Groundbreaking News

Please, if you are running WP 1.5 you must install Spam Karma 2.0… It is much more stable and efficient than SK1, which is no longer supported.

Your comment was mistakenly eaten by Spam Karma?

Right this way, please

Spam Karma 1.x

You can download the latest version of the 1.x branch here: http://wp-plugins.net/downloads/spam-karma.zip. Please RTFM thoroughly before you install: it’s short but essential.

You can optionally install WP Plugin Manager and use its ‘one-click install’ feature to get Spam Karma (among many other plugins).

Latest Version

Spam Karma’s current version is: 1.20 (see recent changes)
If your version is any older than that, you should consider upgrading. Please read the detailed Change Log to know what’s changed (and how important it might be to upgrade).
Generally, upgrades are painless and merely consist of overwriting existing files with new ones, you ought to check every once in a while if your install is up to date (if you are using WPPM, it will do it automatically for you each time you refresh your list).

How do I use it?

A very complete and illustrated Guide to Spam Karma has been compiled by Jon Abad. Make sure you quickly go over each option and set it accordingly, especially if you experience any problem with Spam Karma.
Aussi disponible en Français maintenant (merci Neuro!).

What does it do, how does it work?

The post that started it all: Introducing Spam Karma contains all the details about both the superficial and in-depth mechanisms that make Spam Karma the fearless Spam Killing Machine that it is.

What’s Next?

A tentative feature list for the next major release is presented on the Spam 2.0 Feature Request page. Please feel free to contribute and let me know what feature or improvement you’d most like to see in the next version.
Note: there might be a few minor bug-fixing 1.x releases before 2.0 comes out.

Contact

Any bug report or question regarding Spam Karma can be sent to: spam-karma [at] unknowngenius [dot] com
Mad props and mariage proposals can also be sent to the above address.
Insults, death threats and comments of an otherwise dislikable nature are welcome at: dave [dot] null [at] unknowngenius [dot] com

Tip Jar

If Spam Karma saved your life/relationship/cat/mailbox and you feel overly generous, please feel free to make a donation.

Special Note on Bugs & Issues

Okay, so this plugin has been checked inside and out, dozens of issues — some minor, some major — have been ironed out, hours have been spent working out individually every user issues…

Nevertheless, there might be bugs left.

And if you happen to encounter one, please, please: before you go and righteously spend 30 minutes writing an indignant entry about how this piece of software has failed you in every possible way… before you do that, take two minutes and send me an e-mail explaining with as much details as possible the issue you are running into. If the problem involves a miscategorized comment, forward it to me with its Spam Karma headers. If you haven’t updated in a while, check the current version (see above) and upgrade if necessary, then try to reproduce the issue and contact me if it persists.

Then, feel free to go and vent as much as you want to your own readership about a problem they are unlikely to care for and highly unlikely to have an answer for.

And for those who think the above advice is stating the obvious, you’d be surprised what referrer checks and technorati vanity searches will turn up.

Recently Fixed Issues

Mark Jaquith wrote all the changes that were added to 1.20. Check his post for more details.
These issues have been fixed recently (v. 1.19), upgrade if you experience these issues:

  • Toned down the deny message (more info here).
  • Fixed a bug with the settings getting reset randomly (due to the “Hall of Shame” cache overflowing).

Known Issues

If you are using a pop-up template for your comments (default is inline) on WP 1.2, please check out Comment #12 in the section below.
If you experience really long delays when posting [legit] comments, try disabling the RBL check in the Blacklist settings on the Option page.

Hey! I want that badass ‘X spams eaten’ message on my blog too!

Nothing’s easier. Assuming you are running the latest version of Spam Karma (1.11 or more), simply insert this tag somewhere in your template (for example inside the “credit” tag in your footer, or in your comment form template, but you can put it anywhere you want):
<?php if (function_exists('spamk_stats')) spamk_stats(); ?>

Notes:

  1. the function_exists part is only there to ensure your template doesn’t break when you disable Spam Karma for some reason.
  2. this message will only be displayed if there has been any comment deleted. If you just installed Spam Karma and the deleted count is zero, the message won’t appear.
  3. Optional (for experts only) If you know your way around PHP and want to customize the message more, you can use two additional boolean arguments to the spamk_stats() function:
    • $return (set to false by default), will return instead of echo’ing
    • $count_only (set to false by default), returns only the ‘deleted spam’ count, without any formatting

Other Languages

250 Responses to “Spam Karma 1.0”

you should get a medal for this

Great work!  Spam Karma is working bug-free for me now :grin:   How did you get “Spam Karma has eaten 574 comment spams…” on your page?  It would be great to add that :grin:

Hello, Spam Karam seems to be a nice plugin and it works perfectly on my local installation. However, when I copy it up on the server and try to invoke the setup page …/spam-karma.php?spamk_setup, just an empty page comes up :-( .

My local machines uses PHP 4.3.9, the server is running PHP 4.1.2, though. CHMODE on the directory was successfully done. Any ideas?

Greetings!

Love the idea of your plug-in. I have it installed but for some reason all comments but my own are being deleted. Where do I go from here and what info do you need in order to help with this problem?

Excellent – installed it this morning. I just noted that comments are not being mailed to me anymore, tho – - I’ll fudge around with it :)

Kickass plugin Dr. Dave! I especially appreciate the work you’ve put into automating the install.

7
Paul Says:

I get the same error as Gerd from comment #3. Just a blank screen when I try to access the setup page.

Hi Paul, do you also have PHP 4.1.2 (running on Debian “Woody”)?

@Dr. Dave: Since it seems there wasn’t an error like this before (at least there’s nothing to be found about it), maybe this is due to some changes in the latest version?

Hi Gerd… Indeed, this might be a recent change (and apparently also an incompatibility with PHP 4.1.2). Even though I have some backup of older versions, I am not even sure this would help immensely (there were many many small code touches) in the past two versions: pinpointing which one is causing this will require some work).

Unfortunately, I am in the process of catching a plane and crossing half the globe in a few hours, so I really cannot spend much time on SK debugging right this minute. But as soon as I settle down (around Tuesday, that should be), I promise to give it a look and let you know…

This is a great plug-in and I *think* it’s working for us, but I’m not sure.

When I go to http://www.organicchurch.net/wp-admin/admin.php?page=spam-karma.php – the page provokes a 404 error. And when I go to http://www.organicchurch.net/wp-content/plugins/spam-karma.php?spamk_setup I have a db error at the top like this:

Database error: [Unknown column 'option_name' in 'where clause']
SELECT COUNT(*) FROM `wp_optionvalues` WHERE `option_name` IN (’save_comment_max_links’, ’save_comments_notify’, ’save_moderation_notify’, ’save_moderation_keys’, ’spamk_saved_options’)

But I’ve never had db errors on any other plug-ins I’ve run and I’m using Wordpress 1.3-alpha-2. I also get that error when I try to do anything on the page, e.g. update blacklist etc.

Any ideas?

Hey Dave, I installed Spam Karma last week, and for a the first few days it worked perfectly and the spam was eaten up and people who weren’t spamming were allowed to comment. But for whatever reason it now blocks people it shouldn’t, and the only reason given is “OSA: Code or time not in submission.” It doesn’t go to the CAPTCHA test, it just says they’re blocked. It then automatically adds their URL and IP to the blacklist. Removing them does no good, as they get blocked again when trying to comment again.

I’ve tried playing around with the settings, switching it to “lenient”, but they’re still blocked.

btw, I’m running wordpress 1.2. Anything I may be overlooking?

I

Hi Jay,

I just checked and indeed the “OSA fields” that are added by SK to your comment form automatically are not present. This is a common problem and will make every comment fail if the “OSA” filter is enabled in SK’s Options. Since comments use to work before, I’d assume the issue comes from some modification you might have brought to your template (I suspect something having to do with the fact you use the pop-up instead of an inline comment section)…
Best and easiest way to solve the problem is to insert the following call inside the comment form in your pop-up template:
<?php osa_form(); ?>

You are correct, adding that line to my wp-comment-popup.php file made all the difference. Those who were blocked previously, are now able to comment. Thanks!!

Spam Karma works great in WordPress 1.3 but I couldn’t get it to install in my Pictoralis install, a hacked version of 1.2. Keep getting Fatal error: Call to undefined function: __() in /…/spam-karma.php on line 904 when I tried to configure it. I was having trouble with it not recognizing the sites listed in WordPress’s own moderation panel so I did the easiest thing, deleted the php that lets people comment.

Richard is bowing in recognition of Dr. Daves superb plugin!!! Thanks no more idiot spam comments for me!

Once again, thanks for the great plugin. I hope you are enjoying your holidays. One of my presents was over 500 comment spams in less than 24 hours, and SpamKarma caught all of them. The weird thing was that all the domains and links were .com. So was it just an attempt to fill up the blacklist with garbage, since it didn’t seem to link to anything profitable? In any case, it was quite tedious to uncheck all the garbage domains and then hit update so that they didn’t enter the blacklist. For future attackes of this type, I would love a “delete all” button to remove all these garbage domains from the blacklist. But when you get back from your vacation – hope you enjoy the rest of it! :-)

Dr. Dave – I got it working :) I installed your latest version on my 1.2.2 WP blog and it’s working beautifully. I hope you had a wonderful holiday!

I had SpamKarma 1.12 working just fine with my WP 1.2.2 blog. Upgraded to SpamKarma 1.14 today and started getting this error: “Parse error: parse error, unexpected T_INC in /home/(my account)/public_html/wp-content/plugins/spam-karma.php on line 2168″

PHP ver is 4.3.10

Fixed (and clarified): I used the WPPM plugin to do a One-Click Upgrade and that’s when I ran into trouble. When I downloaded spam-karma and installed it manually (removing any previously existing dirs/files) it started working again. Great plugin. So-so One-Click upgrade. :P

Jonathan: Heh, sorry you caught us right in the middle of a hasty upgrade… that little glitch was fixed the second before you posted your comment ;) Simply upgrade again from the latest file and it should fix it.
FYI This has actually nothing to do with the one-click upgrade… it only seemed to work better because in the short span of time it took you to do the install again, I had updated the corrected binaries ;)
One day I will maybe accept the fact that every single time I bring even the slightest most innocuous change to the code and take it live without testing, Murphy’s law will find me and bite me hard in the ass…

Carsten: Indeed, this is a new spamming trend. Which seems to prove some people out there are getting very frustrated trying to go through SK and are starting to try polluting blacklist data etc. The upcoming SK 2.0 and its blacklist management on steroids should easily take care of that…

In the meantime, I know it’s definitely a pain to have to uncheck all these entries manually each time, but there’s an easy way around it: just approve them all, and leave them like that for a while (provided they are truly random invalid URL as most of them seem to be these days, they can’t really hurt much) until you get enough to warrant a “Blacklist Reset”… Which will simply erase all entries in your blacklist and redownload again from the master server. You will lose accumulated IPs and spam URLs that you might have added yourself, but usually, these are only useful for a short span of time anyway. The master blacklist should be enough to handle 99% of the spam you’d be getting…

Spiffy! I also got that 350-500x spam hit Christmas gift, and SK got them all. Glad to see the ‘just approve them’ workaround. Great plugin, dr Dave!

Dr. Dave: Thank you for the plugin! I had a problem or two with it at first (legit comments were being sent to hell). But I was able to figure out the problem, and now it works masterfully!

There’s one last kink I can’t figure out… One of my readers is having a tough time commenting, (I asked her to try again, after I fiddled with the configuration, using the solution you passed on to Jay, above) and I’m not sure why… but here’s the message from my digest:

Comment #11
Reason(s):
OSA: Code invalid/forged (IP potentially different).
KARMA: -10
Treatment: hell
Comment posted on Post ID: 187
Added Author IP to auto-ip list (165.21.154.11).
Added URL to auto-url list (www.littlemissdrinkalot.blogspot.com).
Author : LMD
Email : littlemissdrinkalot@hotmail.com
URL : http://www.littlemissdrinkalot.blogspot.com
IP : 165.21.154.11
Comment:
hmph

Any feedback you can give me would be much appreciated! Thanks! :)

Dude, thanks a bunch. I was getting spammed roughly 6 per hour – nonstop. And one day I recieved 600 spams in less than 12hours!!! I was getting ready to switch from WP. Thank you, and the WP community!

Lotsa Karma your way!

doesnt work for me. when I activate this plugin then all comments are allowed to pass thru, even those comments marked as spam by the spam words blacklist in options>discussion are approved by SK – the spam words list is over-ridden even when the “account moderation set criteria” option is enabled in SK. what shud I do :(

To everyone facing the empty page problem and since Dave seems to be on well deserved holidays:

The solution is simple.

1. Open wp-content/wp-plugins/spam-karma.php in a text editor
2. In the 5. line – starting with “Description: ” – move quite to the
end and replace wp-content/plugins/spam-karma.php?spamk_setup with
wp-content/plugins/spam-karma.php?spamk_setup=1 twice (both as the
href argument and between the a-tags).

That’s it, as far as I see :-)

The reason is that the parameter spank_setup, which invokes the setup,
isn’t recognized by older PHP versions if it has no value assigned.

If you have version 1.14 alpha 5 of SK (most recent, I think), this is
already replaced once, but it seems Dave forgot the href
part.

I could not get the SpamKarma CAPTHA to work on my web host.
They told me:
“Ok, so I did some checking and poked around in the source code for
spamkarma’s captcha module, and it’s trying to call phpinfo, which
we’ve disabled for security purposes. So if you want to use the captcha’s just fake the gd_version_number.”
Please see http://textdrive.com/forum/viewtopic.php?pid=17404#17404
Let me know if this can be addressed.
We would love to use this plugin at http://WordPress.Com

Isn’t the version number wrong on this page? At the top…

I am starting to see that “trackback spam” that DrDave spoke of… Though it is not really a trackback, the spammer just starts out the comment with
, thereby bypassing the SpamKarma filter. Any suggestions on how to combat this? Over the past 12 hours, I have had over 100 comments, all for bestiality sites…

I have updated rbl.jamesoff.net (http://rbl.jamesoff.net) to pull blacklisted URLs from the database (instead of having it as a static list I updated) now. This means that URL information can be dynamically added to by external users, and that it auto-expires as needed just like the IP information.

If anyone would like to help me test out my modifications to SK which make it automatically submit IPs and URLs to the RBL, please mail me or see the webpage :)

Having trouble getting the captcha image to work. The square appears, but without the numbers or letters. However, I thought it was working as the top of the page has:

-Captcha-Debug: Check given TrueType-Array! (1)
-Captcha-Debug: Valid TrueType-files: (1)
-Captcha-Debug: Set current TrueType-File: (captcha_fonts/thisprty.ttf)
-Captcha-Debug: Set number of noise characters to: (0)
-Captcha-Debug: Set image dimension to: (125 x 48)
-Captcha-Debug: Set messages to language: (en)
-Captcha-Debug: Keep this params from original GET-request: ()
-Captcha-Debug: Check POST-vars, current try is: (2)
-Captcha-Debug: Generate Keys, public key is: (5f51)
-Captcha-Debug: Delete image (captcha_temp/000f.jpg) returns: (TRUE)
-Captcha-Debug: Comparing public with private key returns: (FALSE)
-Captcha-Debug: Validating submitted form returns: (2)

Function ‘ImageTTFText’: exists (OK)

Function ‘ImageJPEG’: exists (OK)

You should check and see if your host has the GD modules installed on your server – - it’s what will create the images of the letters and numbers. We recently installed it on our servers due to requests from clients…. though not all servers have it and rely on ImageMajik instead – - however, ImageMajik doesn’t handle the requests for this plugin.

Just a suggestion for a possible fix for you. :)

33
graham Says:

Thanks Lisa. I hadn’t even thought of that! :o )

34
Nico Says:

Has anyone reported the TB feature to work for WP 1.2.2? I keep getting spammed.

I’m getting the spam – but it’s being thrown into the moderation queue.

36
Nico Says:

Hmm, at which level have you set the general algorithm? Mine is at normal.

Normal – but I just realized that htey were being put in mod. because of the words I have listed in Options/Discussion. To moderate your trackbacks and pingbacks – Mt.Dew has a great plugin that has been working for me, so far (1,000 trackback spams in the last hour grrr!) – it moderates them – then all I have to do is go in and delete them with one click. You can find it here: MtDew’s Moderate your Trackbacks and Pingbacks – Sorry Dr.Dave — no disrespect meant, but trackback spam is MORE than a pain in the bum :)

The plugin is easy as heck to install, too. Good luck@

38
IO ERROR Says:

SK is trashing legitimate comments? What have I screwed up?

I’m finding that Spam Karma has been eating my good comments, and there is times where a comment will take more then 2 minutes to finish posting. :o

I have the same problem as Anat and Lisa. It just let me do a comment with a lot of spam keywords and URLs in it.

I’m using WP1.2.2, spam karma 1.16 alpha2, Spam-Karma set to Very Strict. I unchecked “Automatically approve comment submitted by a logged-in user of at least user level:” and ” Take in account moderation criteria set on the Discussion page.” All other Advanced options are checked.

I do believe I got it working. I’m not sure what I changed, but it works now… :)

One of my readers can’t even see “leave a comment” portion of the page when I have Spam Karma activated. She uses AOL as her browser, I don’t know if that makes a difference or not. Is there anything I can do to change this?

43
h.ferozekhan Says:

like it

I have a problem where Spam Karma resets itself and forgets all its options (i.e. the fields in the setup screen are empty). That happens about once a day (as I suddenly get email with digests for single messages instead of the previously configured 50) and also resets the “number of spam eaten” counter. This is with WordPress 1.2.2 and Spam Karma 1.16a3. Help?

There is a problem with at least Debian stable and it’s PHP4 where it doesn’t read fonts from the current directory of the server but only from /usr/share/fonts/truetype/ – so fonts have to stay there and you need to set the TTF_folder to point there. If you don’t do this, the captcha_test.php will show the box but now characters.

And on another note: I think the default install should use a delivered font or some free fonts, as linux users not necessarily have the mentioned fonts on their machines (I for example don’t have any truetype fonts on my machine)

Fantastic! I install SK and nothing gets through. You have made the world a better place. Thanks

FYI: I’m getting an internal server 500 error on the captcha_test.php. Removing the lines checking if I am an admin or not fixed it. I’m on Wordpress 1.2.2 on an Ensim server. Everything else appears to be working great though – It’s already blocked the regular poker spams I get.

Hey, dude, just wanted to say, this thing looks really cool. WP is a pain with all the comment spam, so I am glad this thing is around. I’ll be checkin it out!

Just wanted to report a possible solution to the textless captcha problem. I found on my server I had to change TTF_folder to use the full path to the folder, not just the relative path. There’s probably a PHP config option somewhere.

I’ve been having big problems with SK eating good comments. All of them, basically. First, it blocked good commenters because their IPs were on the blacklist. So I turned the blacklist off. Still getting eaten. I keep scaling down the options, and still no one can ever comment.

I have OSA turned off, but still get the hidden tags embedded in comments…

Like Heliologue, I’m having problems with SK denying good comments. In the last 24 hours I’ve had one of my own comments and another person’s comment both denied with the following reason given: “The comment must be made from the same IP address as what requested the comment form.”

I’ve turned off the requirement that the IP which submits the form must be the same as the IP that requested it. Hopefully this will solve the problem.

In addition, I’d like to suggest an improvement to the default comment denial message. The current “bad karma” message is more than a little perplexing to honest commenters who have been mistakenly denied. I would prefer to see a message something like the following:

Certain aspects of your comment have triggered the Spam Karma anti-spam plugin, which is used by this weblog to block comment and trackback spam. As a result, your comment will not appear on the site.

If you believe this to be an error, please notify the weblog’s author.

That would be far more enlightening, and gives legitimate commenters an idea of what to do next.

I just want to say thank you. I installed Spam Karma a week ago, and up to now, it has worked beautifully. I was receiving spam faster than I could post, or even reload my pages!

I believe I have found an error in the spam-karma.php osa_get_code function.

As it is now, the function uses $_SERVER['LOCAL_ADDR'] to generate the md5 hash for the osa code. This should be $_SERVER['SERVER_ADDR'] instead (at least on my server).

Before I replaced the two instances of $_SERVER['LOCAL_ADDR'] with $_SERVER['SERVER_ADDR'] Spam Karma refused every comment (even good ones), giving a “OSA: Code invalid/forged” message. After this fix, Spam Karma seemed to accept comments normally again.

Before I go into answering any of the comments above, for those who missed it, reading: http://unknowngenius.com/blog/archives/2005/01/14/sick-of-this-crap/ might help explaining why I haven’t done so in a long while, and why even this status update is only limited to the minimum.
Basically, because I am a control-freak perfectionist, it’s unlikely I’ll leave any blatant bug unfixed, but do not expect me to spend any more hours debugging or supporting SK at the moment: I have too many other things to do (including possibly develop a better tool).

Now:

Anybody having issues with anything related to “OSA”: < a href="">please read the manual, lisez le manuel, lesen Sie das Handbuch!
If all fails: disable OSA filters in the Options.

Anybody with Captcha-related issues:
- update (well, that one is true for *anybody* with *any* issue, of course).
- use the captcha test page to see what’s wrong.
- if the test page tells you it cannot find “GD” or some other related PHP stuff, contact your host and ask them about it.
- if the test page seems ok, but the letters do not appear, you are probably using PHP with a Debian install, which seems to have some weird issue about using FreeType fonts out of system folder. I *might* have fixed that in the last version (any confirmation would be great), if not, then it’s not really hard to fix, but won’t be taking on it before a while (feel free to do and send me a diff).
- last resort: disable Captcha in the Options page

Trackback filtering issues (and other bugs) were mostly due to new incompatibilities introduced by recent versions of WP alpha 1.5: to this day, they should have been fixed, BUT support for any newer 1.5 CVS update is officially discontinued (i.e.: it might work, but you are on your own). See entry link at the top for details.

Anybody complaining about SK letting your OWN test spam going through: just call me back when a REAL spam goes through, and then email me the full headers and details of what happened. SK is *built* to tell the difference between you and a spammer. it’s smarter than you think.

Overall, consider SK incompatible with WP’s built in spam word list (especially in WP 1.2), it will override it and ignore it as much as it can; which is a good thing.

Everybody else: either upgrade (if you haven’t done so already) or read the detailed documentation. Your solution in there.

Improvements suggestions and insightful bug reports much appreciated, duly noted and will be acted upon time permitting.

Cheers everybody.

Before I go into answering any of the comments above, for those who missed it, reading: http://unknowngenius.com/blog/archives/2005/01/14/sick-of-this-crap/ might help explaining why I haven’t done so in a long while, and why even this status update is only limited to the minimum.
Basically, because I am a control-freak perfectionist, it’s unlikely I’ll leave any blatant bug unfixed, but do not expect me to spend any more hours debugging or supporting SK at the moment: I have too many other things to do (including possibly develop a better tool).

Now:

Anybody having issues with anything related to “OSA”: please read the manual, lisez le manuel, lesen Sie das Handbuch!
If all fails: disable OSA filters in the Options.

Anybody with Captcha-related issues:
- update (well, that one is true for *anybody* with *any* issue, of course).
- use the captcha test page to see what’s wrong.
- if the test page tells you it cannot find “GD” or some other related PHP stuff, contact your host and ask them about it.
- if the test page seems ok, but the letters do not appear, you are probably using PHP with a Debian install, which seems to have some weird issue about using FreeType fonts out of system folder. I *might* have fixed that in the last version (any confirmation would be great), if not, then it’s not really hard to fix, but won’t be taking on it before a while (feel free to do and send me a diff).
- last resort: disable Captcha in the Options page

Trackback filtering issues (and other bugs) were mostly due to new incompatibilities introduced by recent versions of WP alpha 1.5: to this day, they should have been fixed, BUT support for any newer 1.5 CVS update is officially discontinued (i.e.: it might work, but you are on your own). See entry link at the top for details.

Anybody complaining about SK letting your OWN test spam going through: just call me back when a REAL spam goes through, and then email me the full headers and details of what happened. SK is *built* to tell the difference between you and a spammer. it’s smarter than you think.

Overall, consider SK incompatible with WP’s built in spam word list (especially in WP 1.2), it will override it and ignore it as much as it can; which is a good thing.

Everybody else: either upgrade (if you haven’t done so already) or read the detailed documentation. Your solution in there.

Improvements suggestions and insightful bug reports much appreciated, duly noted and will be acted upon time permitting.

Cheers everybody.

Here’s an update on the $_SERVER['LOCAL_ADDR'] variable.

After doing more checking, I don’t think changing LOCAL_ADDR to SERVER_ADDR is what fixed my problem. I now cautiously postulate that the statisize-reloaded plug-in was the root of my problems.

I had the “comment must be made from the same ip address” turned on, which
is not compatible with the statisize-reloaded plug-in. The fact that
comments seemed to work after I made the change was just a coincidence.
This also means that the “comment must be made within X minutes” option is
also incompatible with statisize-reloaded. The “Enable OSA” option and the “commenter must wait at least X seconds” options appear to be working, but I haven’t been able to confirm it yet.

When statisize-reloaded is enabled, the OSA code and time are generated as normal, and saved in the cache. If the cache has not been cleared before someone else visits the same page, the old OSA code (which may include the users ip address), and OSA time are sent from the cache. When the second user posts a comment, SK gets an expired OSA time and the OSA code is derived from the wrong ip address, and *poof* a good comment is transformed into a spamy comment.

So, if you use SK and statisize-reloaded disable the “comment must be made within X minutes” option and the “comment must be made from the same ip address” option.

Come to think of it, those two options are incompatible with any form of caching. If a proxy server decides to cache your comment form, that could cause problems too.

Where is the captcha test page? I’m probably missing something here but I can’t find it.

Thank for such an awesome plugin Dr. Dave. Definately keep up the quality work. I haven’t had the chanced to look at the captcha stuff yet, but between your plugin and my original install of AuthImage… the spam has almost all but stopped.. Just definately keep up the work on the traceback filtering as that is the most recent issue I have ran into… As of last night I was seeing 50-100 posts per hour…

If you need to use Spam Karma with Staticize Reloaded, see this url for information about keeping dynamic elements dynamic. http://codex.wordpress.org/Plugins/Staticize

I have a patch of spam-karma.php available here that adds the relevant code. Enjoy.

Tom: Thanks for the tip! My blogroll refreshes periodically to sort by most recent update, and I’ve been wondering how to protect this feature. How does this affect SK, though? Which elements should be kept dynamic for SK to function properly?

Forget it, it won’t work and I can’t edit comments. To see the tags, visit the url I first linked, or check out the patch.

Thanks, I’ll make a point of checking into it.

Maybe this got mentioned somewhere, but I couldn’t find it…
If you want trackback spam to be removed as well, get wp-includes/functions.php and comment out the die(); at the end of trackback_response. If you don’t do this, spam karma never gets to see the spam.

Another helpful thing is to comment out the wp_notify_postauthor in the same file; This will prevent you from getting mail spammed when there are lots of comments or trackbacks coming.

If you have any easier way to make trackback checking work or for disabling the mail stuff, tell me. :)

It seems my comment was deleted (the wrong one). See here for more info about SK with Staticize and how to use the dynamic tags.

Anyone have good luck using this with WP 1.5 “gamma” (i.e. the latest nightlies)? I’d like to upgrade, but don’t want to lose spam protection.

I haven’t had any trouble (other than the normal things), and I upgrade my nightly nightly.

Good news, Tom. Thanks.

Huge thanks, Dr Dave, for Spam Karma. Spam was driving me crazy: in 48 hours since installing Spam Karma, it has blocked 100 spam comments. But here’s my question and fear: Does blocking them actually make them try harder and send even more? ‘Cause I don’t think I was getting quite this many attempts before installing it.

I tried upgrading and then I tested the captcha page. This is what I saw:
-Captcha-Debug: Check given TrueType-Array! (1)
-Captcha-Debug: Valid TrueType-files: (0)No Truetypefont available for the CaptchaClass.

However, the captcha_fonts dir exits and is 777, and the thisprty.ttf is inside and is 777 as well.

Any help?

Installed it 18 hours ago – spam caught:112 Big big thanks for this excellent script

Thanks a lot for this great plugin, the only problem I have is that it doesn’t catch some of the Trackback spam but hey nothing is perfect. Thanks for your time drDave.

73
travis Says:

this… rocks… the big one one oen

Hi – spam karma works great but like one of the posters above it seems to reset all the settings every so often. I’ve checked through the documentation and the other posts but can’t find an issue that would cause this. Any clues?

75
Sara Says:

Argh. Installed last week (on 1.2). Proudly telling me “3 deleted, 1 sent to moderation” (yeah, in between poker attacks it’s pretty quiet here).

Only problem? It let about 50 through with absolutely no indication. They were, to the best of my ability to tell, identical to the ones it blocked.

Unfortunately I was so pissed I deleted them all. I’m post headers if it happens again.

Like Ian D. I’m having trouble with SK not remebering it’s settings. It has a tendency to turn on every checkbox in the options section. This means that commenting for older posts is turned off, and the OSA check is really strict (with a max time as well as a minimal time). Right now I have to periodically check if this has happened, because I want people to be able to comment on older movie reviews after seeing the movie on TV.

One thing I notice is that it doesn’t change any numeric values, like the digest size. Just all the checkboxes…

I hope this helps…

Auto-updating Blacklist Table.

Populating WP-Blacklist Table from: ‘http://www.unknowngenius.com/blog/blacklist’
ERROR: Could not download from this Blacklist URL.

Populated WP-Blacklist table: imported 0 values, skipped 0 duplicates.

Error: did not import anything…

after installing i got this error
help help :-d

78
psm Says:

I’m getting this after installing spam-karma:

[Tue Feb 15 19:40:23 2005] [error] PHP Fatal error: Allowed memory size of 4194304 bytes exhausted (tried to allocate 8192 bytes) in */wp-content/plugins/spam-karma.php on line 244

hi dave i was installed spam karma , but when i go to options>spam-karma there is error messages : cannot load spam karma ..
what can I do ?

sorry for my english

Hello,

It would be cool itf the text was in a separate file in order to facilitate localization (especially when upgrading I’m in my third rewrite of the stuff it becomes a problem).

Thanks and congratulations

Comment Spam

If you are a long time blog reader you know that for months, many sites have disabled commenting, or taken other extreme measures to cut down on the comment spam. Seems that the subhuman monsters that do this have created automatic bots that just crea…

Comment Spam

If you are a long time blog reader you know that for months, many sites have disabled commenting, or taken other extreme measures to cut down on the comment spam. Seems that the subhuman monsters that do this have created automatic bots that just crea…

Thanks for this plugin – it’s excellent. It’s blocked literally hundreds on my blog, but it’s blocking legitimate comments too. I wish I could understand why. The OSA fields are correctly inserted before the comment is submitted. My dilema is a) I have to have SK installed, due to the amount of spam I get b) there’s no other option, other than disabling comments c) at the moment, SK is warding off my legitimate readers and commentators, coz their comments are simply vanishing.

Also – there doesn’t seem to be a method of “releasing” trapped spam. Once it’s gone to “hell” it’s not comin’ back! For instance, today I had a really interesting and important comment from a reader in South Africa – I only realised it was genuine by looking through the email SK sent me. I’ve asked the guy to try re-submitting it (and I’ve since lowered SK’s agression from “Normal” to “Leniant.”) but no doubt he won’t be bothered. Here’s the log:

Comment #8
Reason(s):
Used HTTP_VIA header.
OSA: Code invalid/forged (IP potentially different).
Comment on old post.
KARMA: -13.5
Treatment: hell
Comment posted on Post ID: 227
Added Author IP to auto-ip list (196.25.255.226).
Author : Clive
Email :
URL :
IP : 196.25.255.226
Comment:

I’m thinking this is the important line:

OSA: Code invalid/forged (IP potentially different).

But *why*? Why was he blocked when he’s *definately* legitimate? The code can’t have been forged. Can the author, or someone knowledgeable, answer any of my questions? Any advice gratefully received. W.

Hey unlike other Spam systems this actually installs OK and seems to work great..! I’ll have to wait til that fecking tigerspice.com lot come back as they have repeatedly (no renaming your comments page doesn’t work anymore).

One thing is that 777 is not allowed on my server, does odd things like locking me out of my own files…so for the captcha_temp directory which needs to be in the Spam-karma directory (too me a while to work that one out as it’s not in the distribution) try setting 764 – why should the public ever need to do a write or execute?…I’m on Valuehosts and I think they’ve doen something to stop public write and execute…

Anyway the image worked then (before it locked the file and showed a broken image), and works fine…now to check to see if it’s working?

yes it worked great – just caught one of the buggers just now. :-D

86
db Says:

Looks great! Thanks!

One problem I have been having is that I am getting moderation notification emails about comments that Spam Karma has “eaten”. The notification message has all of the fields empty as if it was deleted (which it was). How do I stop these notification messages…

Hi! Just installed Spam Karma. It works like a charm. My blog is here http://darshan.joggroup.com

Why is it saying the SPAM filtering is triggered & image verification is displayed everytime. I thought it displays image verification only if its suspicious.

Begone Evil Spam!

Just three days after installing WordPress my blog has been spammed — I guess that shows how quickly the blog is integrated into bigger blogging community thank to the links from [Janus][] and [Kristian][] and the automatic pinging of several other s…

Is there any way to always have OSAs enabled?

Reason is that Spam Karma is catching the spam (great) but ideally I want to prevent it getting posted in the first place – it seems the bots count this is a result (even if it doesn’t show) and keep coming back for more – I’ve had 17 posts since my post above and keep getting emails despite clicking ‘ignore’ and the bot getting -16 karma below that threshold!

Reason is that this is the only OSA/ Captcha thingummy that’s worked, all others like gudfly steadfastly refuse to work on my server.

I meant *permanently* enabled

Tim, try WP-HashCash. It sounds like what you’re looking for, and I’ve had no problems using it with Spam Karma.
For WP v1.2.x: http://elliottback.com/wp/archives/2004/11/29/spam-stopgap-extreme/
For WP v1.5: http://dev.wp-plugins.org/browser/wp-hashcash/branches/

93
Owen Barder Says:

Like Jeffrey above, I’m getting moderation emails about comments that have been eaten.

Use “bl.spamcop.net.” instead of “bl.spamcop.net” (notify dot in the end), because if my /etc/resolv.conf have “search” item (in my case, nozonenet.com) and a wildcard A RR (*.nozonenet.com IN A 205.218.64.7), then gethostbyname($rbl_query) != $rbl_query forever, then all user will be blocked.

And it will increase performance in some case :)

i have installed the SpamKarma script for about 2 weeks ago, and yesterday a comment from : o n l i n e c a s i n o s
got through, the script says ’spam caught 0′ and i’m recieving spam every day

why ? .. it’s activated in the plugin’s

i’m running wordpress 1.5-beta-1 2005-02-01

WordPress v1.5 has been out of beta for over a week now. First, upgrade to WordPress v1.5 and then make sure you have Spam Karma v1.19.

thanks macManX – HashCash that works like a dream, no Spam (but I have Spam Karma as backup if they do come through…just like the medieal castle builders I believe in several lines of defence ;-)

P.S. I’m running 1.5 beta from early Feb and tried to upgrade (not the first time I have) and nuked my blog. odd – so just rolled back.

I just installed SK and followed your highly detailed :) installation instructions to the letter. When I go to the options page, I get this at the top:

WordPress database error: [The used table type doesn't support FULLTEXT indexes]
ALTER TABLE `wp_comments` ADD FULLTEXT KEY spamk_fulltext (comment_content)

I have checked the permissions for the folders. I am running WP 1.5 release version, Win2K Adv. Server, mySQL 4.1.

Thanks!

Just wanted to say thanks for a great plugin. It’s been a godsend for my spam issues. I haven’t been able to figure out why the captcha won’t work on my site, though. Everything appears to be on my server that needs to be – I even see the images being made in the captcha_temp, but they don’t show up on the page – and any imput variable (even the correct one! – is brought back as invalid. *shrugs* I have it disabled for now, but it totally stumps me why it won’t work.

100
davincim Says:

Thanks for all your hard work on SK, macmanx! I anticipate the thrill of seeing it munch away at those little spammers. :)

Heh, answer a few questions in the comments and suddenly people think you develop the plugin. I think you meant to thank Dr. Dave. I’m just an innocent bystander. ^_-

Comments are open for business!Les commentaires sont ouverts

Thanks to DrDave and his spamkarma plugin, I have been able to re-open comments without fear of having to moderate an insane number of them. Wordpress is quite good, but it still takes time to delete hundreds of comments.

So there you go, have fun w…

for Wordpress

Spam Karma[via zengun]

104
Shawn Says:

Help!

I’ve sucessfully installed Spam Karma, but when I bring up the Spam Karma page from the Options menu, it takes a very long time and then I get the following error:

Auto-updating Blacklist Table.

Populating WP-Blacklist Table from: ‘http://www.unknowngenius.com/blog/blacklist/’

ERROR: Could not download from this Blacklist URL.
Populated WP-Blacklist table: imported 0 values, skipped 0 duplicates.

Error: did not import anything…

This also happens when I manually try and update the Blacklist.

It’s installed correctly and I can set and update options accordingly.

105
R. Elgin Says:

I was trying to comment upon the Marmot’s blog and got this rejection back that linked to this site. What in God’s name is this junk about? I have not spammed anyone but Kornet — my ISP — is home to one of the worst global onslaughts of spam everywhere. Just what in the heck am I supposed to do about it!!?

Elgin raises an excellent issue here, especially in light of the IP-spoofing ways of comment spammers. This is one of the reasons that I only ban IPs for the repeat offenders.

Elgin, I would recommend that you change ISPs if at all possible. It will solve your problem, and your money will no longer be going to support a company that houses known spammers but refuses to do anything about it.

107
R. Elgin Says:

I would recommend that you change ISPs if at all possible. It will solve your problem, and your money will no longer be going to support a company that houses known spammers but refuses to do anything about it.

I would only add that the spammers actually are employees of Kornet and are not just “supported” by Kornet since they have demonstrated the power to do what only people that control over their servers can do.

Hi,

Thanks everybody for the kind words, and sorry for the lack of response: I’m unfortunately too busy right now to do much else than the bare minimum with SK. But I also have started (slowly but surely) work on SK2, which will be mostly recoded from the ground up, and should bring some major improvements.

Anyway, regarding the last few comments:

- the SQL error you might get after installing is normal and absolutely minor: you can safely ignore. Stems from a last minute change in WP 1.5’s SQL schema.

- no way to recover deleted spam other than manually re-entering them (SK gives you all the data you need in the digest, including post ID). That will change with SK2.

- always make sure you test the captcha page (using the special link in the options) and *disable* it if it’s not displayed properly. There are multiple reasons it might not show correctly, but they require some heavy reworking of the Captcha class I’m using, I’ll probably rewrite it entirely for SK2.

- Not much can be done about notification mails being sent for deleted spams. It’s mostly a WP architecture issue…

- generally speaking, SK1 is only mildly efficient on TB (it wasn’t planned as a TB filter), but might easily be overzealous on comments. Overall, I recommend trying to set it on “lenient”, unless it lets too many spams through. Disabling RBL filters will also lower the number of false positive a great deal.

Finally:

- Elgin: there are many times where I’m truly annoyed at the false positives SK can raise (especially with RBL filters), and where I will do my best to fix them in the next version. Your case, I must say, definitely do not belong to them. I am really sorry, but there is no way I would start trying to differentiate between “nice users” and “bad users” of an ISP widely known as a spammer’s lair. The fact that you are aware of it only makes it worse. It is part of your responsibility to choose an ISP with a proper attitude toward the internet community.
Let me put it that way: if you were knowingly sharing your car with a notorious criminal who uses it to rob banks, would you be surprised when you get stopped by the police?
But regardless, the issue comes down to the fact that it would make my life incredibly harder and Spam Karma much weaker, if I had to restrain it when dealing with known spamming server.
This also goes for lots of the irate people who have been contacting me (btw, emailing me a crude insult message about a comment of yours that was eaten somewhere else by SK, is very unlikely to be even dignified by an answer): I am sure there are lots of unjustified false positives out there, but there are also lots of people who show up on RBL blacklists because, oh surprise, they happen to be running a Trojan or an open proxy on their machine, unbeknownst to them. Certainly a shame, but it is definitely not my job to help these people.

Anyway, good luck everybody and let’s hope for SK2 soon enough…

109
amy Says:

For the most part, I’ve had great success with SK… up until this past week when all of a sudden I’m having all sorts of issues with the blacklist. Upon updating, or even just adding/removing entries from the blacklist, I get the following:

WordPress database error: [Can't open file: 'blacklist.MYI' (errno: 145)]
SELECT COUNT(*) FROM `blacklist` WHERE `regex_type` = ‘auto-ip’

WordPress database error: [Can't open file: 'blacklist.MYI' (errno: 145)]
SELECT COUNT(*) FROM `blacklist` WHERE `regex_type` = ‘auto-url’

(actually, I get about 4 screens of that). I’ve not made any changes at all to the settings.. just seems like it happened literally overnight.

Help?

Hi, same problem of #3 and #7 comments, greetz.

My problem is that I do not have a captcha_temp directory anywhere and I do not know where I am suppose to create it. Looks good otherwise, but I see that I have to have this directory. Please help!

Dave, I just upgraded to the latest version by overwriting all the files and now all of my posts say that comments are closed. Did I mess something up? Have you heard of this before? I checked my settings in WP and it is set to allow comments. The posts with comments already made are still open though.

Well, after further investigation it was just the last 4 posts where comments were closed. This may be something I’ve done so probably my bad.

netbloke, the captcha_temp directory should go in the spam-karma folder. I had another version on my old wp 1.2 and i looked and there it was! I just copied it over. I’m not sure it will work, but we shall see soon enough. I would just create a folder of that name in your spam-karma directory. There were a number of images created in there, but I think those are created automatically. Email me if you need them.

I can confirm that my guess was correct. If you create a captcha_temp folder and make it writable, you are golden. Great Plugin. Many many thanks.

Hi,
I AM NO SPAMMER!! really. I even tried to to use a site, which had spam karma… Maybe I did the misatke to write 2 post inbetween some minutes – who ever: I have now no more chance to write comments (like 320 other users of the site :) )… tzzz! There where lots of errors in line xyz and many affords.

Contact the author of the blog in question and ask him under what conditions your comment failed (Spam Karma lists all failed conditions for each comment).

I’m a little concerned about the public viewability of export-blacklist.php. It seems to me that the spammers could link to everybody’s export-blacklist.php, which would cause them to get indexed, and all the URLs that we blacklist would suddenly get a huge increase in page rank. Not what we’re aiming for at all.

Spam Karma?

Perhaps the issues that I am having with serendipity are caused by Spam Karma, a plug-in used by serendipity. I will have to try upgrading it later today. Looks like the homepage is at….

http://unknowngenius.com/blog/wordpress/spam-karma/

Great work, it works excellent. Kill the pokerkneus

I have been unable to get Spam Karma working on my wordpress installation. I appreciate that Dave is overloaded with requests to solve peoples problems, but if anyone else has a solution I would be gald to hear from them.

I’m running WP 1.2.1 and PHP 4.3.10 on the server. I’ve installed spam-karma as per the instructions but when try to set options at:

/wp-content/plugins/spam-karma.php?spamk_setup=1

I get the following error message:

Internal Server Error
The server encountered an internal error or misconfiguration and was unable to complete your request.

A check of the servers error log gives me the following:

Premature end of script headers: /[mypath]/wp-content/plugins/spam-karma.php

If anyone has any solutions it would be appreciated.

Today I installed the latest SK. I can not post a comment at all. I have tried disabling every option and clearing the blacklist. What happens is after posting a comment I just get redirected back to the post. The comment does not appear. When investigating what SK is doing I found that the comment does not appear in the digest. The only place the comment appears is in the WP database marked as spam. I have tried reinstalling SK with both a one-click and manual. I don’t have a clue on where to go from here. Is this a bug anyone else is experiencing?

cavemonkey50, make sure you don’t have anything (including blank spaces or line returns) in your WordPress blacklist (Options -> Discussion)

Spam Karma

I have to report that I think I’ve finally (touch wood) got a handle on the comment spam. It is all due to the very awesome Spam Karma plugin for Wordpress. Since I installed it a week ago (and removed those word-picture things that were so annoying) …

Thanks MarkJ! There was a – in front of one of the blacklist words. That fixed it.

I just had to disable spam karma because I realized that it was eating all comments on my blog. I’m running 1.5 with a couple of fixes. Thanks.

Finally I’m spam free!

Hello people…

As you will have noticed, no news or support in a while. This for a reason: I have spent the best of my time, for the past two weeks, working on what should quite possibly bring the spam problem to a definitive end.

You think Spam Karma is nice but kinda suck on many counts? So do I… Which is why I rewrote it from the ground up, and with many, many major improvements on the way. Expect to be seriously blown away when it’s finished.

In the meantime: Here is something for ya

Hi,
I installed SpamKarma 1.2 alpha 2. On activating it, and then going to Options.SpamKarma I get the following errors on the top of the page:

Auto-updating Blacklist Table.
Populating WP-Blacklist Table from: 'http://www.unknowngenius.com/blog/blacklist/'
ERROR: Could not download from this Blacklist URL.
Populated WP-Blacklist table: imported 0 values, skipped 0 duplicates.
Error: did not import anything...

Also, for captcha, I get the msg:


-Captcha-Debug: Check given TrueType-Array! (1)
-Captcha-Debug: Valid TrueType-files: (0)No Truetypefont available for the CaptchaClass.

I read through the commenst above and saw that there have been a few posts with the same problem as my first one, but no replies. I’d appreciate a fix or answer if theres one.

Thanks,

Are you on Dreamhost? They disabled php from opening, including or otherwise using a remote file using a URL rather than a local file path. That would include updating the blacklist.

Hi Mog,
Thanks for your quick reply. No,I’m hosted on godaddy.com. Would you know if I have to ask them to activate something in php ??? I wouldnt know how to put it in technical terms. Is there something on my phpinfo that I can look at to see if my host gives me that capability?

Thanks

Mog, you’re a little bit mixed up on what DreamHost did. I’m on DreamHost and have no problems importing the blacklist. What DreamHost did was they blocked local PHP scripts from calling remote PHP scripts. This is honestly essential for security and I can’t think of a single legitimate script that would do something like that.

if you go to the url the captcha test actually works, however there is debug code on the screen which isn’t real handy:

Captcha-Debug: Check given TrueType-Array! (1)
-Captcha-Debug: Valid TrueType-files: (1)
-Captcha-Debug: Set current TrueType-File: (/home/dkweaver/public_html/wp-content/spam-karma/captcha_fonts/thisprty.ttf)
-Captcha-Debug: Set number of noise characters to: (36)
-Captcha-Debug: Set image dimension to: (125 x 48)
-Captcha-Debug: Set messages to language: (en)
-Captcha-Debug: Keep this params from original GET-request: ()
-Captcha-Debug: Check POST-vars, current try is: (1)
-Captcha-Debug: Generate Keys, public key is: (8be8)
-Captcha-Debug: Comparing public with private key returns: (FALSE)
-Captcha-Debug: Validating submitted form returns: (2)
Function ‘ImageTTFText’: exists (OK)

Function ‘ImageJPEG’: exists (OK)

there is also a second section of similar output. Any ideas?

I’m also getting what Jason and Anuj are seeing with Captcha test page:

-Captcha-Debug: Check given TrueType-Array! (1)
-Captcha-Debug: Valid TrueType-files: (0)No Truetypefont available for the CaptchaClass.

Any idea at least what the problem is? Is this one of the things that probably will be fixed in the Captcha rewrite for 2.0?

That’s the same error I got. I reported it to Dr. Dave and his response was, “It seems on some installs of PHP (Debian Linux?), the only fonts available are system fonts, and any third-party fonts in a directory outside of the system font dir, are simply ignored.” We worked on it for a while, but couldn’t find a way around it using the current captcha class. I assume this will be fixed since he’ll be using a different captcha class in v2.

I just want to say that SK is absolutly amazing! I am running a test site that I haven’t linked to, yet has been getting hammered by comment spam. So far, not one single comment spam has squeaked through the cracks, SK has nailed them all. So far 551!

I was a little leary at first, but now that I have seen it in action, I’m very impressed! Way to go Dr. Dave! Keep up the great work!

Update: Make that 789 and counting! (almost 250 in 24 hours!) I guess that is still less than the popular sites get, but I’m very pleased!

138
bob Says:

hey i put a comment on a sitee but have been prevented from leaving a message. i have not pamming software on mycomputer and your program if i may say SUX! hav a nice day but people dont use this joke of a proggy

Based on the above comment, I am guessing that SK considered “bob” a spammer due to his spelling and lack of English skills. I’m acutally surprised that SK here allowed the comment. :)

After an unfortunate experience with SK a few months ago where it went beserk and deleted every single comment that anyone tried to post, I’ve reinstalled my blogging software and selectively restored my database. Now, SK works like a dream on my blog and the other three blogs I host.

141
Owen Beith Says:

I’ve just had a blog comment turned away because I’m suppposed to be a nasty spammer. Apart from the fact that it’s a damned cheek, you’v ejust wasted all the bloody time I spent writing that comment. Rotten damned programme

Owen, It’s very possible that the site that you tried to leave the comment at has the settings to SK one too high. The default settings are more than adaquite to stop the real spam and let normal comments go through.

I have the defaults set and have had only one false-positive. Even that one did get through, they had to “post” it a couple of times, but it finally when through. It’s possible that the message went through a proxy server that was flagged by as bad. Her post did get through. Amusingly enough, it was Anil Dash that was trying to leave the comment. :)

The test site I mentioned earlier has zapped well over 1,000 spams now. I’m very pleased about that. SK is doing an awesome job over there.

In the long run though, we as blog readers/commenters are going to have to get used to the idea that the site owner is going to do everything in their power to stop spammers from taking the “fun” out of blogging. If it were not for software like SK and RK, I would probably have shut down my site last year. Not that it would be a great loss or anything like that.

線上撲克牌去死

地毯式轟炸誰受得了 -_-凸

從一大早我就發現這裡被該死的 “Online Poker” 丟了一堆廣告信;雖然它們都被 Spam Karma 和 Depokerizer 聯手擋下,但是要自己手動去幫它們收屍還是件很累的事,尤其…

A sad note now. Out of 1408 comment spams squashed, one managed to sneak pask SK and fortunatly into the moderation queue. I’m kind of surprised since it was similar to the hundreds I get a day. I can’t explain why that one lowly comment spam got past SK, but one out of over 1,400 are pretty good odds!

145
emma Says:

how come i cant write any mesages? im not spam.

awesome plugin. thank you!

I am running Spam Karma with great success. Then I added the ‘Spam Poison’ icon and the comment spam has dropped to nothing. Granted, I wasn’t getting but three-five a day. I took the Spam Poison thing off and left it for 24hrs. Got like six comment spams wanting me to play damn poker, all of which Spam Karma caught. Put the Spam Poison thing back up and they stopped.

Now, my question is, Spam Karma seems to punish the comment spammers. Spam Poison: “E-mail collecting robots will be sent in an infinite loop and will get dynamically generated fake e-mail addresses, adding enormous quantities of bogus data to the databases of the spammers, thus poisoning those files so badly that they become essentially useless”. Which would be better to use? Or use both like I am now? I like being able to see who is spamming, an option Spam Poison doesn’t have.

Spam Poison doesn’t stop comment spam, it only scares off some bots. If I were you, I’d get rid of Spam Poison (most bots recognize it now and skip by the link), and keep Spam Karma active.

This is the most effective wp comment spam fighting solution I ever found. Thanks a lot! :)

Do you have plans to implement character deformation too? I’d like to see them go even further with more control to the blog owner: enter only the odd numbers in this image, only the first three, skip the fourth, and include the fifth. Since my blog caters to a known group of people I’m not concerned with ostracizing the visually impared. As such I would also like to see color options: enter only the blue and red characters. Perhaps a variation like: enter only the numbers before the second 9.

here is where the enemy stands
http://www.brains-n-brawn.com/default.aspx?vDir=aicaptcha

Spam Karma has identified me as a spammer. Why?

Since upgrading to version 1.20 I’m getting a lot of false positives – people who have posted on my blog before being blocked. Something is seriously wrong as most of the people who used to comment seem to have been stopped by SK – I’m downgrading to 1.19, if not I’ll have to grit my teeth and deactivate it and deal with Spam manually – I can’t have 1 false positive, let alone 3.

Dave, I love SK! But something came up today that I wanted to bring to your attention.

I recently had trouble getting comments to post to my blog (not posts, but comments). So I turned off all my plugins and my comments started working again. As I turned on each plugin one at a time, I discovered that once I had activated SK that my comments would stop working. I was using version 1.20 alpha 2 and running it on a WP 1.5 blog. And it was working fine for a couple of months with SK running.

I see that you’re already working on v2.0. Can’t wait for it to be out! Not sure if this is a fluke that only I’m experiencing, but thought I should drop you a line just in case. Please let me know if you have any questions, and I’ll be happy to give you what ever information I can. Cheers! :)

For anyone like Anuj et al. above who have been having problems updating the blacklist automatically: I’m not really clear on what the problem is (and DrDave hasn’t replied?) but it’s something to do with your PhP configuration, I think. A workaround is to download the file yourself, save it in your wp-content directory (as, say, blacklist.txt) then give a direct link to this file as the URL to get the blacklist from (e.g., http://www.yourblog.com/wp-content/blacklist.txt). You’ll have to update the file manually every so often, but at least it works…

Strangely, though, when I try and uncheck the “Update automatically…” option for the blacklist, Spam Karma switches it back on, and resets the number of days to 30. This might just be me though!

If anyone’s got a better workaround, I’d love to hear it :) I can’t find anything in the documentation, unfortunately – or at least, me and Google can’t.

155
Stacey Says:

Anyone having the problem where the comment is being emailed to you, but not the comment itself, only the LINK to the comment?

DUDE…I do not like being accused of Spam Karma KRAP.Do you have an address
where I CAN PERSONALLY SHOW YOU HOW MUCH YOUR PUNK ASS IS WRONG!!!
Of course not…you will waste peoples time and aggravate them at your liesure….GET ME OFF YOU FUCKING LIST PUNK and dont make me come back here again. TRUST that

Dr Dave – unlike some, your efforts to fight spam & personal help are really appreciated here – still having probs but I think the new update might fix it (?)

hugs

tim

It really amuses me that people post complaints about their comments being considered spam when they write the way they do. Misspellings, ALL CAPS… It’s no wonder…

Seeing this person’s website, I’m not the least bit surprised.

159
Owen Beith Says:

By chance after Googling on my own name to find something else I discovered that the comment I wrote in response to being told I was a nasty spammer was posted up in public here. I never had an answer direct to me or any indication that my comment was going to be displayed anywhere. As far as I remember the Spam Karma message also told me that my message would be sent to the blog owner for comment. I don’t know whether he received it but I never heard anything further.

I may have been intemperate in my comment but it certainly expressed my sentiments at the time after having wasted so much time replying to a reply to a previous comment of mine that had been accepted without problems. I certainly approve of attempts to fight spam, but not like this. Life’s too short.

troll…
[drD. note: refers to a comment that was removed ever since]

161
Tyler Cranston Says:

I get the following error:

WordPress database error: [The used table type doesn't support FULLTEXT indexes]
ALTER TABLE `wp_comments` ADD FULLTEXT KEY spamk_fulltext (comment_content)

Will this effect anything?

OK, first off, everybody who’s not yet been checking into it: if you run WP 1.5 and are not running SK2 yet, *you should*. It’s not yet perfect, and unfortunately, you still have to patch WP yourself to fix a nasty bug (been fixed in 1.5.1, released soon), but it’s all rather straightforward and documented in great details here:
http://unknowngenius.com/blog/wordpress/spam-karma/dev/

I believe SK2 should bring back the level of false positive as close to zero as humanly possible (although from reading some of the comments above, it’s not like such a bad thing all the time).

Owen Beith: I don’t wanna sound harsh, but that’s kind of a basic of blogs. You comment at the bottom of a post in a comment form, and it appears in the comments. I had nothing to do with it, it was entirely automated. I’ll remove both comments if you wish. I haven’t answered mainly for two reasons: 1) there’s little I can do. SK1 generates false positives (a reasonably low number): that’s life and a risk that is taken by people who install it. 2) I have been quite busy both trying to live my life *and* actually working on improving that condition, to such an extent in fact that the final version of SK2 should solve the problem of false positives completely…

All I can say is that you should contact the blog admin (through email) and have him restore your comment (it’s not completely erased, it does appear in a digest he receives at regular interval). Then you should strongly advise him to upgrade to Spam Karma 2.

Tyler: yes, this is a small compatibility issue between SK1 and WP 1.5: it shouldn’t affect your program at all…

Leo: congratulations (on many counts):
1) You have just become the official first real troll of Unknowngenius.com and the first comment ever (spam aside, of course) to be removed manually from this blog. I did so, not because of your fucking language (see, I can use big words too), but because it was simply too embarrassing a statement to the average level of stupidity of the Internet at large. Your comment devoid of any non-hysterical content, failing to make up for the absolute rudeness of its tone, it’s been trashed.

2) And guess what? as a special reward for your immature behaviour, you have lost all replying right to this comment on this blog. Sucks, huh? And next time you see a “Comment denied” while attempting to post here, do not blame SK: it’s only following orders, and the fact that you have just inaugurated my first manual entry to the blacklist.

Overall, consider yourself lucky: a lesser man than me would have probably added you to the central blacklist that is being downloaded regularly by all SK users on the blogosphere. Then you would have had a good reason to be pissed off.

Ah come on drDave, please add him to the central list! He is evil incarnate. Seriously. Did you do some research on him? He run’s a religios website, yet used God’s name in vain and with a curse word. To my knowledge, that’s about as bad as you can get with religious people. If it weren’t for the fact that he lives in San Jose, CA, I would have expected him to be outside the hospice where Terri was being all wacked out about that who thing. He certainly commented on enough of the websites that were driviling on and on about it.

Anyway, it sure was amusing to read. (Being subscribed to comments has it’s advantages :) )

As to SK2, my test site has seen just under 3,000 comment spams, and SK2 has nailed all but a few of them, 1,233 to be precise. I was using SK1 prior to it. The two exceptions were routed to my moderation queue and still didn’t get through.

I’ll move it over to the main site this weekend.

Dave,
We both now this is definitely not an option, and joke aside, I should probably use the occasion to make it very clear to any SK user that whatever little addition to the Blacklist I make (or any other filter settings that may be tweaked to do my evil bidding), it is in no way my role to take position on anything else than pure unambiguous spam.

For anything else, rest assured that SK is absolutely apolitical, and, since after all they do happen to be covered by free speech, it does not even discriminate against morons (tempting as it may be).

Had I have evidence that this gentleman (and I use the term quite loosely here) was indeed widely abusing comment areas all over the blogosphere to serve his own interest, it would be a different matter.

For now, I’ll simply stress once more Leo’s rather thin grasp on both reality, common sense, manners and English grammar. And invite everybody to actually click on his link and check out his site for a laugh (warning; you might wanna turn the speakers down, for when the heavy metal christian rock starts blaring in).

Oh, and to answer John’s comment regarding Captcha: both SK1 and SK2 use captcha, but only as a backup solution (i.e. when common filters are unable to tell for sure if a comment is spam or not).

With SK2, it is very easy to force the use of Captcha on most everybody, by tweaking the settings…
SK2’s captcha is quite basic for now (I wrote it from scratch), but I’m not too concerned with spammers using OCR to break it any day soon.
As for having some even more difficult Turing test, based on natural language, it’s not really on the map, mostly for two reasons 1) it’s redundant 2) it’s very very restrictive (not only to morons like the one who just a whole CAPS comment above, but also to non-english speakers, for example).

BUT, SK2’s architecture is such that *anybody* can add this type of functionality very easily… please check out the draft for the dev doc, on SK2’s page for more info about that…

166
Owen Beith Says:

Thanks you for your comment, Dr Dave, but it certainly wasn’t obvious to me that the Nasty Spammer comment I was replying to was part of the blog rather than a direct link to the administrator of whatever Spam Karma was.

And I certainly sympathise with Leo – I think the first point of reference is the offensive little message that Spam Karma sends to the victim rather than the ill-tempered and understandably ill-considered reponse it evokes. Until that is dealt with self-righteous pontification should be kept on the back-burner. Somebody chooses to call me a troll for my comment. All I can do is express solidarity with fellow-trolls and suggest that comments on manners apply equally to those who provoke the outbursts objected to.

Sorry Owen I was calling Leo a troll but the post was removed…should’ve made that clearer. :-(

Owen, if you were “subscribed” to this posts comments, you would have seen the trollish comment that Leo posted to incure such a title of troll. It was later removed and the “troll” comment is out of context. Maybe drDave should have simply “edited” the comment that Leo posted in order for the comment to have stayed between your post and the “troll” comment.

As to the wording of the message SK gives out when it thinks it has detected spam… I agree. It should be worded more to give the commenter the benifit of the doubt. Something similar to what is displayed in Referrer Karma wouldn’t be bad.

However, I suspect that drDave gets way more comment spams than my test site gets (over 3,000 so far) and if it weren’t for SK, I would be spending way too much time dealing with them.

Since 99% of comment spams are posted by bots, it does seem that the message should be worded more on the side of a mistake rather than an ill will message.

My take on all of this is that without SK, HashCash and other anti-Spam plugins I would have disabled comments earlier this year because of spam-bots for a certain poker site. So Owen an co. – sorry you’ve gotten a false positive, but best to sort it out with the site involved…the nasty ones here are the people who program Google-link spamming bots to post onto messageboards and blogs so to up their Google ratings or advertise their tawdry services. We’re just trying to make our lives less horrible not having to delete 10’s or 100’s of automated spam posts every month.

If you don’t believe me, setup a Wordpress blog with no antispam plugins then announce it on a popular forum or site….then see what I mean :-(

Acutally, the fact that you Owen and Leo “are” able to post comments here is a strong indication that the site you are trying to post at is the problem not SK. I found that site owners often get a little over zelious with their SK setting and set them to be way more sensitive than they need to be. I was being flagged as a spammer earlier on until the sites adjusted their settings.

Try emailing these sites and asking their owners to adjust SK’s settings back to default. I haven’t had any comment spam get through based on the default settings. I suspect Leo will still have problems as sites are probably blocking him outright. That is if he posts comments like the ones he posted here. Owen, you seem to be a fairly reasonable person. I am suspecting that with you, it’s something else. SK gives reasons for it’s rankings. Ask the sites you are having problems with to send you the logs of your attempts. Posting those here would help to determine what was causing the false-positive.

I can only concur with both Tim and Dave M. on that’s been said above.

A few things:

- SK1 message was heavily reworded in its laters versions, from the original (admittedly offensive) message to something much more neutral. Indeed, it took me a bit to realize that the off-chance some spammer would actually catch this message didn’t justify in any way the risk that many innocent commenters might get it too. The current message could probably be made even more lenient, but I think it’s totally bearable as it is. I do suspect though, that some people still get the old message, meaning the site admins have failed to follow updates for quite a while (in which case I completely wash my hands of them: I have made very clear many times that a plugin of SK’s type does require a minimum of followup and admins must check for version at least every once in a while). Both problem (once again) will be addressed with SK2, which will have a completely neutral (and customizable) message and inform admins of new updates automatically.

For info, the complete current message goes like this:

It would appear that you are have been identified as a nasty comment spammer by Spam Karma and, as such, your comment has been deleted.
If you are only an innocent bystander in the War on Spam, please accept our apologies. The author of this blog will receive a digest containing your comment as well as the reasons why it was deleted. Try contacting him via email (there are many possible reasons: a very common one being the use of a proxy to access this blog).
Note: unless you know exactly why your comment has been deleted (contained a spam URL etc), do NOT try to repost your comment again. It would only result in your IP and website being banned permanently.
Check out: Spam Karma’s Homepage for more information on this spam filter…

- Regarding SK settings, I suspect that some of these blogs do have stronger settings than they need. I have been long advising most people to put SK1 on “lenient” mode unless they have particularly too much spam going through. This blog is not quite a point of comparison, since it’s been running SK2 for over 2 weeks now, and hasn’t seen a single false positive (except for short periods of explicitly buggy code, which has been fixed). But back when it ran SK1, the ratio of false positive to legit comments or real spam was extremely low too.

- As soon as I have a second, I will try to put together a small page more specifically targeted at explaining the problem to people who have been flagged by mistake. In the meantime, Owen, I sure do commiserate with you on this, and that is why I do tolerate a certain amount of anger and frustration: if you go up in the comments here, you will see I didn’t touch or censor any of the, sometimes rather inflammatory, comments left by other “innocent bystanders”. I do my best to explain them the problem and insure it doesn’t happen with further versions.

Now, when I get outright vulgarity, coupled with blunt moronism, such as exhibited by Mr. Bracciale in both his comment above and the one I purposely removed, I do not consider I am even required to answer that.

And I won’t even let you in on the details of the kind of emails I receive, ranging from the seriously deranged (people: if you need to resort to simili-death threats because one of your comments wasn’t posted on a blog, you really need to seek some help) to the nearly funny: Like the guy who emailed me, convinced that SK1 had flagged his comment because it somewhat disagreed with the content of the post he was replying to, in “a complete disrespect of his 1st amendment rights”. Well, the highly confused views on geography and international laws would have been kinda funny, if not for the fact that the person making these ridiculously incompetent technological assumptions was proudly signing his email with half a dozen Microsoft technical certification acronyms.

Well, anyway, all that to say that I already spend way more time than I should, personally replying to any decent person who contact me regarding their comment being mistakenly flagged. I can hardly do better at this point.

172
Chalan Says:

I was blocked from replying to a War on Freedom post, to wit:

[dr dave's note: removed completely off-topic comment. Please see comments above regarding false positives.]


I … don’t see why any of that should have been blocked? Please advise.

173
Stacey Says:

Ok, next weird thing before I upgrade to Wordpress 1.5

All my custom options are ERASED. Gone!

Every little box where you can add something, like:

Only send digest every [ ] deleted spams.

ALL the boxes are now empty. Weird!

174
jane Says:

Hey, this programme keeps eating my posts to my friend’s blog! What the hell is wrong?

175
shahram Says:

I got this erro. I assume that you might want to look into it

Warning: main(/home/bwymitkv/public_html/blog/wp-content/spam-karma/spamk_include.php): failed to open stream: No such file or directory in /home/bwymitkv/public_html/blog/wp-content/plugins/spam-karma.php on line 40

Warning: main(/home/bwymitkv/public_html/blog/wp-content/spam-karma/spamk_include.php): failed to open stream: No such file or directory in /home/bwymitkv/public_html/blog/wp-content/plugins/spam-karma.php on line 40

Warning: main(): Failed opening ‘/home/bwymitkv/public_html/blog/wp-content/spam-karma/spamk_include.php’ for inclusion (include_path=’.:/usr/lib/php:/usr/local/lib/php’) in /home/bwymitkv/public_html/blog/wp-content/plugins/spam-karma.php on line 40

Warning: Cannot modify header information – headers already sent by (output started at /home/bwymitkv/public_html/blog/wp-content/plugins/spam-karma.php:40) in /home/bwymitkv/public_html/blog/wp-admin/admin.php on line 6

Warning: Cannot modify header information – headers already sent by (output started at /home/bwymitkv/public_html/blog/wp-content/plugins/spam-karma.php:40) in /home/bwymitkv/public_html/blog/wp-admin/admin.php on line 7

Warning: Cannot modify header information – headers already sent by (output started at /home/bwymitkv/public_html/blog/wp-content/plugins/spam-karma.php:40) in /home/bwymitkv/public_html/blog/wp-admin/admin.php on line 8

Warning: Cannot modify header information – headers already sent by (output started at /home/bwymitkv/public_html/blog/wp-content/plugins/spam-karma.php:40) in /home/bwymitkv/public_html/blog/wp-admin/admin.php on line 9

Fatal error: Call to undefined function: spamk_get_settings() in /home/bwymitkv/public_html/blog/wp-content/plugins/spam-karma.php on line 2577

Anti comment spam on WordPress

剛剛到 ijliao 長輩的 Blog 晃, 發現他那邊的 recent comments 又爆了….XD
我偷拍一份, 希望長輩別打我……orz

我順便用這篇講一下我這裡在用來防止 comment spam 的 plugin 好了.

我之前曾經看過 gsli…

I’m a luddite when it comes to this but it seems you are a bit over zealous when ordinary people simply want to leave a comment on a site they see in very simple terms,who are the controllers?… and it does make me wonder about the openess of this free media and how paranoid we are…it’s my brothers site I am commenting so he may be to blame!

Spammer has found a way to attack my “reset digest” button. Now when I click on “reset digest” it goes to one of their viagra whatever ads. Any ideas?

Mostly I’m commenting as I seem to have been unsubscribed, but I also just installed the new SK2 and it is running wonderfully for me. So many thanks for your hard work!

180
BC Says:

i’ve never sent or been involved with sending of SPAM, and to have a message blocked from a site by DR DAVES SPAM FILTER insinuating I have “been identified as a nasty comment spammer by Spam Karma” and, as such, (MY) comment deleted. Is not only slanderous it goes to libel and whoever this DR. DAVE is he’s got some serious apologizing and explaining to do and I expect and intend to get it.

anyone see anything nasty about the following message blocked by Dr. DAVE

[DdV's Note: Removed wholly out of place sample comment]

181
BC Says:

MR. DAVE, I presume you have received my prior message regarding your unfounded accusation that I am a nasty spammer, blah blah bad karma etc. Be certain that I expect YOU to contact the adminstrator of the sit your software has resulted in my unjustly being blocked/barred from and correcting the error YOUR software is responsible for. Contact me and I will supply you with the URL

I am curious how I ended up being blocked. A little.

183
BC Says:

meet the real Dr. Dave

[DdV: lengthy piece of copy-paste. For the simple and stupid reason that it had already been posted here in its entirety :roll: ]

To Everybody subscribed to comments on this entry:
Sorry for the incredibly long off-topic copy-paste. The content of which had long been posted in its own dedicated entry long ago (actually, it does say so in the mail itself, but I guess Mr. BC is still laboriously working on reading the first two sentences and might take a while before he reaches that part). Feel free to go over there and see for yourself, if you are really bored at the office today and have nothing better to do… But please don’t feed too much candies to the troll, he’s nervous enough as it is.

To BC,

Your insistence at showing every single reader of this site how much of a nitwit you are is laudable. Really, I think it’s cute. But as I already said twice (and I’ll add it once more, because I gather you have difficulties comprehending even the most basic concepts): there really wasn’t any need for it. I made sure to share the laughs with my beloved readers and the world at large, waaay before you had the idea. Let me give you the URL, once again:
http://unknowngenius.com/blog/archives/2005/04/17/angry-emails/

Please write this URL down on a post-it by your monitor, because this is where I’d appreciate you leave any and all future samples of these unintelligible aggregate of letters and punctuation you seem to like engaging in writing and that, for the sake of simplicity, we will call ‘comments’. You will see, it’s quite a nice entry, there’s even a public there too, delighting in your moronic antics. The litter is fresh, I just changed it this morning, so please feel free to take your dumps there, if you must.

Bear in mind though, that while I like meself a good hairy backwood troll (especially one that makes up for his obvious lack of wits by an unusual feistiness), I also tend to tire quickly of sterile discussions where I’m all too painfully aware that the total impression of my words on you can be summed up by the whooshing sound they make, as they fly high above your head. To put it in a language you might have a better shot at grasping: you are kinda entertaining, but don’t wear out your welcome.

Now, I’m gonna remove that IP ban I had to plug on your commenting diarrhea a second ago (btw, like the new SK2 deny message? I hope you do, because not many people get to see it… unless that is, they’ve been manually added to the blacklist), but if you keep yourself pet in your own entry, and attempt to comment here once again, I’ll have no qualms about ridding us all of your inopportune presence on this blog for good. So be a good girl and nobody gets hurt.

Hi Dr Dave, forgive me for saying dont even bother responding to idiots like that. Lets face it the worlds full of them and you just have to see the huge number of people writing to say thanks for Spam Karma for everyone reading to know that BC is quite obviously a moronic brain dead imbicile. Anyway thats my two cents and as always thanks for Spam Karma!

When I upgrade the blog to WP 1.5, I upgraded SK to 2.0. Put me on the list as a very satisfied customer. I truly appreciate the efforts you’ve made to enable us to combat spam.

Most of my attacks recently have been trackback spam, and SK 2.0 has stopped them in their tracks.

Wonderful! Thanks!

This is an exorbitant cool piece of software. I am a satisfied user of it. Spam karma helps a lot. I would like to donate some money to honor your very fine work. Where can i do this?

Wow, it’s never been said we’ve refused Gin money, here at Dr Dave Software Inc.
Tip jar is right this way. But please, read the attached comments, because I mean it.

Also, for anybody who likes SK and feels like giving something back to the community, there are (and will be) many opportunities to use doc-writing, debugging and any other skills you feel you could contribute in any amount.

I will add more info on that, but a quick and easy way to start on this, if you are using SK2 (and you should), is to go have a look at the Wiki: http://wp-plugins.net/wiki/index.php/SK2 and add whatever you see fit… If we all spend a few minutes on this, we can et a kick-ass doc together, in time for the first “official” release of SK2…

Cheers everybody!

189
Armitage Says:

Installed SpamKarma a week ago, turned it up twice and still getting all kinds of spam :(

There should be a forum to discuss this or something, this page is way to long. If you don’t want to host forum stuff, I know the dude who owns http://techmonkeyz.net/

There should be a forum to discuss this or something, this page is way to long.

A forum or a wiki would be a great idea. If I weren’t so busy already, I’d volunteer to help maintain it myself.

Adam, indeed, there is an increasingly pressing need (strange, I was convinced I had posted my response to the previous comment on this page… must have emailed it, bah…)

Wiki, there already is here: http://wp-plugins.net/wiki/

As mentioned previously, SK2’s doc will go in http://wp-plugins.net/wiki/index.php/SK2 (and all subpages should probably start with “SK2_”)

SK1 is very much on its way out… so I’m not sure it’s worth spending much time on it. But if some people with a valid reason not to upgrade (I can understand why some would be reluctant to tweak with their stable install of WP 1.2.x) want to give it a try, the Wiki is theirs to fill!
Quite logically, http://wp-plugins.net/wiki/index.php/SK would be the place for that…

As for a board, I have also been giving it much thought (if not time)… I am all for it, and it could easily be installed on wp-plugins.net… Just need to figure which one:

Call for suggestion
Anybody reading this thread with a strong recommendation for one of the forum/BBS software out there? Preferably PHP, reasonably lightweight and easy to install…
and before *all*: Secure… ahem… <cough>phpBB<cough>

Please use “forum” at this domain .com to send me your suggestions…

As soon as I have a good candidate, I’ll set that up and post an update here (the main page will also get a complete facelifting real soon now).

Thanks everybody!

One problem I have been having is that I am getting moderation notification emails about comments that Spam Karma has “eaten”. The notification message has all of the fields empty as if it was deleted (which it was). How do I stop these notification messages… d

193
lordrich Says:

It would appear that the spammers have found a flaw in Spam Karma 1.5. If you post a spammy comment long enough it will fill the current digest and hence you will be emailed the spam immediately.

Does version 2.0 fix this problem?

I haven’t seen that since updating to 2.0. I used to get those all the time!

Amazing plugin. I’m just getting started with my blog and the spammers are seething right outside the SK gate.

I have one friend who comments frequently, and since I’m new, I need ALL his comments approved. but SK keeps hassling him, and just blacklisted him. He has no website, and a dial up.

How can I set his IP to have complete access? I’ve set SK to heed the “discussions” rules which should allow acces to a use after two comments. But my friends IP shows two different ones, I don’t know why.

Pleae advise.
thanks again,
G

I forgot to list my version. It’s 1.2 (alpha 2) about a month old.

Yay! I installed both upgades, wp and sk without a hitch.

one question. I looked around for a “whitelist” option, but didn’t find anything. how can I do this for chosen users?

Spam Karma 2: Why Can’t Everything Work This Well?

I had to write a post on the excellent job Dr. Dave’s Spam Karma 2 does at blocking virtually all kinds of blog spam. If you have a WordPress blog and don’t have SK2, you need it. After Google upped my PR from a goose egg to a 3, I got nailed wit…

Dr. Dave, you are my person of the week. By a large margin.

My website is admittedly modest; more of a statement of intent than a real active blog. Still, the amount of spam I received was absurd. I upgraded to wp 1.5 yesterday and installed Spam Karma 2. Easy install, as promised. Today I wake. 50+ spams sent to hell. Kick. Arse.

WordPress Upgrade

WordPress has released an upgrade to version 1.5.1. I updated my site last night and it took all of 15 minutes to do so. All my hacks should be intact, including the RSS hack for the comment count and the extended text notification. While I was a…

Does the line still work to display the spam kill count in SK 2? It doesn’t appear to be working on my install…just wondering if the call is different for 2.0.

There’s a plugin written by Matt Read that will do just that for SK2. It’s available at: http://mattread.com/archives/2005/03/spam-karma-2-stats/.

You should probably remove the old line from your template (although if you used exactly what I gave, it won’t cause any problem, but at any rate it’s no longer useful).

REMOVING SPAM KARMA:
I have disabled the spam-karma plugin, but still some of its entries exist in the database, an the following code remains:
INSERT INTO `wp_options` VALUES (107, 0, ’spamk_options’, ‘Y’, 1
I deleted this and uploaded the database, but it fails to validate…
what is the way to completely remove spam-karma?

To remove Spam Karma, deleting the plugin files is more than enough.
If you absolutely want to remove all traces of Spam Karma (although they do not impact your install in any way), you can always edit your mySQL DB and remove any mention of ’sk_***’ (’sk2_***’ for SK2) in the options table. This should do it (and no reason your DB will fail to validate if you do that properly), but once again, this is way overkill: leaving this unused option field in your DB after you disable/remove SK will not affect your install in the slightest.

Excellent plugin :)

Just one question.

Under Advanced Options, when I click on Show advanced settings I get Bad ID

What is this error message?

Thanks for the plugin :)

206
mierkols Says:

I’m a little concerned about the public viewability of export-blacklist.php. It seems to me that the spammers could link to everybody’s export-blacklist.php, which would cause them to get indexed, and all the URLs that we blacklist would suddenly get a huge increase in page rank. Not what we’re aiming for at all.

207
Bob DeKett Says:

I just reported an honest report regarding a company called Keep America Growing who is trying to scam small companies out of $15K. I believe my comments were mild considering the heinous activity of this thieving company, and you deleted my comments because you thought I was being nasty. You’ve got to be kidding.

mierkols: the urls on the export view are not linked, and the format is not even HTML. As such the spammers would not benefit from Google indexing these pages in any way.
Regardless, this feature was removed from SK2 (it might be replaced by another way of sharing blacklist, if the situation really warrants it).

Bob: as usual, sorry and please read:
http://www.unknowngenius.com/blog/wordpress/spam-karma/false-positives/

Had a couple of minor installation issues, but seems to be fine now. I’m getting a number of emails regarding false positives, and the spam stats show zeros across everything even though SK2 has caught dozens of spam comments in the few hours it has been activated on my site. While the plugin is drop-dead easy to install, it’s not easily configured. I’ve read the false positives article and it has not helped me figure out what the problem is.

So, here I stand. The other day, I simply let WP flag all of the spam for me, have no false positives, and manually delete the crap, or I sit here staring at SK2 trying to understand how to configure it, deal with emails about false positives, then restore them manually, and still delete the spam. I simply don’t get it. I don’t see the advantage of having SK2 at all, sorry.

210
Kevin Says:

Your ridiculous filter does not work, it merely censors free speech. I can’t quote what other people have said or use normal language using this piece of … (as if it would let me)

Kevin: Strange. I’ve been using it for close to 4 months now and have never had any problems using it. What do you have it set to? Strict? If so back it down to lenient and see if that helps you.

Unless you ar ea web spammer and you think comment spam is free speech? Then never mind.

I second Jason. I got so much spam when I started using WordPress that I had to install Spam Karma before my sanity went out the window. After letting through about three spam comments it has been faultless, with only one false positive in over 5 months. It’s great!

213
Kevin Says:

I’m not a spammer. Don’t be silly now, if I were, I would accept my bad karma. I’m just a very normal person who tried to make a normal comment, which would be considered free speech in the UK, or even in the US.

Spam Karma 2 and Spammer

Baru update Spam Karma dari web ini.
Ternyata ada versi yang baru buat WP 1.5.1.1
Namanya Spam Karma 2.0 beta.
Lebih banyak featurenya dari Spam Karma 2.0 alpha.
Option pagenya juga lebih detail dibanding version sebelumnya.
Spam karma yang sebelumny…

Dr. Dave,
I just wanted to thank you for all of your work. I installed WP1.5.11 followed by SK2 w/o issue. I noticed that the “SK has eaten…” was missing in the footer but also read that it will not appear until it catches the first one. I have rec’d two digests this past weekend and it didn’t show up. I checked the footer.php in my theme and that line ( ) is already there.

The reality is that the SK2 is working great and the counter at the bottom is a nicety. But I think its cool. Any thoughts?

Again, thanks for the incredible plug-in,
AB

More info that should have beeen included…

The spams are getting thrown into the ‘Awaiting Moderation’ folder. That is probably why they are not oficially counted as ‘eaten’ . These are the same online gambling ones from before that were ‘eaten’ with SK1. I have my settings on the default ones. Do I simply need to change the “General settings” to “kinda mean”? Or any other settings?

TIA,
AB

Spam Karma

A few days ago I started using Spam Karma 2 to eliminate trackback and comment spam, adnd guess what? It works like a charm! It’s easy to set up, and equally as easy to keep an eye on things. Highly recommended, and props to Dr Dave.

You rock Dave. Come back, we miss you.

You’re plug-in is absolutely great. Thank you. For the past two weeks, I’ve been getting spam comments from the same author who is using different IP addresses but links to the same address, sometimes 100x a day. Spam Karma is catching all of it.

Are there additional steps that I should be taking after the spam is caught? Do I safely remove the selected entries so I don’t clog my database? Should I add any information to the blacklist or just let the plugin keep on doing it’s job on its own.

Again, thanks.

Hello Dave i’ve used your plugin for some time now. so far so good. But yesterday t when users want to comment your plugin give the following singals :
Warning: Cannot modify header information – headers already sent by (output started at /data/members/paid/m/a/mazalien.nl/htdocs/www/weblog/wp-content/plugins/SK2/sk2_second_chance.php:2) in /data/members/paid/m/a/mazalien.nl/htdocs/www/weblog/wp-content/plugins/wp-last-visit.php on line 143

Warning: Cannot modify header information – headers already sent by (output started at /data/members/paid/m/a/mazalien.nl/htdocs/www/weblog/wp-content/plugins/SK2/sk2_second_chance.php:2) in /data/members/paid/m/a/mazalien.nl/htdocs/www/weblog/wp-content/plugins/wp-last-visit.php on line 203

Warning: Cannot modify header information – headers already sent by (output started at /data/members/paid/m/a/mazalien.nl/htdocs/www/weblog/wp-content/plugins/SK2/sk2_second_chance.php:2) in /data/members/paid/m/a/mazalien.nl/htdocs/www/weblog/wp-content/plugins/wp-last-visit.php on line 226

Kind-a-Captcha

Simply copy the code below and and click on submit. (Not much of a captcha, yea, I know… Don’t worry sweetheart, the real thing’s coming soon).

What could cause this problem ?

My website is http://www.mazalien.nl/weblog/

Thanks for the support. Greetings

@Webmaster: There is probably an extra space or other garbage before the opening tag in either the sk2_second_chance.php or wp-last-visit.php. See http://codex.wordpress.org/Answers-Troubleshooting for instructions on correcting the problem.

Here’s a solution — and it’s all about karma: You should post the names and/or companies who participate in blog spam on my site, AssCancerList.com. It’s a GREAT way to get even – wait til that person “Googles” himself and there he is on the Ass Cancer List. A permanent, public record!Hahahahhahaha. Sweet revenge! Brings “Google Bombing” to a whole new level.

I particularly notice blog-spam in 3 main categories, casino/poker, financial services and pills/pharmaceuticals. Maybe there’s a way to handle these 3 categories differently since the most abuse occurs here.

224
Expozilla Says:

still want a free GMail account?

hit me at Expozilla@Gmail.com

I dont like Spam Karma. Bad karma man, bad karma. Remember that… :)

The only way anyone could NOT like Spam Karma would be if they weren’t getting spam comments. It’s dealt with 1500 for me in less than 6 months – deleting them manually would NOT have been funny.

I’ve been using Spam Karma since around January, and it’s blocked or moderated 5,349 spam comments. And I’m still using the older version, simply because it works so well I haven’t felt compelled to upgrade.

I agree with Tony; If you have a WordPress weblog that gets any comment traffic at all, you need this plugin.

[...] If the Spam Karma system was giving you a hard time when you tried to submit your insightful comments, then please try again — I’ve just lovered the overall strictness setting to “normal”. [...]

[...] So the world is tuned in… that’s all very well if it weren’t for those pesky spammers! I’ve had seven spam comments already, and it didn’t look like it was going to stop. But with help from Spam Karma I hope to get rid of them. It checks the comment in several ways and deletes it if it determines that it is definite spam. Good comments are let through immediatedly. Comments where Spam Karma is in doubt will be subjected to a captcha test where you have to recognize some letters in an image. That is a really cool feature which should ensure that no automated program can post comments, while still allowing access to real people. [...]

[...] I have installed Spam Karma 2 on this system in hopes to fight the spam. If you encounter that you somehow cannot write a comment or leave a trackback and you think you should be able to, please consider contacting me on an IM or in e‐mail. This shouldn’t occur, of course.    [...]

[...] Jakiś czas temu testowałem zawzięcie systemy przedziwdziałające wpisywaniu komentarzy do mojej strony przez tzw. roboty spamujące. Testy zakończyły się dołączeniem do serwisu systemu SpamKarma 2. System sprawdził się dobrze. W ciągu miesiąca wyciął ponad 100 wpisów. Przez sito systemu przedostał się tylko jeden wpis, ale dzięki temu, że SpamKarma daje się ‘uczyć’ co jest a co nie jest spamem, wpis ten nie ma szansy więcej pojawić się jako komentarz dla wiadomości. Z uwagi na prostotę konfiguracji i najlepszą skuteczność (w porównaniu z innymi systemami tego typu) polecam go z czystym sumieniem wszystkim używającym WordPress’a. [...]

[...] No time to make sense out of all this because the buggers are gaining on me! It was time to download Spam Karma 2 and turn it on. [...]

[...] I’m taking another go-around with Spam Karma – the new version seems to be much less finicky about potential posts. It’s been up for three days, and so far hasn’t been too overly aggressive trashing useless comments. All the same, if you see a comment not post immediately, it’s probably waiting to be verified. Just hold off on any lengthy diatribes about how Cialis has helped out your Texas Hold’em games. [...]

Hi Dr Dave
While in WP admin panel and checking SPK 2.0 pre-alpha 9 I got like a pop up message saying there is a new version of SPK and listing changes. It then disapeared!!! I looked again and again but no it had disapeared. Did I imagine this ??
No matter what I do I can not recreate this. currently on SPK 2.0 pre-alpha.
Please tell me I am not going mad?

[...] My gallery is now open also updated to latest version. Please feel free to take a look. At the moment there are just a few pictures of Tom my son from his motox days. Also updated today is Dr Dave’s sk2. Cheers Dr Dave. In combination with IO ERRORs excellent bad behaviourwhich has just been updated to 1.1.3 Excellent stuff [...]

[...] 自從好久以前裝了 spam-karma v1 就再也沒有 spam 出現, 最近我整個版面, 系統修改了不少, 所以順道過去 spam-karma 的網站看看, 才知道 spam-karma 2.0-beta 已經出了, 那就順道升一下版本好囉 :p [...]

[...] Anyway, I’ll be continuing to get that rolling over the next couple of days/weeks. I couldn’t decide between WordPress and Drupal, but I opted for WordPress because it has a richer selection of themes, and I really like Spam Karma, and I wasn’t quite willing to give it up. I don’t fear the unknown; I just really like WordPress. [...]

[...] ok, the wordpress 1.5 upgrade went nice and smooth. I’ve also installed spam karma and need to configure it a bit more friendly as it seems to moderate pretty heavily and has blocked a friend of mine. I’ll be working on the configuring, if you happen to get flagged, you should still be able to post with the captcha (image authorization) please do and let me know if you are experiencing any difficulty… thanks…. scratch that…. went back to kittens spaminator, it doesnt do as much as spam karma does, but until I can configure it so that my visitors dont lose their comments, I’ll have to forego using it. I greatly appreciate all my readers, yes all 3 of you… [...]

all worked fine, then i got this error in log:
Structural failure: no comment ID sent to comment hook (web_UI )

when opening general settings, i receive this error:
Fatal error: Call to undefined function: curl_init() in /home/hipfinger/www.konfabulieren.com/wp-content/plugins/sk2_functions.php on line 145

[...] spam-karma is not only functioning, it’s pretty robust. so if you can’t post because my site accuses you of being a spammer, please email me and let me know so i can: i) better moderate the plugin, and ii) prevent your IP form being blacklisted. DO NOT resend your comment in the hope that it’ll get through if you just try hard enough: that’ll get your IP blacklisted. [...]

[...] ahhhh … the sweet smell of spam-free blogging. thanks, unknown genius, for spam karma! [...]

Thanks very much for the excellent program (SK2). I had several problems with an earlier installed captcha: users complained when it was set too hard; and then of course spammers broke thru. Just installed SK2 the other day — it was beautifully easy — and already it’s smoothly captured all the hated p0k3r spam (over a hundred in just a day or two); and approved non-spam TBs & comments. I also appreciate your strategy in employing all tools but layering them for maximum accessibility.

One comment – my SK2 install [WP 1.5.1.3 with a customized template] complained about the encrypted payload (filter? option? whatever). I did the advanced compatibility test, and followed instructions [at http://www.wp-plugins.net/wiki/index.php?title=SK2_Comment_Form_Hook ] about checking the comment form (comments.php) in my theme. My comment form included the relevant lines but in a slightly different form. I had:

<form action=”<?php echo get_option(’siteurl’); ?>/wp-comments-post.php” method=”post” id=”commentform” onSubmit=”return testValues(this)”>

instead of:

<form action=”<?php echo get_option(’siteurl’); ?>/wp-comments-post.php” method=”post” id=”commentform”>

and for the line to add, I had:

<?php do_action(‘comment_form’, $post->ID); ?>

instead of:

<?php do_action(”comment_form”); ?>

… But the inclusion of the returnTestValues and post variable in the respective lines didn’t seem like it should be fatal (what do I know), and I was out of time, so I just disabled the complaining feature (encrypted payload) and postponed trying to figure it out. I’ll get back to troubleshooting it when I have a bit more time, but in the meantime, I thought I would pass it along in case there was some obvious problem in the documentation, my install, or the code.

Finally – Solidarity, because I too get insane hatemail (in my case, usually misogynistic & crazy, for running a feminist website). What is with these people? I read thru your comments before posting mine, and I’m shaking my head over people who get so pissy and apparently feel so personally insulted by a spam filter. You’re doing great work & doing so thoughtfully — god knows we need more of that in the world. I’m sure you realize it’s greatly appreciated, but it doesn’t hurt to hear it again.

Thanks again,

Laura Q

[...] I had about 400 pieces of comment/trackback spam this week, and after manually deleting them all I installed Spam Karma 2. So far it’s working perfectly. Awesome.   [...]

[...] Ja, det s�g du ju. Skriv g�rna n�t om det. Jag har uppgraderat WordPress och lagt in spamfiltret Spam Karma, och lite annat. [...]

[...] I have just finished installing Spam Karma 2 – Reloaded to reduce the amount of comment spam I keep getting. I have also removed all comments except those where someone was making a useful contribution to the bl0g. You do not have to register now to post a comment however name and email are required. I have also made a contact form which you can find a link to at the top called Mail. [...]

So don’t beat me up over it but i still use wordpress 1.2 and can not currently upgrade. I do however need a good spam filter and contorler. I am excited about Spam Karma 1 and appreciate the fact that it wont be updated or supported, but i would really like it to still be available. The download link on http://wp-plugins.net/ dosen’t work. I bet this is low on your priority list but i would really, really love a version of this if anyone can help. If you could fix the link that would be great of if someone could direct me to a new one or send me the file i would also be really happy.

249
Agree with Ben Says:

In September Ben posted that he would love to install Spam Karma with a WP 1.2. Me too. I used to have it on and ran into a problem and had to remove it, now I can’t reinstall. It isn’t accessible in any way that I can find.

Any help anyone?

Hi Ben and Agree With Ben:

Sorry, but I have finally completely removed the SK1 archive, as it was no longer effective in any way against spam and only detrimental to legit users (which in turn generated way too many angry complaint mails).

If you have no way of updating WP to at least 1.5, then I would recommend checking on http://wp-plugins.net for other anti-spam options that work on WP1.2. I have recently gone over the different anti-spam stategiesout there and their efficiency… Feel free to have a look and pick a plugin (maybe captcha?) that will do a much better work than SK1 could have ever done…

Cheers and good luck!