Feature request: better spam management

[Migrated From Jforum.net]

Hi,

I'd like to request three new features:

1) Better spam prevention. I believe the existing captcha system has been broken. Please investigate replacing it with newer generation spam prevention mechanisms.

2) If a spammer does get through and posts 10,000 new messages it should be possible to tell JForum to delete all posts by X instead of iterating through them one by one.

3) Consider what happens if spammers register 10,000 new spam accounts. Ideally you don't want to have to delete them one by one either. I don't have a solution for this one but it's worth giving this some thought.

PS: I noticed other forums prevent new users from posting URLs for some undetermined amount of time. Perhaps we could add a similar feature.

Thank you,
Gili
[originally posted on jforum.net by cowwoc]

[Migrated From Jforum.net]

Why do you think the current captcha engine has been broken?

Rafael
[originally posted on jforum.net by Rafael Steil]

[Migrated From Jforum.net]

Hi Rafael,

A few months ago some spammers posted thousands of messages on my forums using 2-3 accounts. Now it could very well be they created the accounts by hand and went on from there but having read articles as of late about Yahoo and Google's captchas getting cracked I think we should assume that JForum's captcha is no better.

I'd like to see some administration tools for recovering once spam has already been posted and maybe we can review the status of the captcha later on. Last time I got spammed there was way too much to remove by hand so I simply fired up an SQL query to remove all posts between a specific time frame. The problem with this shotgun approach is that you end up deleting good posts alongside the bad so I'd like to avoid having to do that a second time around.

How about a feature to "delete user and all his posts"?
[originally posted on jforum.net by cowwoc]

[Migrated From Jforum.net]

I see. You can register them in Jira - http://www.jforum.net/jira

Until then, please note that you can activate Captcha for new messages as well, although that will apply to all users. It is also possible to set a minimum time between each new message sent by the same user - e.g, you can instruct JForum to reject a new message from the same user if the last he sent was less than 60 seconds ago.

Take a look at Admin Panel -> Configurations -> Delay (in ms) between each post from the user

Rafael
[originally posted on jforum.net by Rafael Steil]