I've recently had some spammers leaving huge comments. Several pages of links, all strung together. Not only does Spam.module not recognize them as spam despite all the obvious poker references, but also hitting "mark as spam" on these super-long comments has no effect whatsoever! ("mark as spam" works fine on normal, shorter spams). They also seem to never get any score attached. It's as if the spam module shuts down on large comments somehow.

CommentFileSizeAuthor
#8 spam_tokens.gz34.65 KBjgoerzen@changelog.complete.org
#1 bigexample.txt.gz5.37 KBjgoerzen@changelog.complete.org

Comments

jgoerzen@changelog.complete.org’s picture

jgoerzen@changelog.complete.org commented
StatusFileSize
new bigexample.txt.gz5.37 KB

I'm attaching an example of such a comment.

puregin’s picture

puregin commented

Hi John,

I've tried to reproduce this behaviour, but spam module on my installation seems to pick up the example you provided.

Perhaps you could give some more detail.

What version of Drupal are you running? Are there any messages in your Drupal logs related to the entry of the comment or subsequent action by Drupal?

Is the 'header' in your example (the first four lines, starting with "Name: texas hold em poker") part of what has is being posted into comments on your site?

Thanks, Djun

jgoerzen@changelog.complete.org’s picture

jgoerzen@changelog.complete.org commented

Thanks for the follow-up.

This is Drupal 4.6.2, with the spam module 4.6.0 as of April 22, 2005 (according to the spam module project page, that's the latest release).

In the example I posted, those lines were not part of the body of the comment; I was just trying to show what exactly had been entered into the comment. You can see one example on my wife's blog (also running under this same Drupal instance) live at http://forest.complete.org/node/2#comment-2518.

Thanks, and please don't hesitate to ask or e-mail if you need any more information.

-- John

subakva’s picture

subakva commented

I'm having this same issue with the 4.5.x version of drupal.

I'm not sure if this will help, but I also noticed that these comments don't seem to appear in the watchdog for some reason.

e.g. Normally, when a user adds a comment, there'll be a watchdog entry saying "Added comment 'legit comment'".
But, those notices don't seem to appear for these enormous poker spams.

jeremy’s picture

jeremy commented

The spam filter routinely blocks such spams on my website. It's exactly the type of comment that the spam module was originally written to deal with.

A couple things to verify. Go to administer >> settings >> spam and verify that the following are checked:
- Filter comments
- Automatically unpublish spam

On the same page, set "Total URLs per comment" and "Repeated URLs per comment" each to a sane value (say 8 and 4).

On the same page, have you made any changes to the settings in the "advanced configuration"? Go ahead and check advanced configuration, then enable "Display spam rating". Don't change anything else in the advanced section. Now look at the comments in question, and see what spam value they are being assigned (1-99).

jgoerzen@changelog.complete.org’s picture

jgoerzen@changelog.complete.org commented

Hi Jeremy,

Filter Comments is checked, as is Automatically Unpublish Spam. Total URLs per comment was set at 5, and repeated URLs per comment was set at 4. I had already enabled the spam ratings as well, and they normally would show up fine.

However, on these extra large comments, no spam rating would ever show up. It's as if the spam module never looks at it.

Even more odd -- if I were to click "mark as spam", nothing happens. No spam rating appears, and the comment is not unpublished like it normally would be. I'm puzzled.

Bèr Kessels’s picture

Bèr Kessels commented

could you post a database dump of yoàur spam tokens, please? The problem might be in there.

jgoerzen@changelog.complete.org’s picture

jgoerzen@changelog.complete.org commented
StatusFileSize
new spam_tokens.gz34.65 KB

Attached.

Note that this problem persisted across different sites (and thus different databases) on this machine, so I'm a little skeptical of this particular path. But thanks for looking anyway!

Bèr Kessels’s picture

Bèr Kessels commented

ah. if it occurs on more databases, then for sure, a non-spam-token is not the cause.
Could it not be that spam module ignores large commetnts?

jeremy’s picture

jeremy commented

I am unable to duplicate this, even with very large comments. Perhaps you are running up against some sort of memory limitation on your server? Try looking for errors in your webserver logs.

I have re-written the spam module. Perhaps you should try the new version?

Please read the release announcement here. Download the new module here.

jeremy’s picture

jeremy commented
Status: Active » Fixed

I have tried with very massive comments (many times larger than your example) and not seen any problems. I suggest you upgrade to the current spam module and try again. If you still have problems with the latest version, please re-open this issue.

Anonymous’s picture

(not verified) commented
jeremy’s picture

jeremy commented
Version: » 4.6.x-1.x-dev
Status: Fixed » Closed (fixed)

Closing manually. (I think the project module is broken, it keeps marking them updated when they should be closed.)