php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #81183 Spammers now commenting on bugs.
Submitted: 2021-06-21 03:41 UTC Modified: 2024-07-19 18:53 UTC
From: a at b dot c dot de Assigned:
Status: Open Package: Website problem
PHP Version: Irrelevant OS: Irrelevant
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: a at b dot c dot de
New email:
PHP Version: OS:

 

 [2021-06-21 03:41 UTC] a at b dot c dot de 
Description:
------------
First seen at: https://bugs.php.net/bug.php?id=70059

Even though the "nofollow" attribute means no self-respecting search engine will pay those links any attention, they're still there to brighten the day of people using the bug tracker.


Expected result:
----------------
I dunno ... a smarter captcha won't make a difference because many of these spambots these days actually have cerebra.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2021-06-21 03:41 UTC] a at b dot c dot de 
A domain-specific captcha question?
 [2021-06-21 04:06 UTC] tstarling@php.net 
Why not just delete the comments? If it's only a handful of comments, it's easier to just delete them than to write software to stop them from happening in the first place. I checked the source -- there is a comment delete feature if you're sufficiently privileged. 
https://github.com/php/web-bugs/blob/3a2b04358544336d36e73006a47175d6afb83f1f/www/bug.php#L114
 [2021-06-21 11:00 UTC] danack@php.net 
I'm planning to update the site to:

* only make links to a whitelisted set of sites be actual links.
* hide comments until they are moderated.
* hide user email addresses except for username part and first 2 characters of domain, unless the person viewing the webpage is logged in.


Anyone got any objections to any of those?
 [2021-06-21 11:18 UTC] cmb@php.net 
I think this is better discussed on the internals mailing list,
andd we're likely better off switching to another bugtracking
platform anyway.
 [2021-06-25 13:04 UTC] m at m dot cz 
Why not simply migrate to Github issues?

We can even align the PHP bug IDs with GH ones.
 [2024-07-19 18:53 UTC] cmb@php.net 
The migration to GH issues has already happened, but this bug
tracker is still available, and we still allow comments on
existing tickets, although no new tickets.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Tue Dec 03 05:01:32 2024 UTC