Phantom Spam comments

[j0d]

this is slightly different to the other spam comments, the "spam comments" i recieve only show up in my email, very few have the subject pixelpost , most have the subject as an email address from my domain, an email address that doesnt exist. sometimes the picture they comment on is the email address ( ie. http://www.j0d.net/photoblog/?showimage=uthor2600@j0d.net ) i get these eveery once in a while but recently i got a barrage of about 15-25 of these.

any ideas of how to stop this would be welcome.

pixelpost version 1.4.2

[Connie]

this is shit which is happening a lot in this moment
I think some scripts are just scanning websites for <form>-elements and misuse that

I have no idea in the moment, but I must close some forms for the moment at some of my sites because this stupid shit is happening
I think they test if these forms can be used as mailers...

not so good

[Connie]

j0d,

try this:

make a copy of your index.php!
open index.php in an editor, find this lines:


if(($_GET['x'] == "") or ($_GET['popup'] == "comment")) {
if($_GET['comment'] == "save") {

and add directly after this these lines:

$dontusemydomain = "j0d.net";
if ((ereg($dontusemydomain,$name))
or (ereg($dontusemydomain,$email))
or (ereg($dontusemydomain,$parent_id))
or (ereg($dontusemydomain,$parent_name)) ) {die;}

this will make the comment-form-mailing etc. stop, nothing will be sent

I just used this trick to stop this spamming from some contactforms etc.

tell me if it works!

[Spudooli]

Connie, I just tried this and it appears to have not worked. I poked that snippet in, then commented with my domain in my email address field and the comment still got saved.

[Connie]

it should ne be "ereg(.." but "eregi(.." because with

eregi(

it is checked case sensitive

but this was my first try, I used this to block other form entries in contact forms and there it worked

as I am not a specialist in anti-hacking because I have not this black energy I cannot help you in the moment

I just can ask to accept human stupidity and delete the comments in the moment ;=)

but we will keep an eye on that in the development team and maybe we find an effective way to stop that
but we

[Spudooli]

A ha, I'll make that change and test some more.

Thanks