Opened 19 months ago
Last modified 18 months ago
#4080 new Feature Request
Limit on messages, comments, and blog posts per day plus admin notifications
| Reported by: | topdog08 | Owned by: | brett@… |
|---|---|---|---|
| Priority: | normal | Milestone: | Elgg 1.8.x |
| Component: | Core | Version: | 1.7 |
| Severity: | critical | Keywords: | spam flood attack limit comments messages posts |
| Cc: | brett@… | Difficulty: |
Description
Recently my site was hit by 5682 spam comments and 42520 spam blog posts while I was away and had not checked my site for a week. I'm still not clear how to delete all of this cleanly, but that is not the issue here. What is needed to prevent this type of problem is a configurable limit on messages, comments, and blog posts per day plus admin notifications when those limits are reached and by whom.
This should be as simple as adding the variables plus user counters.
Change History (4)
comment:1 Changed 19 months ago by Purus
comment:2 Changed 19 months ago by topdog08
Just to be clear my error description and proposal do not apply to the groups plugin although perhaps there is some way it applies there. I'm specifically talking about messages between users, blogs, and comments on blogs. Groups could likely use some type of limit as well, but I can understand a simple counter might be less effective for groups because the volume of posts from an individual is expected to be higher.
comment:3 Changed 19 months ago by topdog08
In addition, if this limit was not specified by the admin, it should be unlimited, exactly the same way as today. I'm not proposing a required setting or a default.
comment:4 Changed 18 months ago by cash
- Milestone changed from Needs Review to Elgg 1.8.x
Adding a throttle that can be customized would be a valuable addition to Elgg.

Few Forums that I have seen has some limit on posting. One can post messages only after an interval of 3 minutes. Some times this get annoying for some real user.
So we should find out a way to combat these issues.