Prevent Spam Bot Registrants

[Brad Phillips]

Native reCAPTCHA support might go a long way in solving this issue, but aiki installations are being successfully targeted by spam bots. There should to be preventative measures available to developers to help deal with this & possibly built in function calls in forms (i.e. :unique).

[rejon (rejon)]

recaptcha is just part of this.

[rejon (rejon)]

This is high priority and we should have first class support for recaptcha in aiki.

I think the way to do is have a per-site public and private aiki key in aiki_configs, then allow use of recaptcha all throughout a site after those keys are input.

Then, we need to turn this on by default on registration to aiki.

[rejon (rejon)]

bassel, we really really really need that recaptcha. We having to delete spam accounts by hand right now.

[Bassel Safadi (bassel)]

a beta solution is now available, working on this to get it stable ASAP

[rejon (rejon)]

ok, where are we at with this?

[rejon (rejon)]

Ok, is this stable in the latest upcoming aiki? So, if it is, then just need to update oflb to latest, and get for free.

[Bassel Safadi (bassel)]

a solution is committed to aiki, but still having some security issues, pushing to 0.9 and will release sites wide once the security bug is solved.
actually many recaptcha systems suffer from the same thing because you need to create a cookie or session before validation and it's a bit tricky to store the form data and the captcha information before the validation happen so most systems store the form data in the cookie which is dangerous and I don't want to do in aiki.. need to figure out a better way, maybe by creating temp table to store those data then move to the real table

[Bassel Safadi (bassel)]

Default captcha support added in revision 720 please, here is how to use it: http://aikiframework.org/wiki/Improve_Your_AikiFu#Create_a_captcha

[Bassel Safadi (bassel)]

currently updating scale to latest aiki and will add captcha to the registration form to test

[rejon (rejon)]

great work man!

On Mon, Feb 21, 2011 at 2:55 PM, Bassel Safadi <email address hidden> wrote:
> ** Changed in: scalejournal
>       Status: In Progress => Fix Released
>
> --
> You received this bug notification because you are subscribed to
> aikiframework.
> https://bugs.launchpad.net/bugs/684534
>
> Title:
>  Prevent Spam Bot Registrants
>

--
Jon Phillips
http://rejon.org/ | http://fabricatorz.com/
chat/skype: kidproto | irc: rejon
+1.415.830.3884 (global) | [phone] (sf)

[rejon (rejon)]

can you fix on scale too now?

On Mon, Feb 21, 2011 at 3:03 PM, <email address hidden> <email address hidden> wrote:
> great work man!
>
> On Mon, Feb 21, 2011 at 2:55 PM, Bassel Safadi <email address hidden> wrote:
>> ** Changed in: scalejournal
>>       Status: In Progress => Fix Released
>>
>> --
>> You received this bug notification because you are subscribed to
>> aikiframework.
>> https://bugs.launchpad.net/bugs/684534
>>
>> Title:
>>  Prevent Spam Bot Registrants
>>
>
>
>
> --
> Jon Phillips
> http://rejon.org/ | http://fabricatorz.com/
> chat/skype: kidproto | irc: rejon
> +1.415.830.3884 (global) | [phone] (sf)
>

--
Jon Phillips
http://rejon.org/ | http://fabricatorz.com/
chat/skype: kidproto | irc: rejon
+1.415.830.3884 (global) | [phone] (sf)

[rejon (rejon)]

i mean sharism...should add to ocal too

On Mon, Feb 21, 2011 at 3:03 PM, <email address hidden> <email address hidden> wrote:
> can you fix on scale too now?
>
> On Mon, Feb 21, 2011 at 3:03 PM, <email address hidden> <email address hidden> wrote:
>> great work man!
>>
>> On Mon, Feb 21, 2011 at 2:55 PM, Bassel Safadi <email address hidden> wrote:
>>> ** Changed in: scalejournal
>>>       Status: In Progress => Fix Released
>>>
>>> --
>>> You received this bug notification because you are subscribed to
>>> aikiframework.
>>> https://bugs.launchpad.net/bugs/684534
>>>
>>> Title:
>>>  Prevent Spam Bot Registrants
>>>
>>
>>
>>
>> --
>> Jon Phillips
>> http://rejon.org/ | http://fabricatorz.com/
>> chat/skype: kidproto | irc: rejon
>> +1.415.830.3884 (global) | [phone] (sf)
>>
>
>
>
> --
> Jon Phillips
> http://rejon.org/ | http://fabricatorz.com/
> chat/skype: kidproto | irc: rejon
> +1.415.830.3884 (global) | [phone] (sf)
>

--
Jon Phillips
http://rejon.org/ | http://fabricatorz.com/
chat/skype: kidproto | irc: rejon
+1.415.830.3884 (global) | [phone] (sf)

[Bassel Safadi (bassel)]

ok updating sharism now