PDA

View Full Version : Stop an easy loophole for spammers getting around censoring?

007
03-23-2003, 06:22 AM
Hey I censor a few words. I actually just have them replaced by other words, but some people have quickly figured out how to get past this.

They can simply add [b ] tags in the middle of the word.

Like: Tru[ b][/ b]ck

This still shows up as "Truck" even though this word is supposed to be censored. I don't think this is any way around this but if anyone knows I'd appreciate it.

I know I could just add "Tru[ b][/ b]ck" to my block list, but someone could but as many [ b] tags in there as they wanted, and it would not be regognized as the same word.

There are minors that browse my forums and I try to censor the top few profanities. Any ideas?

:)
filburt1
03-23-2003, 02:29 PM
vB3 is smart enough for this. Just scan the post for empty tags, although there's no way to stop them in the end. If they keep doing it, warn and ban them.
N!ck
03-23-2003, 03:22 PM
actually, filb's right. you could do something like:


$bbcode=str_replace("[b ][ /b]","",$bbcode);


in the function bbcodeparse2()
Boofo
03-23-2003, 03:53 PM
Wouldn't that screw up your bold vbcode tags then?
Xenon
03-23-2003, 03:56 PM
nope, because it just eliminates empty bold tags.

but it's also a bad thing, because then you cant do something like this anymore to describe vb-code:

test
Boofo
03-23-2003, 04:03 PM
How does vb3.0 handle it?
007
03-23-2003, 05:18 PM
Today at 11:56 AM Xenon said this in Post #5 (https://vborg.vbsupport.ru/showthread.php?postid=371976#post371976)
nope, because it just eliminates empty bold tags.

but it's also a bad thing, because then you cant do something like this anymore to describe vb-code:

]test [/B]

I'm not sure what you mean Xenon... Why would you want to do that in the first place?

And that string replace is a good idea, although the only problem is if someone REALLY wanted to, they could do something like this:

vBulletin = vBu[ b][ i][ u][/ b][/ u][/ i]lletin

:ermm: Is there a way to disable vbcode on a per-member basis? Maybe I'll look into that...
Xenon
03-23-2003, 05:23 PM
@boofo: i'm intrested in, too :)

@006:
[high]test[high] is actually [high]test[high]
007
03-23-2003, 06:00 PM
Oh I see. Hmm. Inever thought about that. Well is there a way in PHP to say if X is ANY characters?

I am doing $bbcode=str_replace("\[b\]\[\/b\]","", $bbcode);

but I was thinking in the case of this issue though, what if I was able to use [*(if any characters besides "/" are found here)][/*]

Is something like this possible?

Maybe if certain letters are found in a word in no particular order, then those would trigger the replace? I don't know... :ermm:

How does vB3 handle this? And is there an estimate release time? It's been in it's beta stages for like a year at least. :(
Erwin
03-23-2003, 08:59 PM
Today at 07:00 AM 006 said this in Post #9 (https://vborg.vbsupport.ru/showthread.php?postid=372116#post372116)
How does vB3 handle this? And is there an estimate release time? It's been in it's beta stages for like a year at least. :(

Read the announcement in the Announcement forum regarding vB3 updates.

As for this problem - it's a known issue that vB3 addresses. How? Best ask the vB developers at vB.com. :)