Home

Forum

Archives

Tags



Plugins:


AddCategory

AjaxRating

Blacklist32

BlacklistStats

BlogJanitor

CommentRegistration

DefineCommentPending

EntryPost

FastSearch

FlickrPhotos

FormatList

MTCategoryCommentCount

MTDisguiseCommentURL

MTDisguiseTrackbackURL

MTDynamic

MTTrackbackEntry

PluginNetwork

SmartRebuild

SpamFirewall

TemplateInheritance

TrustedCommenters







MTDisguiseCommentURL v0.5 Beta

Keep track of this discussion by subscribing to the RSS feed for this discussion thread
Author Message
Mark







PostPosted: December 17, 2004 9:08 AM 

This plugin uses Javascript to hide the true location of you comments script, making it difficult for spammers to find it in order to bombard you with spam.

It is important to note that if you use this plugin, commenters must be using a Javascript-enabled brower in order to post comments.

I have been testing this plugin on one of my blogs for about 12 hours, and I have received zero spam in that time period on that blog. I will be installing it on all my blogs today.

Installation:

1. Download DisguiseCommentURL.zip

2. Extract and upload MTDisguiseCommentURL.pl to your 'plugins' directory within your 'mt' directory.

3. Open your Individual Entry Archive template and find the following line:

<form method="post" action="<$MTCGIPath$><$MTCommentScript$>" name="comments_form" onsubmit="if (this.bakecookie[0].checked) rememberMe(this)">

Delete <$MTCGIPath$> and <$MTCommentScript$> and replace with a fake comment URL. An example might be http://www.mydomain.com/postcomments.cgi -- but don't use this example! Make up something unique. Remember, the URL should point to a non-existent file.

2. In the same template, after the </form> tag, enter:

<$MTDisguiseCommentURL$>

3. Rebuild your Individual Archives, and you are done. Post a test comment to make sure it works.

Arvind

Posts: 3

Reply: 1



PostPosted: December 17, 2004 11:34 AM 

I like this option but my only concern is some people may have javascript disabled in which case they won't be able to post a comment...

Mark Carey

Posts: 150

Reply: 2



PostPosted: December 17, 2004 12:17 PM 

True. But in my opinion the percentage of people with javascript disbaled is very, very small. And the percentage of people with javascript disabled that want to post a comment on my sites is an even smaller number.

Joost Schuur

Posts: 1

Reply: 3



PostPosted: December 18, 2004 1:27 AM 

Your download link is broken. The URL should be: http://mt-hacks.com/downloads/DisguiseCommentURL.zip

Mark Carey

Posts: 33

Reply: 4



PostPosted: December 18, 2004 8:45 AM 

Thanks for pointing that out. Embarassed

It is fixed now.

Aine

Posts: 1

Reply: 5



PostPosted: December 18, 2004 2:48 PM 

I have sent you a private email with regards to your comment on my blog. I believe my solution will work, but I can see why they are still spamming you here. Please review my procedure outlined in my email and let me know how it can be improved. I'm not a programmer, but perhaps you can find ways to make it better(?) Smile

Kenneth

Posts: 1

Reply: 6



PostPosted: January 4, 2005 8:38 PM 

Works great. Haven't had any problems with it so far.

Guess it's another tool to make it harder for spammers.

tones

Posts: 1

Reply: 7



PostPosted: January 25, 2005 4:17 AM 

Yeah but now man people are disabling java, especailly newbies, because they see it as just being used for adverts mostly, same as macromedia, 99% of the time it appears on your screen its an ad

Mark Carey

Posts: 150

Reply: 8



PostPosted: January 25, 2005 7:16 AM 

tones. there is an important difference between Java and JavaScript. Java applets can be compared to Macromedia Flash objects. JavaScript, on the other hand is interpreted by the web browser itself, and it wisely used on web pages. Some people may disable JavaScript, but only advanced users would do...

Kass

Posts: no

Reply: 9



PostPosted: February 22, 2005 3:19 PM 

I want to try this plug-in, but my comments are set up so that viewers click on a link and a javascript window pops up with the comments form in it.

This means that on my individual entries, I don't have a form to fill out so I don't know where to put the tag. Any tips for me? :\

Enrico

Posts: no

Reply: 10



PostPosted: March 22, 2005 4:08 AM 

Thanks alot. hope this works.

Jonny

Posts: 1

Reply: 11



PostPosted: July 27, 2005 6:46 AM 

Thanks for this plug-in!!! It really works great!!!

Guide

Posts: 1

Reply: 12



PostPosted: August 3, 2005 4:30 PM 

Downloaded! Will give this a go

Tom Hielscher

Posts: 1

Reply: 13



PostPosted: May 29, 2006 7:50 AM 

Thank you for the plug-in. That's what I was looking for. Wink

Elizabeth

Posts: 1

Reply: 14



PostPosted: July 8, 2006 11:42 AM 

Is this plug-in compatible with MT 3.2? Thanks!

Hot Girl [TypeKey Profile Page]

Posts: 1

Reply: 15



PostPosted: November 10, 2006 7:09 PM 

I am installing this plug-in. I think its great. I use google analitics to track my visiters and I have found that 99% of them have javascript so that won't be an issue for me.

Thanks!

Bruce Prochnau [TypeKey Profile Page]

Posts: 1

Reply: 16



PostPosted: November 22, 2006 12:04 PM 

I'm just going to try this out, was just going to hire a javascript programmer to do this as the idea makes a lot of sense.

I wouldn't be concerned about those with javascript turned off. Few do so, and for those who do a simple email link on the form suffices (email if you have problems posting).
Well done!

Mark Carey [TypeKey Profile Page]

Posts: 150

Reply: 17



PostPosted: November 22, 2006 7:24 PM 

Thanks, Bruce.

I have been using this approach for almost two years and it works well. If really want to reduce spam, rename your comment script first, and then start using this plugin. That will make it very difficult for autmated spammers to determine the new script name, since the javascript will disguise it.

Nala [TypeKey Profile Page]

Posts: 1

Reply: 18



PostPosted: January 30, 2007 12:48 PM 

Well. I started using this script a few days ago and it seemed to work well.

I renamed the script, rebuilt the individual archives, and didn't see any spam.

Today I started getting spam comments again. MT says they are from known spammers on bsb.spamlookup.net.

I'm assuming spammers have now altered their bots to look for disguised paths to the comments CGI.

Mark Carey [TypeKey Profile Page]

Posts: 44

Reply: 19



PostPosted: January 31, 2007 8:52 AM 

While that is possible, Nala, it also may be the case that those spams were posted manually. I haven't seen much evidence for spambots grabbing the correct script URL from the javascript, but its difficult to sure.

Mankenler

Posts: 1

Reply: 20



PostPosted: April 6, 2007 6:42 PM 

I am installing this plug-in. I think its great. I use google analitics to track my visiters and I have found that 99% of them have javascript so that won't be an issue for me.

Thanks!

sohbet

Posts: 1

Reply: 21



PostPosted: April 27, 2007 8:12 PM 

very good website thank you

izle

Posts: 1

Reply: 22



PostPosted: April 28, 2007 8:15 PM 

Thanks for pointing that out.

It is fixed now.

DJ [TypeKey Profile Page]

Posts: no

Reply: 23



PostPosted: May 16, 2007 11:42 PM 

I've got several blogs on one MT install. Will this work on a domain other than the main domain that hosts the MT install?

Mark Carey [TypeKey Profile Page]

Posts: 44

Reply: 24



PostPosted: May 17, 2007 10:44 AM 

DJ, yes it will.

Mike

Posts: 2

Reply: 25



PostPosted: July 12, 2007 12:48 PM 

Mhumm. So far, so good, but I tried taking this one step further: I got this PHP script to generate a fake filename for fake comment URL. What do you think about this? Good idea? Bad idea?

Secondly, should I install this script also on other pages that allow comment submission? (i.e. the comment pages, the comment preview pages, etc.) I may be mistaken, but they seem to use the same form...

sohbet

Posts: 1

Reply: 26



PostPosted: July 15, 2007 12:49 PM 

good your site thanks

Rohit kapur

Posts: 1

Reply: 27



PostPosted: August 7, 2007 6:45 AM 

I am installing this plug-in. I think its great. I use google analitics to track my visiters and I have found that 99% of them have javascript so that won't be an issue for me.

Thanks!



Subscribe to this discussion: Email | RSS

Join the conversation:









Remember personal info?





Very Happy Smile Sad Surprised
Shocked Confused Cool Laughing
Mad Razz Embarassed Crying or Very Sad
Evil or Very Mad Twisted Evil Rolling Eyes Wink
Powered by MTSmileys
Check to Subscribe to this Comment:
(email field must be filled in)



Subscribe Without Commenting
















Creative Commons License
This weblog is licensed under a Creative Commons License.