Ticket #514 (assigned defect)

Opened 4 years ago

Last modified 4 years ago

Spam issues - users not being able to comment

Reported by: ed Owned by: ed
Priority: minor Milestone: Production
Component: Drupal modules & settings Keywords:
Cc: Estimated Number of Hours: 0.0
Add Hours to Ticket: 0 Billable?: yes
Total Hours: 0

Description

Ed is receiving a selection of users not being allowed to post since the spam changes. We are seeing a pattern now. Setting this ticket up - will add user details tomorrow.

Attachments

1stError.jpg (130.2 KB) - added by ed 4 years ago.
1st error screengrab
2ndError.jpg (201.9 KB) - added by ed 4 years ago.
2nd error screengrab

Change History

comment:1 Changed 4 years ago by jim

Interesting, I await the pattern...

This issue aside, how's the spam war going since we got some new tools on the site?

comment:2 Changed 4 years ago by ed

Rise in users being blocked since spam changes. Captcha suddenly being a problem by the sounds of things. Seen on forums, comments to blogs. They're all getting this one:

"You must be a human, not a spam bot, to submit forms on this website. If you insist that you are a human, please try again. If error persists, contact webmaster using contact link at the bottom of this page and give all the details of this error (your browser, version, OS).
Please enable Javascript to use this form."

--1. The most descriptive knowledgeable user---

---> I've tried on multiple browsers (IE, Crome, Firefox) with Javascript enabled.

Here are two screen grabs: the initial problem seems to be that when first trying to post the comment I don't recieve a word verification. I then try to post the comment anyway, so it comes up with the first screen attached. This screen does now have a word verication test, but it doesn't seem to recognise my answers so keeps telling me the same message.

Also, for the record I do have one link in there, although I just tried it without then link and it seemed to give the same message.

--End of the best user reply--

--2. Other user reply outlining problems with captcha not showing but system still wanting letters---

keeps coming up as as needing those letters in a box, but the box either doesnt appear, or I do it, and it wont accept!

Version 0, edited 4 years ago by ed (next)

Changed 4 years ago by ed

1st error screengrab

Changed 4 years ago by ed

2nd error screengrab

comment:3 Changed 4 years ago by ed

... we haven't had a single crappy post as hoped for which is great - while we are also experiencing a swing in the other direction with users not being allowed in - which was also expected!

comment:4 Changed 4 years ago by ed

I *think* that they may all be new users experiencing this problem. The older ones are commenting OK.

comment:5 Changed 4 years ago by ed

More from one of the users:
"Each time at first there was no line box to put my name in btw, and then one would appear with eg: 8P66ge in it. Each time I erased this strange content and popped in my name. "
User: MacBook? pro 10.6 (old!!) I was using Google Chrome, living in Marlborough, Wilts, UK

comment:6 Changed 4 years ago by ed

Just tested with joelT account (from the screengrabs) on a totally unknown PC and commenting to a blog post worked fine. Therefore is this something to do with the registration process and new accounts?

As an aside, as we move towards integrating Transition Culture onto the site, we're going to need to use something that does not neccesarily require registration, or make the registration *really* easy and quick otherwise the TC fans are going to riot. Discus?

comment:7 Changed 4 years ago by ed

JoelT (user acct having problems as per screengrabs) now able to add comments. So my theory that it's a problem encountered with new accounts seems to be gaining traction.

comment:8 Changed 4 years ago by jim

  • Owner changed from jim to ed
  • Status changed from new to assigned

Questions, points and actions:

  1. Are the users who can't comment still pre-authorised (haven't validated email)? They cannot do much until they click that email link.
  2. The first screen grab shows Mollom doing its thing -- the post must have looked 'spammy' hence it added the captcha in place. I also see this Botcha/Mollom issue recommending one or the other.
  3. I have therefore disabled BOTCHA on Comment forms, leaving Mollom in place since it does text analysis plus some BOTCHA stuff -- perfect for comment forms that can only be accessed by validated users.
  4. I have also disabled BOTCHA on contact forms (side wide and user) since, again, Mollom is already enabled and does a great job with text analysis.
  5. I've checked CATPCHA and it's only present really on user login/password pages.

So we seemed to have overlapping coverage which I've now resolved... Coverage breaks down like this:

  • BOTCHA: is the gatekeeper for registration, together with Spambot and CAPTCHA.
  • Those who pass this will need to validate their email to do much.
  • Those who do will meet Mollom whenever they try to contact people or post comments or content.

In other words: the 'free and simple' botcha and captcha are the doormen, and Mollom is the admin lady checking the post before the editors get it, while Spambot is sitting there watching users and visitors like an undercover cop. And Ed (with a large bat) and Jim (with a snookerball in a sock) are in the back on call just in case anyone gets 'funny'.

Hopefully these changes will fix the outstanding issues. Over to you...

comment:9 Changed 4 years ago by jim

As an aside, as we move towards integrating Transition Culture onto the site, we're going to need to use something that does not neccesarily require registration, or make the registration *really* easy and quick otherwise the TC fans are going to riot. Discus?

You'll need to raise a ticket for that, but I've got a few ideas.

comment:10 Changed 4 years ago by ed

  • Priority changed from major to minor

Brilliant - taking down to minor for reference. AFAIK, users were authenticated but if this comes up again, will check first.

comment:11 Changed 4 years ago by ed

  • Summary changed from Spam issues to Spam issues - users not being able to comment

comment:12 Changed 4 years ago by ed

This user could not register. Here is his reply to my questions:
Did the website show you the 'Captcha'? Yes
Did you type it in? Yes
Did it then reject you? Yes
He was rejected 5 times before giving up.

Note: See TracTickets for help on using tickets.