Subject:*
<
Name/Email:*
<
Message Icon:*
<
Select*
<
Message:*
<



Click the Preview to see the content in action.
Options:*
<
Confirmation Code*
<
0 + 4 = ?  
Input the result from the expression
Maximum attempts you can try: 10
*
<
     

Re: URGENT XOOPS.ORG IS VULNERABLE IN ALL COMMENTS, HOW THIS HAPPEN
by wishcraft on 2011/6/21 15:16:02

You could always install Xortify 2.50 on XOOPS.ORG this will utilize stop forum spam which is normally aware of spammers before they get to this site.
Re: URGENT XOOPS.ORG IS VULNERABLE IN ALL COMMENTS, HOW THIS HAPPEN
by timgno on 2011/6/21 11:12:32

Quote:
Mamba wrote:
....
In summary - the best way for us is to keep eye on spammers, delete their messages and ban them.


I believe that this spammer is not only here on xoops, but has been banned in several forums
Re: URGENT XOOPS.ORG IS VULNERABLE IN ALL COMMENTS, HOW THIS HAPPEN
by ipwgc on 2011/6/21 0:31:05

THANK YOU BAMBA

BLESSINGS TO YOU AND THE XOOPS TIME
DAVID
Re: URGENT XOOPS.ORG IS VULNERABLE IN ALL COMMENTS, HOW THIS HAPPEN
by Mamba on 2011/6/20 23:43:57

Quote:
URGENT XOOPS.ORG IS VULNERABLE IN ALL COMMENTS, HOW THIS HAPPEN
I see in all comment this user bellow post sale information
HOW THIS HAPPEN HERE, IN THE MAIN XOOPS WEBITE??,

There is no need to create a panic here. There is NO vulnerability here - it is a user who registered and started to post spam. His account has been banned and his posts have been deleted.

The only way to avoid it would be to force approval of every message/comment here, which wouldn't be very productive. Therefore we're willing to deal with this little inconvenience.

Having a Captcha on comments wouldn't change much, because it would affect only bots, but not real users.

In summary - the best way for us is to keep eye on spammers, delete their messages and ban them.
Re: URGENT XOOPS.ORG IS VULNERABLE IN ALL COMMENTS, HOW THIS HAPPEN
by btesec on 2011/6/20 20:31:31

can some form of captcha be added to Xoops comment system

Who's Online

107 user(s) are online (63 user(s) are browsing Support Forums)


Members: 0


Guests: 107


more...

Donat-O-Meter

Stats
Goal: $15.00
Due Date: Jul 31
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $15.00
Make donations with PayPal!

Latest GitHub Commits