php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #64929 Bugtracker rejects this text as spam: if ($exception instanceof SException ) {
Submitted: 2013-05-27 14:44 UTC Modified: 2013-06-05 16:19 UTC
Votes:1
Avg. Score:5.0 ± 0.0
Reproduced:0 of 1 (0.0%)
From: matteosistisette at gmail dot com Assigned: danbrown (profile)
Status: Closed Package: Website problem
PHP Version: Irrelevant OS:
Private report: No CVE-ID: None
 [2013-05-27 14:44 UTC] matteosistisette at gmail dot com
Description:
------------
See this bug report:
https://bugs.php.net/bug.php?id=64924

I am desperately trying to post a snippet of code that triggers a PHP crash, 
hence contributing valuable information to help fix a tremendous bug, but the 
broken paranoid antispam system rejects it saying "please don't spam our bug 
tracker". 

(and all it accomplishes is to generate in me a strong desire to flood the 
bugtracker with lots of _real_ spam for pure vengeance.)

And I can't even post the example text that triggers the bogus antispam 
rejection, because THIS very form is rejecting it as spam as well.
So the bug is preventing from fixing itself.

Drop me an email at mat teo sis ti sett e [at] gma il [dot] com and I'll reply 
with the text that triggers the bogus antismap.
(if you are interested in fixing this issue at all)

Expected result:
----------------
should post the comment

Actual result:
--------------
rejects the comment with the bogus error: "Please don't spam our bug tracker"

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2013-05-27 15:15 UTC] matteosistisette at gmail dot com
UNBELIEVABLE.
What causes the bugtracker to reject the message as spam is the mere precence of 
the "at" character (you know, the one used in emails).

How can you rely on such a demential method to detect spam?
 [2013-05-27 15:15 UTC] matteosistisette at gmail dot com
test @ test
 [2013-05-27 15:16 UTC] matteosistisette at gmail dot com
Ok, no, it's the combination of @ more something else.
However, removing the @'s from the snipped of code allowed me to post it.
 [2013-05-28 18:03 UTC] philip@php.net
I'm guessing you are attempting to post text with a bunch of URLs. Is that true?
 [2013-05-28 18:17 UTC] matteosistisette at gmail dot com
No, Not even a single url.

Now it seems like it's not the @'s.
I tried to post a code that included a error handler and an exception handler.
When I posted only the error handler it was accepted. I'll try to post the whole 
message in pieces.
 [2013-05-28 18:18 UTC] matteosistisette at gmail dot com
Good catch.

Here is my error handler (and also my exception handler though I don't think
it's involved)

set_error_handler(function($errno, $errstr, $errfile, $errline){
    http_response_code(500);
    header("Content-Type: text/plain");
    $backtrace=debug_backtrace();
    $output="$errstr \n @ $errfile($errline)\n";
    foreach ($backtrace as $i=>$item) {
        //if (isset($item['args'])) print_r($item['args']);
        if ($i>0) $output.= "#$i. @ ".$item['file']."
(".$item['line']."): ".(isset($item['class'])?
$item['class']:'')."::".$item['function']."(".(is_array($item['args'])?
@implode(",",$item['args']):'').")\n";
    }
    S::error($output);
    die($output);
});
 [2013-05-28 18:19 UTC] matteosistisette at gmail dot com
set_exception_handler(function($exception) {
 [2013-05-28 18:20 UTC] matteosistisette at gmail dot com
[OMITTING LINE THAT SEEMS TO BE PROBLEMATIC]
        http_response_code($exception->getCode());
    }else http_response_code(500);
    header("Content-Type: text/plain");
    S::error($output=$exception->getMessage()." \n @ ".$exception-
>getFile()."(".$exception->getLine().")\n".$exception->getTraceAsString());
    die($output);
});
 [2013-05-28 18:21 UTC] matteosistisette at gmail dot com
OK I FOUND IT: it's this code: I'll insert random spaces in it:


if ( $ e xc ep tio n in sta nce of S Exc e pti on   ) {
 [2013-05-28 18:22 UTC] matteosistisette at gmail dot com
Can anybody tell me what it has that looks like spam?
 [2013-05-28 18:23 UTC] matteosistisette at gmail dot com
title edited
 [2013-05-28 18:23 UTC] matteosistisette at gmail dot com
-Summary: Bugtracker rejects legitimate and useful comments as spam +Summary: Bugtracker rejects this text as spam: if ($exception instanceof SException ) {
 [2013-05-28 18:52 UTC] salathe@php.net
I'm sorry, we don't allow "sex" on the bug tracker unless part of 
OutOfBoundsException.

https://github.com/php/web-bugs/blob/99803ca/include/functions.php#L274
 [2013-05-28 23:30 UTC] matteosistisette at gmail dot com
Oh my fucking god, unbelievable.

You need to refine the algorithm that detect the word a little bit, for god's 
sake. It's just three letters, the probability that they appear together 
randomly is pretty high. And you must also improve the error message to give the 
legitimate user a clue.

Or remove the ridiculous restriction altogether. There is already a captcha to 
block spambots. How many human geing are going to come in and manually write 
spam posts about s ex, vi agra and the like in a bug tracker?
Actually, those two every billion year trying to do that, will immediately find 
the way to post their shit by just adding dots and spaces. 

You only people you will block are those who only try to post a bug report and 
would never realise the reason of the rejection has anything to do with xes.


This is really insulting to people who waste their time trying to report a bug, 
to help make php better.

Note that I am using offending language on purpose, just to see how fucked up 
this antispam is that doesn't let you mention that 3-letter word but probably 
allows me to write "motherfucker".
 [2013-05-28 23:32 UTC] matteosistisette at gmail dot com
There's even the word "a s i a n".
I wonder how many people trying to report issues with support for, say, oriental 
languages, may have been victim of this immense stupidity
 [2013-06-05 16:04 UTC] danbrown@php.net
One simple way to see that it's fixed is to stop insulting people and offer a 
patch.  Shame you instead decided to use your time and intelligence to craft 
unnecessary responses.
 [2013-06-05 16:19 UTC] danbrown@php.net
-Status: Open +Status: Closed -Assigned To: +Assigned To: danbrown -Block user comment: No +Block user comment: Yes
 [2013-06-05 16:19 UTC] danbrown@php.net
The fix for this bug has been committed. Since the websites are not directly
updated from the repository, the fix might need some time to spread
across the globe to all mirror sites, including PHP.net itself.

Thank you for the report, and for helping us make PHP.net better.


 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Fri Apr 26 11:01:31 2024 UTC