#15847: Spam control is misconfigured and rejects all anonymous bug reports
----------------------+-------------------------------------------
 Reporter:  follower  |         Owner:  nobody
     Type:  Bug       |        Status:  new
Milestone:            |     Component:  Djangoproject.com Web site
  Version:  1.2       |      Severity:  Normal
 Keywords:            |  Triage Stage:  Unreviewed
Has patch:  0         |
----------------------+-------------------------------------------
 It appears that if an attempt is made to submit a new ticket without
 logging in the following error is thrown:

 {{{
 Trac Error

 Submission rejected as potential spam (BlogSpam says content is spam
 (badip:state/blacklist.d/127.0.0.1))
 }}}

 According to IRC and searches this problem has been occurring for quite a
 while.

 This is a particularly bad problem as it discourages new people from
 submitting bug reports. (As demonstrated by reading mailing list posts.)

 Depending on the browser it potentially leads to data-loss of the report
 also.

 It seems like the actual remote IP of the creator isn't being passed on to
 the BlogSpam functionality correctly so localhost (127.0.0.1) is being
 used instead.

 If this configuration can not be fixed then IMO Trac should be configured
 to require log in before submission of new tickets.

-- 
Ticket URL: <http://code.djangoproject.com/ticket/15847>
Django <http://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to django-updates@googlegroups.com.
To unsubscribe from this group, send email to 
django-updates+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.

Reply via email to