HELP! I'm getting spammed!

[AshMCairo]

I did another quick and dirty thing and uploaded the email verification mod. That seems to help, but then again it might the fact that I renamed the file in the first place and the bot stopped because of that. Doesn't hurt to have it though. Now I need to tweak it.

[bbrian017]

AshMCairo where did you find the email verification mod??

Can you link it please?

[Prophet Tenebrae]

Very much so... it's a tad disconcerting to go away for 10 minutes and come back and find literally hundreds of spam comments on your site with more every few seconds.

I assume that some piece of detritus realised that Pligg had a glass jaw for spam, got a script and just went down the pligg directory and set things to work. I'm sure that if someone got the idea, it means that Pligg is becoming sufficiently well known to warrant being a target for this kind of pond scum and that the chances are, there will be more attacks in the future.

Anyway, my main question is - how do I clear out all these bogus accounts? As far as I'm aware, the best that can be done currently is to change a users password. Is there any way to delete them?

In any respect, thanks for the down and dirty fix but I think that anti-spam probably ought to become a top priority now... integrated into the main build because as some people have speculated elsewhere, if Pligg is seen as a soft target for spammers - it'll be a huge turn off... for everyone. I'm guessing these things will get worse before they get better.

[AshMCairo]

Originally Posted by bbrian017

AshMCairo where did you find the email verification mod??

Can you link it please?

It's at http://forums.pligg.com/pligg-mods/4...il-v0-1-a.html

[bbrian017]

I hope what you say isn't true as I cannot sit here and delete fake account and retarded spam comment all day. Yes 100% pligg needs to work on anti spam and it should be TOP priority because I'm already fed up with it and this was my first time experiencing it.

I would suggest 2 things in order to avoid spam. Sad but here they are,

#1- stay away from pliggsites.com it s a heat score

#2 - don't post in the my pligg site forum it's also a heat score.

I wish I would have known I would have never posted in those forums and now I'm a target :)

Now I sit here, I can't get new users and that's sad, I'm really sad :(

[joehunk]

@bbrian0117

Thanks for the register.php renaming step. I'll do that.

You can go to yout MySQL admin and deleted them quickly. I did clean my db for all spam users and deleted the comments as well.

Man, this spmmer is killing me. I hope that the Pligg Dev is aware of this spam and light us some HELP to stop the attack. I got 398 new users and comments in just 15 mins.... now what happen in 24 hours??

Please HELP!

[bbrian017]

joehunk I wish I could delete from the database but I'm not familiar with where to look :(

[joehunk]

Originally Posted by bbrian017

I hope what you say isn't true as I cannot sit here and delete fake account and retarded spam comment all day. Yes 100% pligg needs to work on anti spam and it should be TOP priority because I'm already fed up with it and this was my first time experiencing it.

I would suggest 2 things in order to avoid spam. Sad but here they are,

#1- stay away from pliggsites.com it s a heat score

#2 - don't post in the my pligg site forum it's also a heat score.

I wish I would have known I would have never posted in those forums and now I'm a target :)

Now I sit here, I can't get new users and that's sad, I'm really sad :(

----------------------------------

man, we are in the same boat :(

it sucks to hear this story. first time....

----------------------------------

[chuckroast]

Originally Posted by bbrian017

I would suggest 2 things in order to avoid spam. Sad but here they are,

#1- stay away from pliggsites.com it s a heat score

#2 - don't post in the my pligg site forum it's also a heat score.

Do you think before you post?

#1 You might as well not post your site to google, yahoo, and any other site as well.

#2 I'm sure there would be several people here that would be glad to see you not post here anymore. Maybe you should follow your own advice.

Between requiring email confirmation, askismet, antispam, and spamkill all FREE features within Pligg. There is even the paid module blackball. You shouldn't have many problems with spam.

At what point do you stop blaming the Pligg developers because you are not using, or are unaware how to use these features?

[joehunk]

go to pligg_comments and pligg_users table and delete from that table. browse the content of your user_login and comment_content and delete the entry for the latest user_login and comment_content.

i figured out that the spammer only registered then left a comment, so far. Still looking at my DB contents.

hope it helps.