Comments on: MoveableType Comment Spam

Question: MoveableType Comment Spam

Orange Goblin — Thu, 08 Jul 2004 08:35:03 -0800

My MT powered blog (version 2.51) has just been hit by over 200 comment spams. Is there some sort of "delete last x comments" command, or do I have to delete them all manually? And how do I stop this happening again? To install MT Blacklist I have to update MT, and I can't do this under the new license because it is a group blog with numerous authors. Please spare me the dullness of repetitive delete button clicking!

By: Aaorn

Aaorn — Thu, 08 Jul 2004 08:44:51 -0800

The most painless method would be if you have some sort of direct access to the mySQL database -- does your web host give you phpMyAdmin or something similar?

By: bcwinters

bcwinters — Thu, 08 Jul 2004 08:47:18 -0800

You can still get the latest version of MT 2.x on their website under its original license; you have to agree to the 3.0 license in the process of logging on but since you're not using 3.0 it won't apply to you. At least, that's my reading of it.

MT-Blacklist is *absolutely necessary* to keeping an MT blog healthy, if you ask me.

(And FYI, the Movable Type Support Forums are still available on their site, even if they done their damnedest to hide the link)

By: Orange Goblin

Orange Goblin — Thu, 08 Jul 2004 08:49:36 -0800

Yes I have phpMyAdmin - what do I need to do, and how likely am I to screw it up?

By: pzarquon

pzarquon — Thu, 08 Jul 2004 09:29:27 -0800

Going straight into the database would work, I suppose, but I agree with bcwinters, MT-Blacklist is the only way to go. If you were hit once with 200 comment spams, you'll get hit again (and again and again). MT-Blacklist catches most of these on its own, but the new ones that come out can be cleared with two clicks of the mouse.

FWIW, there are lots of people committed to holding their MT installs to v2.661, which is still available for download, and MT Blacklist works with it, installs easily (a handful of files in a couple of locations), and will save you a lot of headache.

By: Orange Goblin

Orange Goblin — Thu, 08 Jul 2004 10:20:15 -0800

pzarquon those sites say that if I download any version of MT now, the 3.0 license will apply, or am I reading it wrong?

By: Zed_Lopez

Zed_Lopez — Thu, 08 Jul 2004 10:39:33 -0800

It looks that way, Orange Goblin. I'm glad I upgraded to 2.661.

Is your data stored in an SQL database? If so, what Aaorn said.

Otherwise, if your data's in a Berkeley DB, your best choice is to write a script using the Perl API, if you're into that sort of thing.

By: mathowie

mathowie — Thu, 08 Jul 2004 10:43:45 -0800

Just download the version 2.661 and install MT-blacklist. You won't be violating any licenses and no one will "come get you" for doing something perfectly legal and allowed.

By: rhapsodie

rhapsodie — Thu, 08 Jul 2004 10:56:34 -0800

It sounds like someone was spamming your site using an auto-spam-script. If you do not want to upgrade your mt installation, the easiest way to combat this would be to rename your mt-comments.cgi file and then note the change in your mt.cfg file (and maybe your templates, if the filename is hardcoded in). This will still allow individual spammers, but will combat the hundreds-at-a-time spam comments.

There are also other steps you can take to keeping spam-free without mt-blacklist.

By: Orange Goblin

Orange Goblin — Thu, 08 Jul 2004 11:05:01 -0800

rhapsodie: I looked at doing that but couldn't find the line in mt.cfg to change. I guess I'm just going to download 2.661.

By: kchristidis

kchristidis — Thu, 08 Jul 2004 15:54:05 -0800

Regarding MT-Blacklist, a side-question if I'm allowed to:

The instructions say: "Set the permissions for all files to 755 (-rwxr-xr-x)".

What if you've got a Win32 host? How do you set permissions on a non-Unix host?

That's what's keeping me from adding this plugin to my MT installation.

By: gen

gen — Thu, 08 Jul 2004 17:02:37 -0800

If you are uploading your files via FTP, your FTP program should have the functionality to set permissions on files/folders.

By: Orange Goblin

Orange Goblin — Thu, 08 Jul 2004 17:53:29 -0800

Well I managed to give myself a heart attack by screwing up the MT upgrade, but its sorted now, so I'll try Blacklist in the morning.

By: Hackworth

Hackworth — Fri, 09 Jul 2004 23:43:36 -0800

If it's the same guy that got me, do this:

mysql>DELETE from mt_comment where comment_email='spammer@email.com';

By: hyperizer

hyperizer — Tue, 13 Jul 2004 14:44:32 -0800

Just download the version 2.661 and install MT-blacklist. You won't be violating any licenses...

Actually, Six Apart now distributes 2.661 with the new license.