[Trac] Re: stealth spams in many places

2007-08-24 Thread Alec Thomas

On 8/22/07, adren <[EMAIL PROTECTED]> wrote:
>
> Hi,
>
> I just want to warn Trac users that "invisible" spams links are being
> inserted by spammers in many Trac Wikis
>
> usually the links are put at the top (or bottom) of the page with a
> special style that renders the links invisible when looked in html
> mode
>
> usually the links are put in the form :
>
> --%<-%<-%<-%<-%<-%<-%<-%<-%<-
> %<-%<---
> {{{
> #!html
> 
> http://spammer.tld/v1agra.html";>cheap v1agra
> 
> }}}
> --%<-%<-%<-%<-%<-%<-%<-%<-%<-
> %<-%<---
>
> to check for a sample of this kind of inserting :
> http://www.google.com/search?q=style%3D%22position:absolute%3Bleft:-40px%3Bheight:1px%3B%22&client=iceweasel-a&rls=org.debian:fr:unofficial&start=0&sa=N
> (needless to say that there could be other ways to hide the links and
> this search is not exhaustive)

This is a well known trick, but your search is disturbing in that it
illustrates just how many Trac installs are unmaintained Spam facilitators :(

-- 
Evolution: Taking care of those too stupid to take care of themselves.

--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups "Trac 
Users" group.
To post to this group, send email to trac-users@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/trac-users?hl=en
-~--~~~~--~~--~--~---



[Trac] Re: stealth spams in many places

2007-08-24 Thread Michael Renzmann

Hi.

> I just want to warn Trac users that "invisible" spams links are being
> inserted by spammers in many Trac Wikis usually the links are put at
> the top (or bottom) of the page with a special style that renders the
> links invisible when looked in html mode

Using the spamfilter plugin along with a properly maintained list of
"forbidden" words should help against that problem.

Another option is ScallyWhack; in the current release it helps by simply
blocking all wiki edits, tickets and comments to tickets that contain
http:// or https:// from anonymous visitors, but I want to make that a bit
smarter once I find a bit of time for it.

Bye, Mike

--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups "Trac 
Users" group.
To post to this group, send email to trac-users@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/trac-users?hl=en
-~--~~~~--~~--~--~---