In this, Our darkest hour before the Spam, stalwart we
[...insert pseudo-Crispin's Day blah...]
and shall remain ever vigilant!
Or, if you prefer:
NONE SHALL PASS!
02-12-2015, 02:56 AM
(This post was last modified: 02-12-2015, 02:56 AM by AndySlater.)
Just woke to find your emails (they arrived here between 2am and 3am). Well done for sorting it out so quickly.
How many posts were there and by how many posters?
The forum's defences are pretty good with the way you have to register and the fact that you have to respond to an email. It's possible for a bot to do that... but it would have to be quite sophisticated... and the email address has to be valid.
Once in however, maybe there was manual intervention, maybe not, creating posts is not too difficult.
HOWEVER, forum software often has "flood controls" which can impose limits on how quickly a member can post.
One method imposes a delay between posts. Working on the assumption that a real person, having replied to one post, needs time to a) go to the next, b) read it and/or study at the pictures, c) write their response, I don't see something like imposing a 60 second delay between posts will inconvenience users but make will slow a bot. I say "study" the pictures because some tit, sorry I mean user, who is merely glancing and replying "cool", "cool", "cool" needs slowing down to IM<HO.
Another method I've seen, and it may well be in software we're using, is to limit members to X posts in Y length of time until they have Z posts under their belts i.e. to 10 posts per day until they have 100 posts. That should be enough for any non-pain-in-the-***** newbie and a real help in minimising spammer damager before someone can tackle them.
This is one for you guys to look into because I'm sure that Melly in particular now has much more familiarity with the MyBB admin screens than I do.
There is the restriction on the minimum amount of time that is allowed between posts. If I remember correctly, I had it set to 1-2 minutes in between. I will go in there to check that and possibly bump it up more.
I totally missed all the excitement. Been popping in at 24 to 36 hour intervals. (Although it may show me logged in constantly—I plea tabs.)
As far as I can tell reporting the post just sent me a message in the Admin control panel to let me know the reason why someone thought the content was suspicious. In this case, it was bloody obvious what threads were the issue. So not only did I have to clear out the forums, I also had to clear out 150 messages about flagged posts in my account.
I will look into any options that may be available to have reporting cause some more immediate results, but I'm going to be a bit hesitant to activate them -- mostly because I'm a pessimist. While it would be a handy tool for all the upstanding citizens of the forum, some troll looking for a power trip could easily come along and make an account. They could then use that feature to report (and therefore delete) legitimate topics here just because they can.
Having reporting hide that user sounds like a more interesting option, especially if it hides them only for the member that clicked it. That seems little more jerk-proof to me... I will investigate the settings this weekend.