Anyone else getting 'empty comment' spam after 4.7.2 upgrade?

By mrb on 7 Jun 2006 at 02:06 UTC

Is anyone else getting spammed with empty comments? ie both subject and body are blank.

I've started getting them right after completing the 4.7.2 upgrade. I'm assuming they are from spammers as they arrive in groups of two or three from IP addresses all around the world.

Any ideas what changes in 4.7.2 could allow this? I was not getting the problem with 4.7.0.

If I visit the site and try and enter a blank comment as an anonymous user it will give me an error message. So not sure how the spammers bypass that?

I've also installed captcha. Again, it works for humans, but the spam still gets around it.

Any ideas?

Regards, MrB

Comments

not blank?

deekayen commented 7 June 2006 at 04:35

Maybe it's a space or some HTML that's getting filtered out by your default input type filter.

Good point

mrb commented 7 June 2006 at 13:05

I'll try escaping instead of stripping in the HTML filter and see if that shows anything.

But how are they getting past the captcha?

MrB

Doesn't seem to be the input filter.

mrb commented 8 June 2006 at 08:56

I'll try and get more information about why these blank comments are accepted, but any more suggestions where to start looking will be gratefully received.

MrB