Kayla

If you have guestbooks installed, photo galleries, basically anything that can receive a comment by a third party - please keep an eye on them!

I am writing this because SH104 was just running very slowly - and Dan noticed many connections to a certain database. It turns out that an install of Gallery was receiving thousands of spam comments on all of the images. Right now there must be almost 50,000 spam messages on these photos - dealing with watches, insurance, etc. This was causing the server to run slowly due to all of those constant connections.

Please lock down comment areas on your site!

__________________

MarkRH

I noticed a comment on my Gallery installation that was just full of spammage and other crap. It must have been a person since it has a Captcha test they have to get by. That probably saved me from getting comments on everything but the main gallery page.

But yeah, my other Guestbook script gets around 150-200 attempts a day to fill it with crud from 827 different IP addresses so far... and that's in only 12 days.

Thought about changing my guestbook pages to randomly generated characters or something. Not sure what the best method is to use the least system resources.

__________________

Kayla

It is really sad how these bots ruin perfectly normal applications.

__________________

David

12000 views? That's about how many views pictures of me get hourly.

__________________

Edwin

Will check my gallery installation. But I agree on the comment by Kayla.

Too bad some people find it fun to do this kind of things

__________________

markscns

I checked a gallery that I use very little a few days ago Kayla, and could not believe the amount of spam posts. i just ended up deleting all comments using mySQL. Of course after that as you mentioned, I turned off the ability to add comments.

At least with my blog Akismet, is doing a good job keeping it spam free.

__________________
twinlakeweather.us SH92

Dan

I just took the shoutbox off my site because it's too easily exploitable and I dont want to have to deal with that eventually

__________________
D4nz Net - Surpass Help Desk - NES Forever
Use the thanks button. It works!
AIM: dansorl

GamingHybrid

Na, you can have comments on your site.... just ensure it requires registration or at least uses one of those "type the rods from the picture above" things... or a trick question thing.

__________________

David

I've been getting fake hosting orders recently. I wonder if it's the same thing that's going on here.

__________________