aaronblohowiak/evalsha

Spamming

Closed this issue · 13 comments

Right now the site are suffering with spamming!

I would like to keep the barrier to contributing very low if possible, so I don't want to make it hard for people to contribute -- not sure what the best way a) prevent spam and b) make it painless to contribute is. I have thought about using Github for auth.. what do you think?

how about a captcha?

a captcha where the user must evaluate code! because machines are terrible at... oh. nevermind.

LOL. I tried recaptcha 0.3.4, but it is tightly bound to Rails. Would
accept a pull request !

  • Aaron

On Mon, Oct 22, 2012 at 4:51 PM, frankamp notifications@github.com wrote:

a captcha where the user must evaluate code! because machines are terrible
at... oh. nevermind.


Reply to this email directly or view it on GitHubhttps://github.com//issues/3#issuecomment-9685238.

perhaps you could require that submitted code be syntax-error-free Lua?

Excellent suggestion! What lua syntax checker would you recommend?

On Tue, Oct 23, 2012 at 2:26 PM, mikemccabe notifications@github.comwrote:

perhaps you could require that submitted code be syntax-error-free Lua?


Reply to this email directly or view it on GitHubhttps://github.com//issues/3#issuecomment-9718857.

Can the code be EVALed in a Redis instance as a check?

What about something like AskiMet?

There is also https://github.com/achiu/rack-recaptcha that plugs into Rack and not rails.

Also, perhaps tossing out any script that has HTML in it?

Pull requests gladly accepted :D

On Wed, Jan 23, 2013 at 9:34 AM, Jim Keener notifications@github.comwrote:

Also, perhaps tossing out any script that has HTML in it?


Reply to this email directly or view it on GitHubhttps://github.com//issues/3#issuecomment-12611591.

There is already a bit of rejection code -- i think rejecting html stuff is
the easiest way to go

On Wed, Jan 23, 2013 at 9:22 PM, Aaron Blohowiak
aaron.blohowiak@gmail.comwrote:

Pull requests gladly accepted :D

On Wed, Jan 23, 2013 at 9:34 AM, Jim Keener notifications@github.comwrote:

Also, perhaps tossing out any script that has HTML in it?


Reply to this email directly or view it on GitHubhttps://github.com//issues/3#issuecomment-12611591.

Thanks for the offers. It should be fine now. Please email me aaron.blohowiak@gmail.com if you notice any more spam. I've merged an PR that blocks '<a', '<p' and 'http:'. If you want to make it so github-authorized contributors are free from these checks, I will gladly merge the pull request.