The Elgg Community: Spam Login Filter

Home Plugins Groups Discussion

Project Info

Code repository

Stats

Category: Spam
License: GNU General Public License (GPL) version 2
Updated: 2012-4-2
Downloads: 1222

Releases

Author Recommended: 1.8.1 (80 days ago)

Previous releases:

1.7.4 (163 days ago)

1.8.0 (163 days ago)

1.7.3 (213 days ago)

1.7.2c (251 days ago)

1.7.2b (270 days ago)

1.7.2 (272 days ago)

1.7.1 (286 days ago)

1.7.0 (289 days ago)

Images

Other Projects

Ray J's plugins:

back to plugins

Spam Login Filter

Ray J

by Ray J
First uploaded 289 days ago

spam, registration, antispam, stopforumspam

Recommendations

Summary:

Blocks registrations using external service stopforumspam.com, internal domain blacklist and internal e-mail blacklist.

Full description:

This plugin validates every registration against stopforumspam, fassim, internal domains, e-mails and IP blacklist.

The five validations can be enabled or disabled, and, to save external resources, the plugin validates the registration in the order below:

Check IP against IP blacklist cache. (Cache expires once a week).
If negative, check e-mail´s domain against domain blacklist.
If negative, check e-mail against e-mail blacklist.
If negative, check e-mail and IP against stopforumspam.com
If negative, check e-mail and IP against fassim.com

Features

Four validations can be enabled or disabled.
The plugin always checks de HTTP Status of stopforumspam.com and fassim.com. If the service is down, the plugin ignores the service and validates the user.
Optionally, the plugin can send, by e-mail, notifications about the blocked spammer.
If the user has a StopForumSpam API Key (Optional), the plugin can notify stopforumspam about the spammer.
The plugin doesn´t extend the registration form, so must be compatible with every profile plugin. (Tested with Profile Manager).

Requirements

Latest 1.7 or 1.8 version of slyhne's IP address tracker plugin, found here: http://community.elgg.org/pg/plugins/project/446342/developer/slyhne/ip-address-tracker-plugin (Tracker Plugin stores IP Adress from user. I think that is wrong create from scratch something that works well).
API Key from http://www.stopforumspam.com/ (Optional)
API Key from http://www.fassim.com/ (Optional)
PHP CURL function enabled. If you use a shared host, check with your host admin.
ELGG "weekly" "daily" cron must be running. (New)

Instalation

Install the plugin below the tracker plugin.
Optionally gets a stopforumspam.com API Key.
Optionally gets a fassim.com API Key.
Modify and save the settings.
Done.

To do

Cache the blocked e-mails in internal e-mail blacklist, to save external resources from stopforumspam.com and fassim.com.
Create a internal ip blacklist, and cache the blocked ips. (Same as above).
Create internal whitelist for IPs and Domains (Dhrup's request)
Implement others integrations, like project honeypot (DNSBL). (Forget it. Project Honeypot is a bit burocratic for new users)
Collect and show some spam statistics (Blocks by region, etc)

Final notes:

If you like it, recommend it! Recommending, you don´t help me: you help the community, showing the best rated plugins and saving hours for new users.
Thanks to slyhne for the modifications in tracker plugin and to DhrupDeScoop for the "moral support" during the development.
Fassim.com is in beta stage, so the keys are sent, but not right away. If you dont receive your key, just use stopforumspam.com and wait for the fassim´s key.

Thanks:

A big "thank you" to Matt Beckett for helping me to develop the 1.8 version. Their efforts was priceless.

Warning!

The author recommends using a different release of this plugin!

Release notes:

Minor release: Fixed a issue with IP Blacklist Cache. Now you can disable IP Blacklist Cache in plugin settings.

Compatible Elgg Version: 1.7

@Gastre: Just upload the new version, go to plugin settings and disable IP Blacklist Cache. I think that your IP is blacklisted in your site. Disable the cache and wait for a week. The cron removes IPs older than seven days.

Ray J 251 days ago

caragadatacenter

why disable IP blacklist cache?

caragadatacenter 251 days ago

Ray J

@caragadatacenter: Try to blacklist your own IP and you will answer your question. :)

Ray J 251 days ago

gastre

@Ray J, ok, thank you.!!!

gastre 248 days ago

ramonovelar

Thanks a lot! I've eventually found what I needed to open up registration in Elgg sites. Nevertheless I still have an ElggObject displayed in the "Latest activity" widget (in the frontpage for non-logged users) everytime a spammer is blocked during registration. The data displayed at one of these ElggObject's page is this (guid: 6 /type: object /subtype: 4/ owner_guid: 0 /container_guid: 0 /site_guid: 1 /time_created: 1317122860 /time_updated: 1317122860 / title: /description: Metadata /ip_address: 216.172.154.185).

IP address corresponds to the spammer blocked, according to the notifications received by mail. I can hide this widget, but I don´t like the idea of populating the database with such stuff. ¿do anybody have the same problem?

thanks again, R

ramonovelar 232 days ago

Ray J

@ramonovelar: The plugin stores IP from blocked users, but a cron job cleanup the IP cache once a week, so dont worry with database overhead.

Your second question wasn´t clear to me. What the problem with the widget? Can you post some screen captures?

Ray J 232 days ago

Purus

Highly recommended guys!!

BTW, how to setup up cron job for this plugin to clean up?

Purus 232 days ago

Ray J

@Purus: Check ELGG documentation. The cronjobs are configured for the entire site. My plugin only "hooks" the events.

You can find the instructions here: http://docs.elgg.org/wiki/Cron

Ray J 231 days ago

Dilbert Dilweg

Any Future plans for a 1.8 version of this Plugin? Or and ETA when?

Dilbert Dilweg 231 days ago

ramonovelar

thnks @Ray J. The problem is that this widget (Latest activity) is displaying this (see screenshots) at frontpage, for non-logged users. Every elggobject has also a particular page. These screenshots come from a test site, just for testing anti-spam solution, so I'm not worried about this gadget because i'm not using it in my production sites. Besides, I have checked that this stuff does not appear in riverdashboard. However I want to be sure that "these ElggObject" will not show up in other gadgets and that's why I'm trying to understand where it comes from.

Here are the links for downloading screenshots (they would take too much room):

http://dl.dropbox.com/u/736019/img/elggobject_frontpage.jpg
http://dl.dropbox.com/u/736019/img/elggobject_frontpage_older.jpg
http://dl.dropbox.com/u/736019/img/elggobject_page.jpg

ramonovelar 231 days ago

Ray J

@Dilbert: 1.8 version soon. I have the enviroment, but I need to make intensive tests.

@ramonvelar: I will change the IP cache and release a new version. Webgalli send me some tips. Wait a few days, ok?

Ray J 230 days ago

Ray J

I am thinking here: The activity widget shows public metadata, right? If I turn the object private? I will make some tests and see the results.

Ray J 230 days ago

Ray J

@ramonvelar: The bug with activity widget was resolved, ok? I will make some tests, some code tunning and release a new version saturday. Thanks for your feedback.

Ray J 230 days ago