PHPJunkyard support forum

Posted: **Mon Apr 10, 2006 2:00 pm**

Script URL: http://membres.lycos.fr/gadbois/gbook.php
Version of script: 1.35

Hye, I just got an entry :

Name: Jonny Marketz
From: SplitzShoh
E-mail: jonny_75@hotmail.de
Website: http://www.*********.com/

Message (without smileys):
Hello. Guys! I have found this site in the google, and found it interesting and useful! thank you guys for such a nice site. I guess this is maybe stupid but i\'ll try to thank you =) just visit my huge archive of mp3 search4-mp3.com and get something you like It\'s not a spam, sorry if i have tired you, but i just want to thank you =) Your site is so great! It\'s more usefull than google can.

As you can see it's SPAM. But the person who sent this is surely not an human since if you go to my guestbook, you will see that when you want to sign my guestbook, their is no fields for the e-mail and for the website. But I didn't removed the code to send those two info (e-mail and website) to the server.

Just wanted to inform you that spammers can pass you'r Anti-SPAM technology but I will stay with your guestbook since I think it's the best one.

Posted: **Mon Apr 10, 2006 6:40 pm**

geos wrote:Just wanted to inform you that spammers can pass you'r Anti-SPAM technology but I will stay with your guestbook since I think it's the best one.

I've gotten the exact same message for the past two days now:

Jonny Marketz
From: SplitzShoh
Favorite Character: (<--my own personal feild for the guestbook)
Website: http://www.**********.com/
E-mail: jonny_75@hotmail.de Hello. Guys! I have found this site in the google, and found it interesting
and useful! thank you guys for such a nice site. I guess this is maybe
stupid but i\'ll try to thank you =) just visit my huge archive of mp3
search4-mp3.com and get something you like It\'s not a spam, sorry if i
have tired you, but i just want to thank you =) Your site is so great!
It\'s more usefull than google can.

The e-mail address changes though (last time it was from 'jonny_18@hotmail.de'). I've been using the e-mail filter as posted from here. I used it to orignally stop the 'antony@gmail.com' spam. So it feels a bit pointless to keep adding the different e-mails it comes up with with this new spammer. It's just getting tedious.

It's rather disspointing. I know you can't "fully" prevent spam, but the ones that seem to target gbook are just relentious. If you look up that 'antony@gmail.com', the majority of results are from other gbook users.

Can this really ever be prevented? I'm starting to think I just shouldn't have a guestbook at all. How exactly do these spammers in particular get past the security check in the first place? Obviously whatever system they use flies right past it.

// edit //

I just got these lovely spam messages in the gbook just a few minutes ago:

Sank Yank
From: Sijuku
Favorite Character:
Website: http://***************.com/
E-mail: oetsc96@jingscuko.jp I\'m really impressed by visiting this site! Thank you for such a good
site! discount-viagra.tripod.com viagra-by-mail.tripod.com
viagra-discount.tripod.com viagra-effect.tripod.com
viagra-natural.tripod.com viagra-pill.tripod.com
viagra-side-effects.tripod.com Added: April 10, 2006 Delete this entry
Submitted by Comments:

Sank Yank
From: Sijuku
Favorite Character:
Website: http://****************.com/
E-mail: zpudw30@jingscuko.jp I\'m really impressed by visiting this site! Thank you for such a good
site! discount-viagra.tripod.com viagra-by-mail.tripod.com
viagra-discount.tripod.com viagra-effect.tripod.com
viagra-natural.tripod.com viagra-pill.tripod.com
viagra-side-effects.tripod.com Added: April 10, 2006 Delete this entry
Submitted by Comments:

Sank Yank
From: Sijuku
Favorite Character:
Website: http://*****************.com/
E-mail: egcxf69@jingscuko.jp I\'m really impressed by visiting this site! Thank you for such a good
site! discount-viagra.tripod.com viagra-by-mail.tripod.com
viagra-discount.tripod.com viagra-effect.tripod.com
viagra-natural.tripod.com viagra-pill.tripod.com
viagra-side-effects.tripod.com Added: April 10, 2006 Delete this entry
Submitted by Comments:

Sank Yank
From: Sijuku
Favorite Character:
Website: http://**************.com/
E-mail: ghqwt95@jingscuko.jp I\'m really impressed by visiting this site! Thank you for such a good
site! discount-viagra.tripod.com viagra-by-mail.tripod.com
viagra-discount.tripod.com viagra-effect.tripod.com
viagra-natural.tripod.com viagra-pill.tripod.com
viagra-side-effects.tripod.com Added: April 10, 2006 Delete this entry
Submitted by Comments:

Sank Yank
From: Sijuku
Favorite Character:
Website: http://*******************.com
E-mail: koyop27@jingscuko.jp I\'m really impressed by visiting this site! Thank you for such a good
site! discount-viagra.tripod.com viagra-by-mail.tripod.com
viagra-discount.tripod.com viagra-effect.tripod.com
viagra-natural.tripod.com viagra-pill.tripod.com
viagra-side-effects.tripod.com Added: April 10, 2006 Delete this entry

I think that's perhaps the worst I've ever gotten so far. Filtering all those e-mail addresses certainly isn't going to do me any good. I'm sure there's plenty more.

Edited by Klemen: removed links to sites advertised in SPAM - I don't want to advertise theme here

Posted: **Mon Apr 10, 2006 7:08 pm**

I had the same mp3 spam thing happening in my prayer book (not gbook).. It only happened once as I blocked the IP number and nothing has been seen since. (except them trying to again access the prayer book in the logs).

My host runs a .htaccess file and ip and referrer blocking.. I also have access to my logs to get the IP numbers.. I also put the words used to spam like "mp3", "search" etc..... into the banned word list and that also stops any who want to spam the same things.. Gbook also has a banned/bad word list. Try putting the main words that are in the spam in there and see if that helps..

Check to see if maybe your host as something like mine does.

Gbook is my main Guestbook and so far I love it.. I hope you can solve your problem.
Good Luck!

Posted: **Tue Apr 11, 2006 6:17 pm**

Yes, I also noticed this spammer, not sure how he gets through yet though...

Will add any new protection when I figure out how he does it. I will probably remove URL field by default in future versions (with option to include it) to make such spam not useful.

Also a few comments on spam
viewtopic.php?t=772

Posted: **Tue Apr 11, 2006 7:15 pm**

This spammer has not been on Gbook on my site yet.. He came in to another guestbook I run as a prayer book (because I can add comments). Clickable links are not allowed in the message body..

I ran a search on the net for the IP number he used and it was all over the place as being used for spam, so putting the words he used in the spam into the banned word file and banning the ip number he used has stopped him for the time being.

I am going to go ahead and put the spam words in Gbook's en.php file and maybe this will help if he decides to spam Gbook. After all if "mp3" comes out as Angel or search comes out as santa or something it may just stop him before he gets a good start.

I really do not believe all spam will ever be stopped and from looking at other guestbooks on the internet.. Gbook is doing great. I also have the Prayer book pretty much under control now as well.

Thanks again!

Posted: **Tue Apr 11, 2006 10:11 pm**

Something you migth all try:
viewtopic.php?t=782

Posted: **Wed Apr 12, 2006 10:59 am**

By the way: Cam you should upgrade GBook to the 1.35 version and keep the JunkMark settings in recommended range, it should block posts like those you got.

Posted: **Wed Apr 12, 2006 7:58 pm**

[my original post]

Whoops, sorry about including the actual spammer links. Silly me. x_x

Klemen Stirn wrote:By the way: Cam you should upgrade GBook to the 1.35 version and keep the JunkMark settings in recommended range, it should block posts like those you got.

I have to indeed upgrade. I'm not sure how long 1.35 has been out (January?), lol. I'm always the last to know. Hopefully the JunkMark tool will do the trick. We shall see. Thanks. ^_^

Posted: **Wed Apr 12, 2006 8:19 pm**

Subscribe to the Newsletter and you will be among first to know

PHPJunkyard support forum

SPAM report

SPAM report

Re: SPAM report