We have moved to Github. Please open tickets there.

Opened 19 months ago

Last modified 18 months ago

#4080 new Feature Request

Limit on messages, comments, and blog posts per day plus admin notifications

Reported by: topdog08 Owned by: brett@…
Priority: normal Milestone: Elgg 1.8.x
Component: Core Version: 1.7
Severity: critical Keywords: spam flood attack limit comments messages posts
Cc: brett@… Difficulty:

Description

Recently my site was hit by 5682 spam comments and 42520 spam blog posts while I was away and had not checked my site for a week. I'm still not clear how to delete all of this cleanly, but that is not the issue here. What is needed to prevent this type of problem is a configurable limit on messages, comments, and blog posts per day plus admin notifications when those limits are reached and by whom.

This should be as simple as adding the variables plus user counters.

Change History (4)

comment:1 Changed 19 months ago by Purus

Few Forums that I have seen has some limit on posting. One can post messages only after an interval of 3 minutes. Some times this get annoying for some real user.

So we should find out a way to combat these issues.

comment:2 Changed 19 months ago by topdog08

Just to be clear my error description and proposal do not apply to the groups plugin although perhaps there is some way it applies there. I'm specifically talking about messages between users, blogs, and comments on blogs. Groups could likely use some type of limit as well, but I can understand a simple counter might be less effective for groups because the volume of posts from an individual is expected to be higher.

comment:3 Changed 19 months ago by topdog08

In addition, if this limit was not specified by the admin, it should be unlimited, exactly the same way as today. I'm not proposing a required setting or a default.

comment:4 Changed 18 months ago by cash

  • Milestone changed from Needs Review to Elgg 1.8.x

Adding a throttle that can be customized would be a valuable addition to Elgg.

Note: See TracTickets for help on using tickets.