 1,000+ Club
WebProWorld MVP
 
Join Date: Aug 2003
Location: Worldwide
Posts: 8,162
Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9
Default Re: SPAM Attack!

Peter I think you are looking for this: GBCF-v3 - Secure and Accessible PHP Contact Form - Green-Beast.com
__________________
"Being an expert isn't telling other people what you know. It's understanding what questions to ask, and flexibly applying your knowledge to the specific situation at hand. Being an expert means providing sensible, highly contextual direction." Jeff Atwood
SEO Workers - Search Engine Optimization Consulting Company | SEO Analysis Tool | Webnauts Net SEO
Reply With Quote
  #10 (permalink)  
Old 07-17-2008, 03:51 AM
Webnauts's Avatar
WebProWorld 1,000+ Club
WebProWorld MVP
 
Join Date: Aug 2003
Location: Worldwide
Posts: 8,162
Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9
Default Re: SPAM Attack!

And add in your .htaccess file this:

Code:
### Deny Fake Bots ###
BrowserMatch "^Java/?[1-9_\.]*" bad_bot
BrowserMatch "^MJ12bot/?[1-9_\.]*" bad_bot
SetEnvIfNoCase User-Agent "^8484 Boston Project/?[1-9_\.]*" bad_bot
SetEnvIfNoCase User-Agent "charlotte/" bad_bot
SetEnvIfNoCase User-Agent "curl/7.15.5 (i686-redhat-linux-gnu) libcurl/7.15.5 OpenSSL/0.9.8b zlib/1.2.3 libidn/0.6.5" bad_bot
SetEnvifNoCase User-Agent "^Heritrix/" bad_bot
SetEnvIfNoCase User-Agent "larbin/" bad-bot
SetEnvIfNoCase User-Agent "libwww-perl/" bad_bot
SetEnvIfNoCase User-Agent "^libcurl-agent/" bad_bot
SetEnvifNoCase User-Agent "IRC-Bbot" bad_bot
SetEnvifNoCase User-Agent "ISC Systems iRc Search 2.1" bad_bot
SetEnvIfNoCase User-Agent "^Jakarta\ Commons-HttpClient/" bad_bot
SetEnvIfNoCase User-Agent "^Java/" bad_bot
SetEnvIfNoCase User-Agent "^Microsoft\ URL\ Control.*$" bad_bot
SetEnvIfNoCase User-Agent "MJ12bot/v1.0.8" bad_bot
SetEnvIfNoCase User-Agent "^Missigua" bad_bot
SetEnvIfNoCase User-Agent "^Mozilla/4\.0\ .*Win\ 9x\ 4\.90.*$" bad_bot
SetEnvIfNoCase User-Agent "Nutch" bad_bot
SetEnvIfNoCase User-Agent "phpversion" bad_bot
SetEnvIfNoCase User-Agent "^TencentTraveler" bad_bot
SetEnvIfNoCase User-Agent "^Web Downloader" bad_bot
<FilesMatch "(.*)">
Order Allow,Deny
Allow from all
Deny from env=bad_bot
</FilesMatch>  

RewriteEngine on
RewriteBase /

# Known Bad Bots
RewriteCond %{HTTP_USER_AGENT} ADSARobot|ah-ha|almaden|aktuelles|Anarchie|amzn_assoc|Arachmo|ASPSeek|ASSORT|ATHENS|Atomz|attach|attache|autoemailspider|BackWeb|Bandit|BatchFTP|bdfetch|Bbot|BecomeBot|big.brother|BlackWidow|bmclient|Boston\ Project|bot/1.0|BravoBrian\ SpiderEngine\ MarcoPolo|Bot\ mailto:craftbot@yahoo.com|Buddy|Bullseye|bumblebee|capture|CherryPicker|ChinaClaw|CICC|clipping|Clushbot|Collector|Copier|Crescent|Crescent\ Internet\ ToolPak|Custo|cyberalert|Deweb|diagem|Digger|Digimarc|DIIbot|DISCo|DISCo\ Pump|DISCoFinder|Download\ Demon|Download\ Wonder|Downloader|Drip|DSurf15a|DTS.Agent|EasyDL|eCatch|ecollector|efp@gmx\.net|Email\ Extractor|EirGrabber|email|EmailCollector|EmailSiphon|EmailWolf|Express\ WebPictures|ExtractorPro|EyeNetIE|FavOrg|fastlwspider|Favorites\ Sweeper|Fetch|FEZhead|FileHound|FlashGet\ WebWasher|FlickBot|fluffy|FrontPage|GalaxyBot|Generic|Getleft|GetRight|GetSmart|GetWeb!|GetWebPage|gigabaz|Girafabot|Go\!Zilla|Go!Zilla|Go-Ahead-Got-It|GornKer|gotit|Grabber|GrabNet|Grafula|Green\ Research|grub-client|Harvest|heritrix|hhjhj@yahoo|hloader|HMView|HomePageSearch|http\ generic|HTTrack|httpdown|httrack|ia_archiver|IBM_Planetwide|Image\ Stripper|Image\ Sucker|imagefetch|IncyWincy|Indy*Library|Indy\ Library|informant|Ingelin|InterGET|Internet\ Ninja|InternetLinkagent|Internet\ Ninja|InternetSeer\.com|Iria|Irvine|JBH*agent|JetCar|JOC|JOC\ Web\ Spider|JustView|kalooga|KWebGet|Lachesis|larbin|Leacher|LeechFTP|LexiBot|lftp|libwww|likse|Link|Link*Sleuth|LINKS\ ARoMATIZED|LinkWalker|LWP|lwp-trivial|Mag-Net|Magnet|Mac\ Finder|Mag-Net|Mass\ Downloader|MCspider|MJ12bot/v1\.0\.8|Memo|Microsoft.URL|MIDown\ tool|Mirror|Missigua\ Locator|Mister\ PiX|MMMtoCrawl\/UrlDispatcherLLL|^Mozilla$|Mozilla.*Indy|Mozilla.*NEWT|Mozilla*MSIECrawler|MS\ FrontPage*|MSFrontPage|MSIECrawler|MSProxy|MSR-ISRCCrawler|multithreaddb|my-heritrix-crawler|nationaldirectory|Navroad|NearSite|NetAnts|NetCarta|NetMechanic|netprospector|NetResearchServer|NetSpider|Net\ Vampire|NetZIP|NetZip\ Downloader|NetZippy|NEWT|NICErsPRO|Ninja|NPBot|NicheBot|noxtrumbot|Octopus|Offline\ Explorer|Offline\ Navigator|OpaL|Openfind|OpenTextSiteCrawler|OrangeBot|PageGrabber|Papa\ Foto|PackRat|pavuk|pcBrowser|PersonaPilot|Ping|PingALink|Pingdom|Pockey|POE-Component-Client-HTTP|Powermarks|Proxy|psbot|PSurf|psycheclone|puf|Pump|PushSite|QRVA|RealDownload|Reaper|Recorder|ReGet|replacer|RepoMonkey|Robozilla|Rover|RPT-HTTPClient|Rsync|Scooter|SearchExpress|searchhippo|searchterms\.it|Second\ Street\ Research|Seeker|Shai|Siphon|sitecheck|sitecheck.internetseer.com|SiteSnagger|SlySearch|SmartDownload|snagger|Snake|SpaceBison|Spegla|SpiderBot|sproose|SqWorm|Stripper|Sucker|SuperBot|SuperHTTP|Surfbot|SurfWalker|Szukacz|tAkeOut|tarspider|Teleport\ Pro|Templeton|TencentTraveler|TrueRobot|TV33_Mercator|UIowaCrawler|UtilMind|URLSpiderPro|URL_Spider_Pro|Vacuum|vagabondo|vayala|visibilitygap|VoidEYE|vspider|Web\ Downloader|w3mir|Web\ Data\ Extractor|Web\ Image\ Collector|Web\ Sucker|Wweb|WebAuto|WebBandit|web\.by\.mail|Webclipping|webcollage|webcollector|WebCopier|webcraft@bea|webdevil|webdownloader|Webdup|WebEMailExtrac|WebFetch|WebGo\ IS|WebHook|Webinator|WebLeacher|WEBMASTERS|WebMiner|WebMirror|webmole|WebReaper|WebSauger|Website|Website\ eXtractor|Website\ Quester|WebSnake|Webster|WebStripper|websucker|webvac|webwalk|webweasel|WebWhacker|WebZIP|Wget|Whacker|whizbang|WhosTalking|Widow|WISEbot|WWWOFFLE|x-Tractor|^Xaldon\ WebSpider|WUMPUS|Xenu|XGET|Yeti|zermelo|Zeus.*Webster|Zeus [NC]
RewriteRule ^.* - [F,L]

# Bots starting with Web
RewriteCond %{HTTP_USER_AGENT} ^web(zip|emaile|enhancer|fetch|go.?is|auto|bandit|clip|copier|master|reaper|sauger|site.?quester|whack) [NC,OR]
 
# Anywhere in UA -- Greedy REGEX
RewriteCond %{HTTP_USER_AGENT} ^.*(craftbot|download|extract|stripper|sucker|ninja|clshttp|webspider|leacher|collector|grabber|webpictures).*$ [NC]
RewriteRule ^.* - [F,L]
__________________
"Being an expert isn't telling other people what you know. It's understanding what questions to ask, and flexibly applying your knowledge to the specific situation at hand. Being an expert means providing sensible, highly contextual direction." Jeff Atwood
SEO Workers - Search Engine Optimization Consulting Company | SEO Analysis Tool | Webnauts Net SEO
Reply With Quote
  #11 (permalink)  
Old 07-17-2008, 04:05 AM
WebProWorld Veteran
 
Join Date: Jun 2004
Location: Australia
Posts: 531
watto RepRank 2watto RepRank 2
Default Re: SPAM Attack!

Webnauts, will adding this code alone do the trick? or should I download GBCF-v3 - Secure and Accessible PHP Contact Form - Green-Beast.com

Regards

watto
Reply With Quote
  #12 (permalink)  
Old 07-17-2008, 04:09 AM
Webnauts's Avatar
WebProWorld 1,000+ Club
WebProWorld MVP
 
Join Date: Aug 2003
Location: Worldwide
Posts: 8,162
Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9
Default Re: SPAM Attack!

Quote:
Originally Posted by watto View Post
Webnauts, will adding this code alone do the trick? or should I download GBCF-v3 - Secure and Accessible PHP Contact Form - Green-Beast.com

Regards

watto
You can download that form script and implement it on your site.

In addition you can add the code I posted above in your .htaccess file to block bad bots attacking your site.
__________________
"Being an expert isn't telling other people what you know. It's understanding what questions to ask, and flexibly applying your knowledge to the specific situation at hand. Being an expert means providing sensible, highly contextual direction." Jeff Atwood
SEO Workers - Search Engine Optimization Consulting Company | SEO Analysis Tool | Webnauts Net SEO
Reply With Quote
  #13 (permalink)  
Old 07-17-2008, 05:18 AM
WebProWorld Veteran
 
Join Date: Jun 2004
Location: Australia
Posts: 531
watto RepRank 2watto RepRank 2
Default Re: SPAM Attack!

Thanks for the tip! I really appreciate it.

Regards

watto
Reply With Quote
  #14 (permalink)  
Old 07-17-2008, 05:28 AM
Webnauts's Avatar
WebProWorld 1,000+ Club
WebProWorld MVP
 
Join Date: Aug 2003
Location: Worldwide
Posts: 8,162
Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9
Default Re: SPAM Attack!

Quote:
Originally Posted by watto View Post
Thanks for the tip! I really appreciate it.

Regards

watto
I am sure you do Peter.
__________________
"Being an expert isn't telling other people what you know. It's understanding what questions to ask, and flexibly applying your knowledge to the specific situation at hand. Being an expert means providing sensible, highly contextual direction." Jeff Atwood
SEO Workers - Search Engine Optimization Consulting Company | SEO Analysis Tool | Webnauts Net SEO
Reply With Quote
  #15 (permalink)  
Old 07-17-2008, 05:59 AM
WebProWorld Veteran
 
Join Date: Jun 2004
Location: Australia
Posts: 531
watto RepRank 2watto RepRank 2
Default Re: SPAM Attack!

John, I'm not really sure if I am comfitable adding all of that code to my .htaccess file???

watto
Reply With Quote
  #16 (permalink)  
Old 07-17-2008, 06:16 AM
Webnauts's Avatar
WebProWorld 1,000+ Club
WebProWorld MVP
 
Join Date: Aug 2003
Location: Worldwide
Posts: 8,162
Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9
Default Re: SPAM Attack!

Quote:
Originally Posted by watto View Post
John, I'm not really sure if I am comfitable adding all of that code to my .htaccess file???

watto
Then you should hire someone who can. Or?
__________________
"Being an expert isn't telling other people what you know. It's understanding what questions to ask, and flexibly applying your knowledge to the specific situation at hand. Being an expert means providing sensible, highly contextual direction." Jeff Atwood
SEO Workers - Search Engine Optimization Consulting Company | SEO Analysis Tool | Webnauts Net SEO
Reply With Quote
  #17 (permalink)  
Old 07-17-2008, 06:52 AM
WebProWorld Member
 
Join Date: Oct 2005
Posts: 29
gavinscott RepRank 0
Default Re: SPAM Attack!

Quote:
Originally Posted by danners02 View Post
another option is to include a blank form input field named "url" or "website" - either make it a hidden form field or hide the input using CSS. his hides it from human visitors.
If the input has any content on submission then you know it is an automated submission and delete automatically.
I have found this works really well.
The problem with this approach is that a legitimate user using autofill may inadvertently fill in the field without realising it and have their enquiry rejected. This might be avoided if you name the hidden field something nonsensical.

Instead of:

<span style="display:none">Website <input type="text" name="website" size="34"></span>

maybe:

<span style="display:none">hjk<input type="text" name="hjk" size="34"></span>

I'm not an expert though, so any comments appreciated
Reply With Quote
  #18 (permalink)  
Old 07-17-2008, 06:52 AM
Webnauts's Avatar
WebProWorld 1,000+ Club
WebProWorld MVP
 
Join Date: Aug 2003
Location: Worldwide
Posts: 8,162
Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9
Default Re: SPAM Attack!

Quote:
Originally Posted by danners02 View Post
another option is to include a blank form input field named "url" or "website" - either make it a hidden form field or hide the input using CSS. his hides it from human visitors.
If the input has any content on submission then you know it is an automated submission and delete automatically.
I have found this works really well.
below is the code - it will return any form fileds you add to your form - just keep 'Name' and 'Email' fields plus the hidden 'website' field.
Google can follow forms and the do not like display: none. Don't you think that can lead to problems?
__________________
"Being an expert isn't telling other people what you know. It's understanding what questions to ask, and flexibly applying your knowledge to the specific situation at hand. Being an expert means providing sensible, highly contextual direction." Jeff Atwood
SEO Workers - Search Engine Optimization Consulting Company | SEO Analysis Tool | Webnauts Net SEO
Reply With Quote
  #19 (permalink)  
Old 07-17-2008, 07:00 AM
WebProWorld Veteran
 
Join Date: Jun 2004
Location: Australia
Posts: 531
watto RepRank 2watto RepRank 2
Default Re: SPAM Attack!

webnauts, you have miss understood my post. I do know how to add this code to my .htaccess file. Quite basic actually. I said that I was not comfitable adding all of this code to the file (quite a lot of code)

Regards

watto
Reply With Quote
  #20 (permalink)  
Old 07-17-2008, 07:21 AM
Webnauts's Avatar
WebProWorld 1,000+ Club
WebProWorld MVP
 
Join Date: Aug 2003
Location: Worldwide
Posts: 8,162
Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9
Default Re: SPAM Attack!

Quote:
Originally Posted by watto View Post
webnauts, you have miss understood my post. I do know how to add this code to my .htaccess file. Quite basic actually. I said that I was not comfitable adding all of this code to the file (quite a lot of code)

Regards

watto
Have you ever heard this before: COPY & PASTE?
__________________
"Being an expert isn't telling other people what you know. It's understanding what questions to ask, and flexibly applying your knowledge to the specific situation at hand. Being an expert means providing sensible, highly contextual direction." Jeff Atwood
SEO Workers - Search Engine Optimization Consulting Company | SEO Analysis Tool | Webnauts Net SEO
Reply With Quote
  #21 (permalink)  
Old 07-17-2008, 07:31 AM
WebProWorld Veteran
 
Join Date: Jun 2004
Location: Australia
Posts: 531
watto RepRank 2watto RepRank 2
Default Re: SPAM Attack!

Um, yes. What does that have to do with my post. And by the way, the code you suggested does not work. When I "COPY & PASTE" the code into my .htaccess file I can't access any pages at all. It comes up as "500 Internal Server Error"

Watto
Reply With Quote
  #22 (permalink)  
Old 07-17-2008, 07:35 AM
Webnauts's Avatar
WebProWorld 1,000+ Club
WebProWorld MVP
 
Join Date: Aug 2003
Location: Worldwide
Posts: 8,162
Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9
Default Re: SPAM Attack!

Quote:
Originally Posted by watto View Post
Um, yes. What does that have to do with my post. And by the way, the code you suggested does not work. When I "COPY & PASTE" the code into my .htaccess file I can't access any pages at all. It comes up as "500 Internal Server Error"

Watto
Well then your hosting package doesn't support something.

So, try to add only this part of the code:

Code:
RewriteEngine on
RewriteBase /

# Known Bad Bots
RewriteCond %{HTTP_USER_AGENT} ADSARobot|ah-ha|almaden|aktuelles|Anarchie|amzn_assoc|Arachmo|ASPSeek|ASSORT|ATHENS|Atomz|attach|attache|autoemailspider|BackWeb|Bandit|BatchFTP|bdfetch|Bbot|BecomeBot|big.brother|BlackWidow|bmclient|Boston\ Project|bot/1.0|BravoBrian\ SpiderEngine\ MarcoPolo|Bot\ mailto:craftbot@yahoo.com|Buddy|Bullseye|bumblebee|capture|CherryPicker|ChinaClaw|CICC|clipping|Clushbot|Collector|Copier|Crescent|Crescent\ Internet\ ToolPak|Custo|cyberalert|Deweb|diagem|Digger|Digimarc|DIIbot|DISCo|DISCo\ Pump|DISCoFinder|Download\ Demon|Download\ Wonder|Downloader|Drip|DSurf15a|DTS.Agent|EasyDL|eCatch|ecollector|efp@gmx\.net|Email\ Extractor|EirGrabber|email|EmailCollector|EmailSiphon|EmailWolf|Express\ WebPictures|ExtractorPro|EyeNetIE|FavOrg|fastlwspider|Favorites\ Sweeper|Fetch|FEZhead|FileHound|FlashGet\ WebWasher|FlickBot|fluffy|FrontPage|GalaxyBot|Generic|Getleft|GetRight|GetSmart|GetWeb!|GetWebPage|gigabaz|Girafabot|Go\!Zilla|Go!Zilla|Go-Ahead-Got-It|GornKer|gotit|Grabber|GrabNet|Grafula|Green\ Research|grub-client|Harvest|heritrix|hhjhj@yahoo|hloader|HMView|HomePageSearch|http\ generic|HTTrack|httpdown|httrack|ia_archiver|IBM_Planetwide|Image\ Stripper|Image\ Sucker|imagefetch|IncyWincy|Indy*Library|Indy\ Library|informant|Ingelin|InterGET|Internet\ Ninja|InternetLinkagent|Internet\ Ninja|InternetSeer\.com|Iria|Irvine|JBH*agent|JetCar|JOC|JOC\ Web\ Spider|JustView|kalooga|KWebGet|Lachesis|larbin|Leacher|LeechFTP|LexiBot|lftp|libwww|likse|Link|Link*Sleuth|LINKS\ ARoMATIZED|LinkWalker|LWP|lwp-trivial|Mag-Net|Magnet|Mac\ Finder|Mag-Net|Mass\ Downloader|MCspider|MJ12bot/v1\.0\.8|Memo|Microsoft.URL|MIDown\ tool|Mirror|Missigua\ Locator|Mister\ PiX|MMMtoCrawl\/UrlDispatcherLLL|^Mozilla$|Mozilla.*Indy|Mozilla.*NEWT|Mozilla*MSIECrawler|MS\ FrontPage*|MSFrontPage|MSIECrawler|MSProxy|MSR-ISRCCrawler|multithreaddb|my-heritrix-crawler|nationaldirectory|Navroad|NearSite|NetAnts|NetCarta|NetMechanic|netprospector|NetResearchServer|NetSpider|Net\ Vampire|NetZIP|NetZip\ Downloader|NetZippy|NEWT|NICErsPRO|Ninja|NPBot|NicheBot|noxtrumbot|Octopus|Offline\ Explorer|Offline\ Navigator|OpaL|Openfind|OpenTextSiteCrawler|OrangeBot|PageGrabber|Papa\ Foto|PackRat|pavuk|pcBrowser|PersonaPilot|Ping|PingALink|Pingdom|Pockey|POE-Component-Client-HTTP|Powermarks|Proxy|psbot|PSurf|psycheclone|puf|Pump|PushSite|QRVA|RealDownload|Reaper|Recorder|ReGet|replacer|RepoMonkey|Robozilla|Rover|RPT-HTTPClient|Rsync|Scooter|SearchExpress|searchhippo|searchterms\.it|Second\ Street\ Research|Seeker|Shai|Siphon|sitecheck|sitecheck.internetseer.com|SiteSnagger|SlySearch|SmartDownload|snagger|Snake|SpaceBison|Spegla|SpiderBot|sproose|SqWorm|Stripper|Sucker|SuperBot|SuperHTTP|Surfbot|SurfWalker|Szukacz|tAkeOut|tarspider|Teleport\ Pro|Templeton|TencentTraveler|TrueRobot|TV33_Mercator|UIowaCrawler|UtilMind|URLSpiderPro|URL_Spider_Pro|Vacuum|vagabondo|vayala|visibilitygap|VoidEYE|vspider|Web\ Downloader|w3mir|Web\ Data\ Extractor|Web\ Image\ Collector|Web\ Sucker|Wweb|WebAuto|WebBandit|web\.by\.mail|Webclipping|webcollage|webcollector|WebCopier|webcraft@bea|webdevil|webdownloader|Webdup|WebEMailExtrac|WebFetch|WebGo\ IS|WebHook|Webinator|WebLeacher|WEBMASTERS|WebMiner|WebMirror|webmole|WebReaper|WebSauger|Website|Website\ eXtractor|Website\ Quester|WebSnake|Webster|WebStripper|websucker|webvac|webwalk|webweasel|WebWhacker|WebZIP|Wget|Whacker|whizbang|WhosTalking|Widow|WISEbot|WWWOFFLE|x-Tractor|^Xaldon\ WebSpider|WUMPUS|Xenu|XGET|Yeti|zermelo|Zeus.*Webster|Zeus [NC]
RewriteRule ^.* - [F,L]

# Bots starting with Web
RewriteCond %{HTTP_USER_AGENT} ^web(zip|emaile|enhancer|fetch|go.?is|auto|bandit|clip|copier|master|reaper|sauger|site.?quester|whack) [NC,OR]
 
# Anywhere in UA -- Greedy REGEX
RewriteCond %{HTTP_USER_AGENT} ^.*(craftbot|download|extract|stripper|sucker|ninja|clshttp|webspider|leacher|collector|grabber|webpictures).*$ [NC]
RewriteRule ^.* - [F,L]
__________________
"Being an expert isn't telling other people what you know. It's understanding what questions to ask, and flexibly applying your knowledge to the specific situation at hand. Being an expert means providing sensible, highly contextual direction." Jeff Atwood
SEO Workers - Search Engine Optimization Consulting Company | SEO Analysis Tool | Webnauts Net SEO
Reply With Quote
  #23 (permalink)  
Old 07-17-2008, 08:53 AM
WebProWorld Veteran
 
Join Date: Jun 2004
Location: Australia
Posts: 531
watto RepRank 2watto RepRank 2
Default Re: SPAM Attack!

I have added this code and it doesn't seem to be giving me any trouble. I'll leave it there for a couple of days and see if it makes a difference.

In fact I will know by tomorrow morning if it worked. It is 10pm in Sydney Australia, so I will post the results in the morning.

watto
Reply With Quote
  #24 (permalink)  
Old 07-17-2008, 06:22 PM
WebProWorld Veteran
 
Join Date: Jun 2004
Location: Australia
Posts: 531
watto RepRank 2watto RepRank 2
Default Re: SPAM Attack!

Unfortunately I had 5 spam listing waiting for me in my admin thismorning. So this code did not work for me.

Regards

watto
Reply With Quote
  #25 (permalink)  
Old 07-17-2008, 07:26 PM
Webnauts's Avatar
WebProWorld 1,000+ Club
WebProWorld MVP
 
Join Date: Aug 2003
Location: Worldwide
Posts: 8,162
Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9
Default Re: SPAM Attack!

Sometimes I feel pissed off sharing things for free, which people would have paid money for. I am afraid you did not understand what it is about. Anyway, if someone has time, please explain. No time for that sorry.

And Peter, please do me a favor and take it out of your .htaccess file. I would appreciate that very much.
__________________
"Being an expert isn't telling other people what you know. It's understanding what questions to ask, and flexibly applying your knowledge to the specific situation at hand. Being an expert means providing sensible, highly contextual direction." Jeff Atwood
SEO Workers - Search Engine Optimization Consulting Company | SEO Analysis Tool | Webnauts Net SEO
Reply With Quote
  #26 (permalink)  
Old 07-17-2008, 07:27 PM
Webnauts's Avatar
WebProWorld 1,000+ Club
WebProWorld MVP
 
Join Date: Aug 2003
Location: Worldwide
Posts: 8,162
Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9
Default Re: SPAM Attack!

Quote:
Originally Posted by watto View Post
Unfortunately I had 5 spam listing waiting for me in my admin thismorning. So this code did not work for me.

Regards

watto
Did you setup the contact form? Or you want to drive me nuts. Geesh...
__________________
"Being an expert isn't telling other people what you know. It's understanding what questions to ask, and flexibly applying your knowledge to the specific situation at hand. Being an expert means providing sensible, highly contextual direction." Jeff Atwood
SEO Workers - Search Engine Optimization Consulting Company | SEO Analysis Tool | Webnauts Net SEO
Reply With Quote
  #27 (permalink)  
Old 07-17-2008, 08:54 PM
WebProWorld Veteran
 
Join Date: Jun 2004
Location: Australia
Posts: 531
watto RepRank 2watto RepRank 2
Default Re: SPAM Attack!

webnauts, I'm not quite sure why you always have such an aggressive tone, not oly with this post, but most of the post I see you in. If you can't help people in this forum without getting losing your cool, then don't.

I'm sorry I'm not up to speed with your knowledge of SEO. Please fogive me oh great one!!

No I didn't set up the form. I only used the code.

watto
Reply With Quote
  #28 (permalink)  
Old 07-18-2008, 01:44 AM
Webnauts's Avatar
WebProWorld 1,000+ Club
WebProWorld MVP
 
Join Date: Aug 2003
Location: Worldwide
Posts: 8,162
Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9Webnauts RepRank 9
Default Re: SPAM Attack!

Quote:
Originally Posted by watto View Post
webnauts, I'm not quite sure why you always have such an aggressive tone, not oly with this post, but most of the post I see you in. If you can't help people in this forum without getting losing your cool, then don't.

I'm sorry I'm not up to speed with your knowledge of SEO. Please fogive me oh great one!!

No I didn't set up the form. I only used the code.

watto
Sorry man. Its just when I am too busy and I want to make a break, I come over here to help, hoping to feel better and then... you know. Did you ever read somewhere here me asking questions?

What upset me was, not that you are not advanced in SEO or in this case Apache configuration, but that I said before that you should setup that form and in addition you could add that stuff in your .htaccess file. That .htaccess code prevents the a huge number of bad bots to access your site and you save a hell a lot of bandwidth and resources.

One again, sorry man. And maybe you are right. I most probably should leave these forums at some point. My help is not good enough as I see. Or maybe not for you?

Well if I will still hang around here, I promise you that I will never bother you when you start threads or have questions. Endless of people appreciate my help since years now, even if some times I behave aggressive.

And I never called someone in Australia for hours trying to help someone for free as I did with you already. Anyway...

Take care.
__________________
"Being an expert isn't telling other people what you know. It's understanding what questions to ask, and flexibly applying your knowledge to the specific situation at hand. Being an expert means providing sensible, highly contextual direction." Jeff Atwood
SEO Workers - Search Engine Optimization Consulting Company | SEO Analysis Tool | Webnauts Net SEO

Last edited by Webnauts; 07-18-2008 at 01:59 AM.
Reply With Quote
  #29 (permalink)  
Old 07-18-2008, 04:15 AM
WebProWorld Veteran
 
Join Date: Jun 2004
Location: Australia
Posts: 531
watto RepRank 2watto RepRank 2
Default Re: SPAM Attack!

Apology accepted.

I'm sure you have been a great help to many people over the years on this forum. I don't doubt that. But if you are going to help people, show a little respect and have some patients with them. That's all. And I honestly do appreciate all the help I receive through this forum, but what I don't appreciate is people showing disrespect to me. I will not tolerate it from my employees and I definitely will not tolerate it from people I have never met.

Not really sure if your aggresiveness was justified in your answer. Maybe you should take a 'chill pill' and enjoy life...

I think it would be a shame if you left this forum because you do have great advice and information to share with fellow members, so why don't you 'man up' and control your aggressive comments and continue helping people in your spare time.

Remember, when you help people it is because you want to help them.

Regards

watto
Reply With Quote
  #30 (permalink)  
Old 07-18-2008, 02:23 PM
WebProWorld New Member
 
Join Date: Sep 2006
Location: Wisconsin, US
Posts: 3
tameone RepRank 0
Default Re: SPAM Attack!

I use a very simple solution for contact form spam. I add a text input field like "How much is 2+2?" and name it something like "captcha_answer". The correct answer to the question is hard-coded at the top of the page as <?php $correct_captcha_answer = 4; ?> (I use PHP) Then, when the visitor clicks submit, their answer is compared to the correct answer. Again in PHP:

$continue = false; //assume the answer is incorrect
if((isset($_POST['captcha_answer'])) && ($_POST['captcha_answer'] == $correct_captcha_answer)) {
$continue = true; //They got it right, so let's continue
}

if($continue) {
// process your form submission

} // END of if($continue)

I'm sure it's not failproof... human spammers will still get through, but it does help a LOT. Plus it doesn't depend on fancy tricks that can cause conflicts with things like Google's Autofill. The visitor only has to be of reasonable intelligence. I read of this trick somewhere, can't remember where, and have been using it for almost a year with good results.

Good luck to you.
Reply With Quote
  #31 (permalink)  
Old 07-18-2008, 04:36 PM
spiderbait's Avatar
WebProWorld Pro
 
Join Date: Oct 2003
Location: Gibsons, BC, Canada
Posts: 271
spiderbait RepRank 5spiderbait RepRank 5spiderbait RepRank 5spiderbait RepRank 5spiderbait RepRank 5spiderbait RepRank 5
Default Re: SPAM Attack!

Quote:
Originally Posted by gavinscott View Post
The problem with this approach is that a legitimate user using autofill may inadvertently fill in the field without realising it and have their enquiry rejected. This might be avoided if you name the hidden field something nonsensical.
I've managed to avoid this problem (users with autofill) by using the free tools from wForms

These tools include JavaScript for validating forms, controlling conditional selections (fields hidden until user makes a particular selection) and field synchronization.

What's great about this is if you put your "website" field into a conditional selection, but don't create a method to select it, the field remains hidden at all times. And with the wForms scripts, you can choose the option that hidden fields are NOT submitted.

VOILA, since most robots aren't using JavaScript you've created a form honeypot that only robots will fill out, (autofill may fill out but won't be submitted) and your script for detecting a value in the "website" field will be able to safely trash those submissions.

NOTE: this doesn't address webnauts' comment regarding Google not liking display:none. Personally, I'm not concerned about this because don't believe it's become an issue yet. If at some point it does become an issue, I'll revisit this solution. But until then, I'm quite happy with this approach.
__________________
Jade Burnside, Ahead of the Web
What good is your web site if no one can find it?
SEO & Optimized Web Site Design
Reply With Quote
Reply

  WebProWorld > Search Engines > Search Engine Optimization Forum

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
I think someone is trying to attack my site? Inspector Search Engine Optimization Forum 2 05-16-2006 11:56 AM
Nazi’s Sober Blitzkrieg: Right Wing SPAM Attack jmiller IT Discussion Forum 0 05-17-2005 01:15 PM
click attack arpecop Google AdWords/Google AdSense 15 04-15-2005 01:25 AM
Attack of spyware clocker Internet Industry 3 02-18-2005 10:32 AM


All times are GMT -4. The time now is 12:21 PM.



Search Engine Optimization by vBSEO 3.3.0