First, I'd get the CAPTCHA image plugin. It will protect both comment and trackback (yes, it's TRACKback) from bots. Of course, it's not foolproof but blacklisting trackback spam is usually pointless as the info the bots use (IP,from URL) is often faked or pointless.

I don't know about your second question though :(

Also, have a look at the [url=http://forums.b2evolution.net/viewtopic.php?t=12041&start=0&postdays=0&postorder=asc&highlight=trackback+spam][Plugin] Antispam DNS trackback. The end solution[/url].

Good luck

So out of curiosity, are there any deep experts on posting comments that can clarify/help understand the behavior? Of course, I am most interested in whether there is a way to stop posted comment notifications (email) from going out until after they have been approved.

I've been lucky so far and have had no issues due to misbehavior but I'd like to keep it that way...

The problem you have is that comment notifications are sent out during the db insert process. It doesn't take into account the status of the comment.

We've got a "[url=http://www.waffleson.co.uk/2007/08/16/omg_we_almost_have_a_new_plugin]subscriptions[/url]" plugin that we're currently toying with, but that's an opt in checkbox thing on a per post basis ( at the moment ). It uses a table to send out notifications when a comment is actually published. You could probably implement a similar logic by hacking the core.

¥

So two questions come to mind:

1) Is that "simply" a matter of taking the subscription notification call(s) and re-locating them to the "comment approval" code/section? Am I looking at a simple procedure or major heart surgery?

2) Since I'm always loathe to make a functional change like this to the product itself, would this be a valuable feature to have in the next release? It seems like it would be to me - otherwise the benefit of being able to approve/reject a comment is somewhat lost - but I haven't seen this discussed before and figured I just didn't understand the purpose/value of it working this way.

1) It'd probably be easier for you to recode the plugin to use the evo_subscriptions table and then disable the core notifications in conf/comment_post.php

2) The problem has arisen because moderated comments are a fairly recent addition to the core. However, based on the notes in the file they are aware of this and are working on recoding it already

¥

hi guys!

pls tell me if what were talking about here is like my post http://eezmol.com/life.php/2007/07/22/saipan_northern_mariana_islands

i was wondering why i m having a lot of trackbacks lately.

thanks

Oh dear,

They found you. You'd better install the trackback plugin, mentioned above, as soon as possible.

Good luck

hi afwas,

thanks. i'd just did.

Hi karen,

Considering the huge amount of spam you receive, you might also be interested in the [url=http://manual.b2evolution.net/Plugins/captcha_img_plugin]Captcha Plugin[/url] that now has the possibility to 'hide' the trackback adress.

Good luck

Hi Afwas,

A few days after I installed trackback plugin, spam trackbacks strike again. So, I will be installing Captcha later on. And I will get back to you, hopefully not for questions, but with a good outcome. Thanks.

The question is: Do the spam trackbacs that hit you came from the same IP referred in the trackback?. For instance, a trackback sent from my blog would show up like this in the notification e-mail:

website: El Liberal Venezolano (IP: 216.104.33.90, esc90.midphase.com)

if you resolve esc90.midphase.com, you get back: 216.104.33.90

$ host esc90.midphase.com
esc90.midphase.com has address 216.104.33.90

The plugin is designed to block trackbacks for which this condition does not apply, which are the vast majority.

im not sure i understand austriaco but pls guys, if possible, help me check. i had just installed captcha in my [url=http://www.eezmol.com/]website[/url]
(main page) but i usually get trackbacks [url=http://eezmol.com/life.php/2007/07/22/saipan_northern_mariana_islands/]here[/url]

what part don't you undertand?

Hi Austriaco,

I've check the trackbacks, not all of them came from the same IP. But, I noticed that most of them came from 62.213.68.96 to 62.213.68.240. Others came from other sets of IP.