Bugs » AutoAdd could bypass captcha and be safe

added on May 12, 2009 by jim
[x] Allow others to AutoAdd if recp. link confirmed. (default, enabled)

Why not?

When using AutoAdd if the captcha is enabled it won't submit. The reason for the captcha is to prevent spam bots from
abusing the system and to identify a human submitter.

But if you have backlink checking enabled, and only allow a few submits per IP who cares?

They can't flood the system (at least not from the same IP), you should also limit how many backlink checks you will do
to just a few at the same IP per day etc...

If your link is already there then that is what you want. I don't know yet but doesn't this script automatically check
for backlinks and delete or at least disable those sites that remove the links? If not then it should.

I don't see an advantage to stopping AutoAdd just because of the captcha. AutoAdd should be allowed unless the
"advanced" user turns it off for some good reason.

Did I miss something?
added on May 14, 2009 by v0id
Hey Jim,

catpcha is off by default I believe, can't remember right now :D

The thing is, there has been a lot of cheating going on, where people would write software to add a bunch of links to
site without captcha, cloaking the linking page.
They detects the IP of the server they added their link to, and when a surfer access their site from that IP, they would
show the link, but otherwise leave it out.

Captcha makes the life much more bitter for the people writing this kind of software, and they will most likely skip
trying to add their link to the sites having captcha enabled.

People can still cheat LinkEX in this manner, because the link is always checked from the same IP, an up untill last
version, it used the same useragent all the time.

I have planned to add proxy support, but I need to rewrite my functions, to accomdate for failing proxies, so links are
not disabled because of a faulty or slow proxy server.

My philosophy with LinkEX is the put everything in as an option, setting the default values to what I would prefer, but
allow people to use LinkEX as they prefer, by tweaking on the options & settings.

v0id



added on May 14, 2009 by jim
Like I said, you can limit them to only so many SUCCESSFUL adds per day or something.

Combined with automatic link checking on a daily / weekly basis it should be OK and the guys who do "cheat"
wouldn't get much for very long.

Unless you want to tell me that this is important enough for them to use proxies to get different IPs, and even then
they would get removed at the next auto link check.

Maybe since this is becoming important, the script should have a thing to install / remove an addition to cron for them,
all they have to do is select from a drop down menu a day / week setting, check a box to turn it on or off and hit
"do it".

Checking for a human in the submit by hand mode is OK (if the user wants that).

Add reply

This thread has been inactive for more than 14 days, so it has been locked.

Feel free to create a new thread with your questions.