[pLog-svn] r5254 - plog/branches/lifetype-1.2/plugins/badbehavior

Jon Daley plogworld at jon.limedaley.com
Sun Apr 1 16:13:45 EDT 2007


On Sun, 1 Apr 2007, Reto Hugi wrote:
> BB is still kind of a black box to me, but I'd like to change that.
 	Yeah, me too.

> 1. there is a db table that gets filled with stuff. and plenty of it.
> I'm running bb on my low traffic site for a couple of weeks and it's
> already 1MB. We should think about an interface to manage that data, right?
 	Doesn't it prune out old entries?  My table is 300KB, and I have 
been using it for a long time.

> 2. as bb is a plugin it doesn't get activated as long as you don't hit
> the "plugins" page in the admin interface. that's probably not how it
> should be. should we add bb to the config value ("plugin_list") in the
> wizard?
 	Hadn't realized that, yes, that sounds good.  That might be the 
explanation for nomad or whoever the guy was that was having some 
interesting behavior with his spam.

> 3. does anyone of you entirely rely on bb? I disabled authimage for
> about 24h and got arount 30 spam comments comming through. is that
> something you'd expect?
 	I tried disabling authimage, and that wasn't enough.  I now use 
badbehavior and hiddeninput, and I get one or two unfiltered spam a week.

> 4. bb 2.0.10 is out, but as I understand we did customizations and I
> don't want to brake stuff :)
> http://www.bad-behavior.ioerror.us/
 	We didn't customize very much.  I believe I put "jondaley" or 
something next to the parts (part?) I customized.  I believe I added in 
the test to check for quick posts - though that applies to searches, so I 
might have taken it out.  It might be useful to teach badbehavior more 
about our system, ie. only protect comment posting, instead of all POSTs.
 	I think I removed a test that didn't work due to javascript 
caching - ah yes, the test for POST without a GET in the last x hours. 
That would be nice to fix - though I suspect it will be the same old 
{dynamic} doesn't work with LT plugins problem.


More information about the pLog-svn mailing list