1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

New Spam tactic: Editing posts

Discussion in 'Forum Management' started by Jeremy, Nov 8, 2013.

  1. Jeremy

    Jeremy XenForo Moderator Staff Member

    We've seen it here, but if you have posts auto-moderate with certain phrases (probably happens regardless), the bots have begun to get past this buy posting something simple that won't trigger most of these filters and then immediately editing the post to insert their spam posts.

    Quite an annoying tactic that you may want to watch out for.
    Liam W, Adam Howard, 0xym0r0n and 3 others like this.
  2. AzzidReign

    AzzidReign Well-Known Member

    Why not just disable editing until they hit 20 posts? Same can go for posting hyperlinks and adding homepages to their profiles.
  3. Jeremy

    Jeremy XenForo Moderator Staff Member

    That is one method to prevent it, yes. That tactic isn't going to happen here though.
  4. AzzidReign

    AzzidReign Well-Known Member

    Why is that?
  5. Jeffin

    Jeffin Well-Known Member

    May be something of this sort: If a new member adds a link or attachment via edit, it automatically pushes it to a moderation queue. Would such a feature have drawbacks if implemented as a core feature?
  6. Brogan

    Brogan XenForo Moderator Staff Member

    Yes, it would potentially cause issues with notifications and post ordering.

    The simplest solution would be to block edits.
    Jeremy likes this.
  7. Alfa1

    Alfa1 Well-Known Member

    Shouldn't edits be subject to auto-moderation?
    If keywords in edits do not trigger auto-moderation, then isn't this a bug?
  8. Jeremy

    Jeremy XenForo Moderator Staff Member

    No, the system is not currently designed to handle edits.
  9. BamaStangGuy

    BamaStangGuy Well-Known Member

    So we have a problem and no solution so far, other than prohibiting the majority of people who would make edits within the rules from doing so.
  10. Moshe1010

    Moshe1010 Well-Known Member

    Not sure why the complains. Editing posts after X time causes problems with SEO. I always give my users 24 hours to edit their posts, and after that they need to contact one of the moderators/admins.
    Adam Howard likes this.
  11. akia

    akia Well-Known Member

    I think you missed the point hes making.

    Spammers are making a post the not spam to get past the filters. Then a few mins later edkting it to add the spam in.
  12. Moshe1010

    Moshe1010 Well-Known Member

    Then these spammers are manual spammers and they have no issue to pass the filters from the first place.
    I really don't understand the "spammers" problem. Never had them. Just use KeyCaptcha or other flash/HTML5/JS based Captcha and they will never come to your board. Using Captcha based on question/numbers/letters is a pure fail.
  13. Brogan

    Brogan XenForo Moderator Staff Member

    There are several solutions.

    Moderate the first x posts, then use a user group promotion to allow them to post, which catches every spammer dead and is what I do on my site.

    Prohibit editing of posts for those users who have made less than x posts, then use a user group promotion.

    That won't affect the majority of members, only those with less than x posts.
  14. Alfa1

    Alfa1 Well-Known Member

    Yes, this means that it works as designed. But the design overlooked an issue which makes the functionality have a loophole. So, not a bug by definition but still something that would be nice if its fixed.
  15. Mike

    Mike XenForo Developer Staff Member

    It's already been changed for 1.3.
  16. Liam W

    Liam W Well-Known Member

    Wait, 1.3 is in the early stages of progress?

    In regards to the issue, just moderate the first few posts. Job done!
  17. Jeremy

    Jeremy XenForo Moderator Staff Member

    Has been for a while.
  18. Code Monkey

    Code Monkey Well-Known Member

    I have very few spammers that even get through all the ip and email checkers. Then akismet is checking their post. It's usually a out of place post anyway so If I see a weird post I check the IP, Google the username and ban if I find even one spam post on Google or even a better sign is finding an account link on Google for that name and then the account doesn't exist anymore when you click it. Means they were already banned elsewhere. Plus I don't allow edits of posts or much else till 20 posts.

Share This Page