We are clearly under attack by vietnam spam bots and it's becoming impossible to keep up manually.

It might be time to block vietnam until we figure out what the answer will be to #1378456: Install Spam module on drupal.org

We also need a 'administer nodes' view for users similar to the 'administer comments' one already available. Picking through nodes at admin/content/node for this amount of spam is problematic. I'm away atm and have limited access but I'll try to create and post a view for import when i get chance if no one else does it first.

Comments

WorldFallz’s picture

StatusFileSize
new17.04 KB

ok, here's a basic view that mimics the one at 'admin-comments'

WorldFallz’s picture

WorldFallz’s picture

WorldFallz’s picture

this is really getting out of control:

http://drupal.org/user/1735330
http://drupal.org/user/1735272
http://drupal.org/user/1735010

including a few dozen pages of spam

silverwing’s picture

Priority: Critical » Major

I was given full Administrator rights here, and managed to ban IPs of some of the spammers right after they posted. I haven't noticed them doing much since then (hopefully they realize their posting here is futile, but probably just waiting for us to drop our guard.)

If they do return, post a link to their profile. I believe we'd rather ban specific IPs/ranges and not an entire country.

gerhard killesreiter’s picture

Status: Active » Needs work

the view in #1 needs to be use the D6.2 API also we want some acccess controll (limited to roles that can actually use it).

We'd want to use a dev site for this but we ran out of diskspace...

drumm’s picture

Project: Drupal.org site moderators » Drupal.org customizations
Version: » 6.x-3.x-dev
Component: Spam » User interface
Category: support » feature

We'll also want to export this as a feature in drupalorg.

WorldFallz’s picture

ah ok, when you have space just update here and i'll fix the and test it there.

silverwing’s picture

Title: urgent - being attacked by vietnam spam » Add "Administer Nodes" VBO to user profiles
webchick’s picture

Another to report: http://drupal.org/user/1741918/track

Man, VietNam sure does like spam!

dww’s picture

Note: the view doesn't have to be exported as a Feature(tm). It could just be exported as a view directly into drupalorg. For example, the exported view could live right next to this file:

drupalorg/views/drupalorg_admin_comments_by_user.view.php

Ahh, the spam arms race. What a fulfilling thing to be spending time on. *sigh*

silverwing’s picture

Status: Needs work » Needs review
StatusFileSize
new13.02 KB

Created this from a devdrupal staging site.

webchick’s picture

Could we have a link, and a user to demo with? I'd love to review & RTBC this. :)

webchick’s picture

Status: Needs review » Reviewed & tested by the community
Issue tags: +needs drupal.org deployment

Looks geeeeeerrreeeaaatt!

Only local images are allowed.

michelle’s picture

Probably moot now since I just saw this and it's already RTBC... But couldn't we just use the view that's on g.d.o? One less to maintain, then.

Michelle

WorldFallz’s picture

i thought of that... but then it wouldn't 'match' the existing 'administer comments' view we have on d.o. I ended up thinking it's better to match within a site then across sites.

Actually, it seems there probably should be a separate issue to unify the admin interface between the two or even across *.drupal.org.

michelle’s picture

Oh, I never noticed that the "comments" views were different. Yeah, using the same views everywhere makes sense to me but let's not derail this very useful and RTBC issue on that matter. :)

Michelle

webchick’s picture

Yeah, that's a good point, though, and we should create a follow-up issue to make a "*.Drupal.org admin screens" feature that we can deploy throughout all the sites.

dman’s picture

If this is up and workig, can someone check the permissions so us moderators can get at it?
I'm not seeing the link, but I am seeing that our vietnamese friends are back
http://drupal.org/user/1795880/track

dman’s picture

bump.
Our Vietnamese nemesis has been continuing to bomb us every freaking evening, and picking their posts out of just the /admin/content list without a filter is tiresome and error prone.

michelle’s picture

Why would you do that? I just look at their tracker...

Michelle

dman’s picture

I can SEE the posts in the tracker, sometimes 3-4 pages of them.

So that means
* open each page.
* Press "edit"
* Scroll down
* Press "delete" (at least I dont have to enter a log message any more)
* wait for the page to load
* Press "confirm"
To delete one item.

Multiply that by the huge number of pages this user drops.
No. not fun.

At least through the content admin I can get 9 or ten per page, and only one 'confirm' screen. Can be half an hours less clickity.

michelle’s picture

Ah, yeah, I do it the way you listed except I open them all in tabs, then go back and do each step across all the tabs. No waiting for page loads and I can clear a tracker page full in a few minutes.

The VBO view would be awesome, of course, I was just wondering why you didn't just use the tracker for now.

Michelle

gerhard killesreiter’s picture

shouln't you be able to access admin/content/node ?

greggles’s picture

To get deployed it has to be a patch against drupalorg.module

Attached as patch made using "git diff --cache" and as a php.txt file to rename to .php

I didn't test, I did "php -l" and it has no errors, at least.

dman’s picture

@Michelle, yes I also do them in tabs but start to lose my rhythm if I do them in batches of more than 5 at a time. It still takes a tedious amount of time.
We have this promised VBO patch here, so I'm looking forward to being able to deal with it as easily as we can the comments.

@Gerhard Yes, and that's how I currently can get things done. It's still a few steps short of optimal though.
Our Vietnamese friend spends an hour posting new nodes at the rate of one a minute.
I looks at admin/content/node and have to pick out these ones from the other activity there. there is no filter by users I can use on that screen.
If I delete the 14 spams I see on page one, the list renumbers itself, and I have to visually check the next 5 pages under admin/content/node and individually snipe the things. Taking care not to miss the checkbox it the rows of thirty items and not hit a real node. And every pass, the list renumbers itself again.

It makes me grumpy, and takes time and concentration. I don't mean to whine. I just want to pro-actively encourage this solution - which we know exists to address this problem - make it through into production.
:-}

michelle’s picture

@dman: Oh, definitely, VBO is a far superior method. I was just curious why you did it the way you did right now while we don't have VBO as an option. :)

Michelle

webchick’s picture

If someone wants to sign up for a sandbox account to test this, happy to set it up. http://drupal.org/node/1018084 I won't have time to do it on my own sandbox for at least another week.

webchick’s picture

And come to think of it, silverwing already has a sandbox set up for spam fighting patches. Maybe talk to him?

drumm’s picture

It would be good to start using features to manage our custom views instead of pushing the code around manually.

greggles’s picture

Status: Reviewed & tested by the community » Fixed

http://drupalcode.org/project/drupalorg.git/commit/418a479

Sorry, I credited worldfallz and left out silverwing on creation and forgot to give webchick the review credit. Hope you don't mind too much :/

greggles’s picture

My lucky day - I committed to the wrong branch so I got to give the right credit when committing to the right branch http://drupalcode.org/project/drupalorg.git/commit/c55d12f :)

Thanks, folks.

killes@www.drop.org’s picture

This just got deployed.

dman’s picture

Yay. I can confirm I see user/{uid}/admin-nodes available in the secondary menu on user profiles alongside the 'administer comments'.

Now to see if that same spammer turns up at 9 PM again tonight :-]

Thanks to all for making this happen. Hopefully our time can now be better spent again!

michelle’s picture

Awesome! *does the happy dance*

Michelle

silverwing’s picture

Issue tags: -needs drupal.org deployment

yay! no more wondering if I'm deleting real content from /admin/content/node

@greggles, I would have happy if you credited Rodney the Cat :)

michelle’s picture

Just used it on a spammer and it worked slick. Only two nodes for this spammer but, still, less clicky-clicky is always nice. :)

Michelle

WorldFallz’s picture

omg -- miss the issue queue for a day and look what happens!

/me thanks everyone who helped push this through!

spammers will still be annoying, and we definitely should still work on better spam measures, but at least the spammers won't be stealing valuable maintainer time from our REAL users.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

  • Commit c55d12f on 6.x-3.x, 7.x-3.x-dev by greggles:
    Issue #1383816 by WorldFallz, silverwing | Webchick: Add 'Administer...