Getting Spam

Junefly · Post by **Junefly** » Fri Nov 10, 2006 2:48 am

Script URL:
Version of script:1.4
Hosting company:Webmasters
URL of phpinfo.php:
URL of session_test.php:
What terms did you try when SEARCHING for a solution:ERR R

Write your message below:

This last two weeks I have been getting spam in the guestbook with nothing in the comments except ERR R. These seem to be open proxies as they are all sent from different ip numbers. Can I stop this some way?

All the log shows is:
62.50.80.2 www.rampbbs.net - [09/Nov/2006:21:26:08 -0500] "GET /visitor/gbook.php?a=sign HTTP/1.0" 200 3429 "http://rampbbs.net/visitor/gbook.php?a=sign" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
62.50.80.2 www.rampbbs.net - [09/Nov/2006:21:26:09 -0500] "POST /visitor/gbook.php HTTP/1.0" 200 3427 "http://www.rampbbs.net/visitor/gbook.php?a=sign" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
62.50.80.2 www.rampbbs.net - [09/Nov/2006:21:26:16 -0500] "POST /visitor/gbook.php? HTTP/1.0" 200 2472 "http://www.rampbbs.net/visitor/gbook.php?a=sign" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"

Thanks
Junefly

jamajam · Post by **jamajam** » Fri Nov 10, 2006 9:22 am

i received a whole load of these today, too. all posted with the message ERR R

i would be interested in a solution, please

Sylvia · Post by **Sylvia** » Fri Nov 10, 2006 9:40 am

I'm getting exactly the same thing in mine.

It started about 2 weeks ago. For a while I was taking each individual IP (since it changed continuously) and blocking it. The spam continued for a few days after this, and I kept on blocking the IPs until last Sunday - it just stopped suddenly, almost like they'd given up.

I knew it was too good to last though.

Yesterday this spammer came back with a vengeance and posted 13 of these "ERR R" messages in a row (occasionally alternating with "ERR 2"). I don't see the point behind it, because I don't have the website field enabled on my guestbook. Seems like they just get a kick out of annoying the bejeezus out of us.

Either that or they don't know that the messages aren't producing URLs.

I was wondering... is there a way to block messages which fall under a certain amount of characters in length? The shortest real message in my guestbook is 12 characters including spaces.

Post by **Klemen** » Fri Nov 10, 2006 10:35 am

The FIRST thing to do when you encounter SPAM is - upgrade your guestbook to the latest version!

The current version is 1.43, Junefly you have version 1.4 and the other two I don't know as you didn't post anything.

Go to http://www.phpjunkyard.com/php-guestbook-script.php , download the latest version and update your guestbook (instructions in the readme.htm file).

jamajam · Post by **jamajam** » Fri Nov 10, 2006 11:01 am

doh !!

i knew you'd say that (i'm using version 1.35)
i hate changing things when they're working fine - things never seem to go smoothly for me

Post by **Klemen** » Fri Nov 10, 2006 11:07 am

Well, SPAM evolves and the anti-spam protection must as well if we are to keep it out. And the protection has improved a lot since 1.35.

And besides, upgrading isn't that hard with GBook

jamajam · Post by **jamajam** » Fri Nov 10, 2006 11:12 am

well, if you're sure it's easy ....... i'll give it a try later

hopefully this will solve the problem

many thanks !!

Junefly · Post by **Junefly** » Fri Nov 10, 2006 7:38 pm

Klemen Stirn wrote:The FIRST thing to do when you encounter SPAM is - upgrade your guestbook to the latest version!

The current version is 1.43, Junefly you have version 1.4 and the other two I don't know as you didn't post anything.

Go to http://www.phpjunkyard.com/php-guestbook-script.php , download the latest version and update your guestbook (instructions in the readme.htm file).

Got it and it is now installed. Guess I missed that 1.43 update somehow..

Thanks Klemen