[PATCH] Implement spamming mitigations for comments
Jelle van der Waa
jelle at vdwaa.nl
Sun Jun 30 11:45:26 UTC 2019
This is an attempt to mitigate the spam flood which has targeted
aur.archlinux.org in a simple and (hopefully) effective way. As
described in the commit message it just adds a hidden field which these
automated bots fill in to make the form submission look "valid" for
normal users nothing changes.
I also created a patch for account registration, but that patch is a bit
bigger and I'm not sure if these automated bot setups are smart enough
to report that registration fails although one can argue that they can
detect if a comment was 'submitted'. Either way the comment patch has
the smallest impact codewise and is an easy way to figure out if it
works.
Greetings,
Jelle van der Waa
More information about the aur-dev
mailing list