[wp-forums] User thejas Spamming Forums

[Mark Duncan]

I think we have it covered between us, no worries Mel, you just focus on 
getting better.. ;)

----

Regarding the aforementioned user,

It appears someone has already tagged the account as a bozo.

For catching those cheeky links, this works as the search term in the 
bbPress post list (admin obviously).

">.<

I tried ">.</a> but the search returns empty (limitation with the search 
on the backend i guess).

Yes, the double quote is intentional (else more posts are returned), 
double quotes should only match links(it catches the end of the href 
attribute on the link), so things like <li>.</li> aren't matched.

NOTE: Tried escaping the slash and also tried &#47 (html entity for 
forward slash) and %2F (url encode of forward slash), the search doesn't 
correctly find the posts in those cases. Also tried doing both by 
directly using a query string with the parameters (ie. not using the 
form), with the same result.

Last paragraph was really for Michael incase he's interested in a little 
bug report on the search.

Moving on, the double quote, followed a greater-than, a period, then a 
less-than (">.<) is specific enough to target posts with period links, 
with only the odd innocent post appearing. So you can easily find these 
cheeky posts by simply viewing..

http://wordpress.org/support/bb-admin/posts.php?post_text=%22%3E.%3C 
(url encoded)
or
http://wordpress.org/support/bb-admin/posts.php?post_text=">.<

Obviously, you can filter the post status, etc.. to if you want, the 
above is just a demo so you can see that it works. You'll unfortunately 
notice, as i've just done, some existing members have also been doing 
this (period links - a few i recognise as bozo'ed users though), and 
some also innocently link periods by mistake.

Should speed up the process for finding these odd links though.. ;)

Mark / t31os

On 04/08/2010 14:39, esmi at quirm dot net wrote:
> on 03/08/2010 14:54 James Huff said the following:
>> Thanks! If no one else wants to, I'll volunteer to go through all of
>> them in a few days.
>
> Sorry - currently ill and unlikely to be of much use to anyone for at
> least a few more days.
>
> Mel
> _______________________________________________
> wp-forums mailing list
> wp-forums at lists.automattic.com
> http://lists.automattic.com/mailman/listinfo/wp-forums
>
> __________ Information from ESET NOD32 Antivirus, version of virus
> signature database 5339 (20100804) __________
>
> The message was checked by ESET NOD32 Antivirus.
>
> http://www.eset.com
>
>
>
>