Contacts Spam Filter

This little product/plugin disallows automatic sending of spam through the Contact Us page.

Notes to version 1.1.0.0

Due to an almost personal battle against some spammers - intended as: high spam update rate, specially in the weekends when both me and spammers have nothing to do - I added an option to check the allowed number of hyperlinks in the message body, which makes this spam filter a little more intelligent.

The default number of allowed links is set to 12, which appears to be the lower limit from the latest research.

For customizing the message and the number of allowed hyperlinks, an option interface was added, which appears right below the vBulletin Options list - Site Name / URL / Contact Details, as 'Contact Us' Spam Filter Settings.

Version History
1.1.0.2 Additional recognition strings (repetitive 'http://')
1.1.0.1 FIX: Hyperlinks count bug.
1.1.0.0 Additional recognition strings; check of allowed number of hyperlinks in the message body; options interface

1.0.1.10 Additional recognition string
1.0.1.9 Additional recognition string (not published)
1.0.1.8 Additional recognition string (not published)
1.0.1.7 Additional recognition string
1.0.1.6 Additional recognition string (not published)
1.0.1.5 Additional recognition string (not published)
1.0.1.4 Additional recognition string
1.0.1.3 Additional recognition string
1.0.1.2 Additional recognition string
1.0.1.1 Full vBulletin integration, updateable
1.0.0.0 Basic Spam Filter

[y2ksw]

I've updated the spam filter. If this is still not working, I will need the complete email attached as a zip file, since pasting into a code/quote window may be changed by vbulletin. :knockedout:

[Mecho]

awesome . thanks for make this . spammers made me crazyyyyyyyyyyyyyyyyyy .

anyway i have new Smart spammer that i think he know about ur hack , lol . here is the email with full header details :

X-Apparently-To: mechondak@yahoo.com via 216.252.110.64; Wed, 18 Apr 2007 07:17:33 -0700
X-Originating-IP: [64.233.162.235]
Return-Path: <mechodownload+caf_=mechondak=yahoo.com@gmail.co m>
Authentication-Results: mta361.mail.re4.yahoo.com from=mail.ru; domainkeys=neutral (no sig)
Received: from 64.233.162.235 (EHLO nz-out-0506.google.com) (64.233.162.235) by mta361.mail.re4.yahoo.com with SMTP; Wed, 18 Apr 2007 07:17:32 -0700
Received: by nz-out-0506.google.com with SMTP id m7so145975nzf for <mechondak@yahoo.com>; Wed, 18 Apr 2007 07:17:32 -0700 (PDT)
Received: by 10.114.14.1 with SMTP id 1mr234459wan.1176905852209; Wed, 18 Apr 2007 07:17:32 -0700 (PDT)
X-Forwarded-To: mechondak@yahoo.com
X-Forwarded-For: mechodownload@gmail.com mechondak@yahoo.com
Delivered-To: mechodownload@gmail.com
Received: by 10.114.124.9 with SMTP id w9cs469410wac; Wed, 18 Apr 2007 07:17:31 -0700 (PDT)
Received: by 10.90.28.12 with SMTP id b12mr366994agb.1176905851105; Wed, 18 Apr 2007 07:17:31 -0700 (PDT)
Return-Path: <nobody@host2.mechoddl.com>
Received: from host2.mechoddl.com ([69.72.208.192]) by mx.google.com with ESMTP id 3si868799aga.2007.04.18.07.17.30; Wed, 18 Apr 2007 07:17:31 -0700 (PDT)
Received-SPF: neutral (google.com: 69.72.208.192 is neither permitted nor denied by best guess record for domain of nobody@host2.mechoddl.com)
Received: from nobody by host2.mechoddl.com with local (Exim 4.63) (envelope-from <nobody@host2.mechoddl.com>) id 1HeAz6-0003U4-MK for mechodownload@gmail.com; Wed, 18 Apr 2007 10:18:12 -0400
To: mechodownload@gmail.com
Subject: Mecho Download Contact Us Form - Site Feedback
From: "drugstore @ Mecho Download" <shimushin_eduard@mail.ru> Add to Address BookAdd to Address Book Add Mobile Alert
Message-ID: <200704181409.0f998b891621@www.mechodownload.com >
MIME-Version: 1.0
Content-Type: text/plain; charset="windows-1256"
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-Mailer: vBulletin Mail via PHP
Date: Wed, 18 Apr 2007 10:18:12 -0400
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - host2.mechoddl.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
X-AntiAbuse: Sender Address Domain - host2.mechoddl.com
X-Source:
X-Source-Args:
X-Source-Dir:
Content-Length: 544


The following message was sent to you via the Mecho Download Contact Us
form by drugstore.

--------------------------------

Ordered Amaryl from this site and it was sooo much cheaper than buying
it at CVS.. terrific!
They have great products, great prices and fast customer service, what
more can you ask for? Will shop with them always. They're my pick!
David, USA
TheDrugMarket

can u kill this one too !!!!!

[y2ksw]

Well I think there is not much I can do - but in any case, spam with only one link is not interesting to spammers, so they stop on their own

[Mecho]

ok , Thanks anyway for make this great hack

[adwade]

I tripped across this old message in some archives and thought it was a unique addition to the choices on the Contact Us page that may offer some more defense:

Undertoad Jul 3rd 2006, 4:20pm
Here's how I deal with it, via "Contact Us Options":

http://cellar.org/2006/spammer.gif

Even with image verification off, this simple method worked perfectly.

No spammer ever figured out that they should change the default setting. Every legitimate contact us user changed the setting.

Gmail's spam filtering picked up only the spam messages. Problem solved.

above taken from http://www.vbulletin.com/forum/archi.../t-188024.html

[y2ksw]

This is the most intelligent solution I've ever seen

Compliments!!!