Changes between Version 18 and Version 19 of ProtectionFromSpam


Ignore:
Timestamp:
Apr 8, 2017, 11:32:43 PM (7 years ago)
Author:
davea
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • ProtectionFromSpam

    v18 v19  
    1111The spam typically contains links to commercial web sites
    1212(to increase their Google page rank).
     13Spammers typically use automated scripts.
    1314
    14 Spammers typically use automated scripts.
     15BOINC provides tools for preventing spam,
     16and for removing existing spam.
     17
     18== Preventing spam ==
     19
     20=== Spam user profiles ===
     21==== Using reCAPTCHA ====
     22To prevent spam profile creation, [http://recaptcha.net/ reCAPTCHA] system can be used.
     23For every profile modification it displays an image containing text,
     24which is recognizable to humans but not computers.
     25
     26In order to use reCAPTCHA, to register your web site on [http://www.google.com/recaptcha] and get a pair of keys.
     27Add these keys to config.xml:
     28{{{
     29<recaptcha_public_key>Site key</recaptcha_public_key>
     30<recaptcha_private_key>Secret key</recaptcha_private_key>
     31}}}
     32
     33==== Minimum credit ====
     34You may also require a minimum amount of credit to create or edit a profile.
     35To do so, put a {{{<profile_min_credit>}}} element in your [ProjectOptions config.xml] file
     36
     37=== Spam user accounts using stopforumspam.com ===
     38
     39http://www.stopforumspam.com is a service that maintains a database of spammer
     40email addresses and IP addresses.
     41If you include
     42{{{
     43define("USE_STOPFORUMSPAM", true);
     44}}}
     45in your html/project/project.inc, this database will be checked before
     46creating new accounts.
     47
     48=== Spam message board posts ===
     49
     50==== Akismet ====
     51BOINC message boards may be attacked by spammers.
     52The anti-spam system from [http://www.akismet.com/ akismet.com] can be used to deal with this.
     53
     54It is disabled by default; when enabled,
     55every time a forum post is made a remote database at akismet.com is checked to see if the message is spam.
     56If Akismet reports that the message is spam, it is blocked, notifying the user on screen.
     57
     58To use Akismet, you have to acquire a free API key (12 character alphanumeric string).
     59You can get the key by registering for a [http://www.wordpress.com/ WordPress.com] user account.
     60The API key will be emailed to you after you register.
     61
     62''Note: If you are a commercial entity or if you are making more than $500 from your website,
     63please get a commercial key instead.''
     64
     65Once you have the key, you have to add a new tag to your [ProjectOptions config.xml] to enable the system:
     66    `<akismet_key>1234567890ab</akismet_key>`
     67
     68To test if the system is working, create a user with name "''viagra-test-123''"
     69(this is an official test string) and try creating a new thread.
     70Akismet should block the message.
     71
     72==== Minimum credit to post ====
     73
     74You can require that users have a minimum amount of credit to post
     75on a forum using the following database fields:
     76
     77 '''forum.post_min_expavg_credit''':: users must have this amount of average credit to post on the forum
     78 '''forum.post_min_total_credit''':: users must have this amount of total credit to post on the forum
     79
     80There is currently no web interface for these; you have to set them manually
     81using mysql or phpMyAdmin.
     82These fields are at the forum level so that, for example, you
     83can protect some forums while leaving a "Help" forum open.
    1584
    1685== Cleaning up spam ==
    1786
    18 The script '''html/ops/delete_spammers.php''' can be used to clean up spam.
     87The script '''html/ops/delete_spammers.php''' can be used to clean up existing spam.
    1988It deletes selected user accounts, including their profile and forum posts.
    2089The usage is
     
    56125Use with --min_days 1 or 2 to avoid deleting new legit accounts.
    57126
     127'''--teams''': delete teams (and their owners and members) where the team
     128  * has no total credit
     129  * has description containing a link, or a URL
     130  * is not a BOINC-Wide team
     131and the owner and members
     132  * have no posts
     133  * have no hosts
     134
     135
    58136'''--list filename''':
    59137  The given file contains a list of user IDs, one per line.
     
    70148  * have descriptions containing a link
    71149  * the owner has no hosts and no posts
    72 
    73 == Preventing automated profile creation ==
    74 === Using reCAPTCHA ===
    75 To prevent automated profile creation, [http://recaptcha.net/ reCAPTCHA] system can be used.
    76 For every profile modification it displays an image containing text,
    77 which is recognizable to humans but not computers.
    78 
    79 In order to use reCAPTCHA, to register your web site on [http://www.google.com/recaptcha] and get a pair of keys.
    80 Add these keys to config.xml:
    81 {{{
    82 <recaptcha_public_key>Site key</recaptcha_public_key>
    83 <recaptcha_private_key>Secret key</recaptcha_private_key>
    84 }}}
    85 
    86 === Minimum credit ===
    87 You may also require a minimum amount of credit to create or edit a profile.
    88 To do so, put a {{{<profile_min_credit>}}} element in your [ProjectOptions config.xml] file
    89 
    90 == Using stopforumspam.com ==
    91 
    92 http://www.stopforumspam.com is a service that maintains a database of spammer
    93 email addresses and IP addresses.
    94 If you include
    95 {{{
    96 define("USE_STOPFORUMSPAM", true);
    97 }}}
    98 in your html/project/project.inc, this database will be checked before
    99 creating new accounts.
    100 
    101 == Protecting message boards from spam ==
    102 
    103 === Akismet ===
    104 BOINC message boards may be attacked by spammers.
    105 The anti-spam system from [http://www.akismet.com/ akismet.com] can be used to deal with this.
    106 
    107 It is disabled by default; when enabled,
    108 every time a forum post is made a remote database at akismet.com is checked to see if the message is spam.
    109 If Akismet reports that the message is spam, it is blocked, notifying the user on screen.
    110 
    111 To use Akismet, you have to acquire a free API key (12 character alphanumeric string).
    112 You can get the key by registering for a [http://www.wordpress.com/ WordPress.com] user account.
    113 The API key will be emailed to you after you register.
    114 
    115 ''Note: If you are a commercial entity or if you are making more than $500 from your website,
    116 please get a commercial key instead.''
    117 
    118 Once you have the key, you have to add a new tag to your [ProjectOptions config.xml] to enable the system:
    119     `<akismet_key>1234567890ab</akismet_key>`
    120 
    121 To test if the system is working, create a user with name "''viagra-test-123''"
    122 (this is an official test string) and try creating a new thread.
    123 Akismet should block the message.
    124 
    125 === Minimum credit to post ===
    126 
    127 You can require that users have a minimum amount of credit to post
    128 on a forum using the following database fields:
    129 
    130  '''forum.post_min_expavg_credit''':: users must have this amount of average credit to post on the forum
    131  '''forum.post_min_total_credit''':: users must have this amount of total credit to post on the forum
    132 
    133 There is currently no web interface for these; you have to set them manually
    134 using mysql or phpMyAdmin.
    135 These fields are at the forum level so that, for example, you
    136 can protect some forums while leaving a "Help" forum open.
    137