XF 1.5 Dealing with spam when thread title is a URL?

cbpayne

Member
The only spam that gets through all the spam block thingy's I use are those that use a URL as the thread title
I get up to a dozen posts a day pretty similar to the the screen shot attached. There is no link in the actual post body
I don't want to send all new posts to moderation

Any tips on a way to automatically block URL's as the thread title?
 

Attachments

Mike

XenForo developer
Staff member
There's actually a straightforward way to match this via the spam phrases option. Add this to that:
Code:
/^https?:\/\/\S+\n/si
This should match those threads and you can send them to manual approval or reject them. (I'd recommend manual approval at least while you test the change.)
 

cbpayne

Member
Thanks Mike; will implement and report back.

Out of curiosity are many other forums getting this spam?
I do not know why they do it. The URL is the thread title, so its not a link back to their site and I see no benefit in it for them. its just damn annoying.
 

whynot

Well-known member
I do not know why they do it. The URL is the thread title, so its not a link back to their site and I see no benefit in it for them.
The search engines pick up the thread title first and it stays forever or until changed-deleted.
 

Marco Famà

Active member
There's actually a straightforward way to match this via the spam phrases option. Add this to that:
Code:
/^https?:\/\/\S+\n/si
This should match those threads and you can send them to manual approval or reject them. (I'd recommend manual approval at least while you test the change.)
hey Mike
does this stop also "genuine" threads containing links in the body?

I mean.. what if someone posts a genuine thread with proper subject AND in the body it says something like:

"check my website out:
http://www.acme.com"

?

Would that be rejected?

I have the same issue and would love it to be stopped ONLY if a URL occurs in the subject line..

is it achievable?

thanks
Marco
 

Mike

XenForo developer
Staff member
That won't stop a link within a post. It specifically matches the beginning of the string (which is the title if present) and requires a line break afterwards. These will generally not be true of a post (particularly with extra markup for BB code).
 

tenants

Well-known member
The begging of the string is not always how these spammers post "links" in the title from what I've seen, and they certainly don't always start with http or even www

For example

upload_2017-2-12_19-28-50.png
 

upnet

Active member
@Mike, we are using this phrase and it's catching some but not all? First attachment shows trigger log catching one and in moderation, second attachment shows post going through? Most are going through. Any ideas?

D89155CD-88C5-418C-8F49-7E14E14016E9.jpeg
AE061E10-D557-4ABB-A544-01FB266019AB.jpeg
 

todobetas

Member
There's actually a straightforward way to match this via the spam phrases option. Add this to that:
Code:
/^https?:\/\/\S+\n/si
This should match those threads and you can send them to manual approval or reject them. (I'd recommend manual approval at least while you test the change.)
Hi Mike, I Have same problem.

Where do I insert this code?:

Code:
/^https?:\/\/\S+\n/si
Thanks
 

MatthewC

Member
There's actually a straightforward way to match this via the spam phrases option. Add this to that:
Code:
/^https?:\/\/\S+\n/si
This should match those threads and you can send them to manual approval or reject them. (I'd recommend manual approval at least while you test the change.)
I have both /^https?:\/\/\S+\n/si and /^http?:\/\/\S+\n/si as part of my spam phrases yet messages with URLs as topic are still getting through:

1533583721976.png

1533583614471.png

What am I doing wrong?

I know this thread is for Xenforo 1.5 and I am using version 2, but I'm assuming this should still apply to version 2?
 
I'd like to know to... The only spam getting through is the URL's in subjects. I've tried adding the http thing but they still come?

/^http?:\/\/\S+\n/si
 

MatthewC

Member
I've tried /^http(|s):\/\/\S+\n/si and /^http?:\/\/\S+\n/si and I am still getting spam where the title of the post begins with http. Is /^http(|s):\/\/\S+\n/si working for anyone else?
 

Snog

Well-known member
It shouldn't be getting through, especially in the title.

shouldnt.png

Automatically moderated with that regular expression...

moderated.png



Double check that you don't have registered users able to bypass the spam check..

bypass.png
 
Last edited:
Top