¥åßßå and I have been discussing b2evo's poor handling of comment/trackback/referrer SPAM. The 'slam-the-door-in-your-face' blacklist isn't ideal. Black-lists, white-lists ... it's all a gray area and SPAM is something that makes people see red :>.
What color is your anti-spam parachute?
The goal here would be to come up with a much better way of handling SPAM. We've tossed around some ideas and some of them are covered here. I think we should ADD to this, as we move forward, because the concept of improved SPAM handling is universally appealing and would rocket AM! to the forefront of a "must-visit" site, if we were to successfully come up with a plug-in/hack that provided hassle-free, superior anti-SPAM measures.
So ... what would make a system "superior"? We've identified the following list (to which we invite additions/subtractions/discussion):
A Superior Anti-SPAM System
These are just some of the ideas that need to be built into the system.
SPAM Factors
Below are things that make a site/comment/post and/or trackback more likely to be SPAMMY and situations in which they AREN'T SPAMMY. For every thing that LOOKS like SPAM, there's generally a situation in which it ISN'T SPAM.
These "ideal system" characteristics and "is this SPAM or not" %-probability assignations represent WHERE WE ARE TODAY. If you can add more ... PLEASE DO. I will update/refine this list so that when we end up making this plugin-hack ... it will ROCK the SPAMMY world. :D
Page 2 updated 17th March
TestsOk, this is a list of test that are running, as more tests are coded up I'll add them here. Feel free to add to this list if you start any tests
I'm still working on all of this, and I still have a few little tricks up my sleeve to stop these wankers once and for all. Unfortunately most of this would be 100% easier in 1.8+ as it's far more geared to the sort of stuff that I'm currently implementing. An unfortunate side effect of running these tests is that I no longer report anything to the evo blacklist, however, it'd be very easy to implement reporting for new spam base urls automatically as they are added to my own lists.
At the moment I still create new entries on my lists manually, mainly because I've been concentrating on methods and testing, but the next stage is to automatically create new entries for any comment that fails ## number of tests. in this way the anti-spam measures will "learn" from the spammers themselves. As a measure of their effectiveness, the wanker who started spamming everybody with the bogus google links was stopped by the fact that he used "known" spam content and also used a few known IP's.
I'm also trying to work out a method whereby the lists could be shared amongst "trusted" blogs so that the net is cast wider, which would help trap new spam before it gets a chance to pound every blog it finds. Basically, if one blog traps a bit of spam that exceeds ## threshold then it would inform the other blogs, in the "trusted" list, of the details of the new spammer (ip's, url's, common content etc). Then, if the same spammer hits any of the other blogs they're already geared up to stop them.
There's, obviously, still a shedload of work to do, and, as I mentioned earlier, I have a few other tests that I want to run as well. The more ways a spammer can "trip up" the better. My eventual goal is to have no antispam blacklist and no moderated comments.
We have made our first contribution to the b2evolution OpenSource project: $20US.
This may not seem like a lot, but as Yabba and I both agreed that we'd give back 10% for any b2evolution work that came through AM!, we're keeping to that promise. (This represents 1/2 of the payment for work we did in Jan, integrating "Waterblogged" into the front page of Ohio Boating.
As a team, we have contributed a total of $20.00 US, in support of the b2evolution project.
I'm sure we'll see the AM! website roll onto the "donor" list (just as soon as the French General gets a round tuit). Hopefully, before the infamous "beta" release. :|
I was approached today about what prices were to host a b2evolution blog with AstonishMe! It got me to thinking that we should come up with some sort of "b2evo hosting plan pricing schedule" and link to a special post from ads (no blinking animated GIFS pleas) within AM!
My initial thoughts ...
This particular individual (contact pending), runs on blogger and apparently, hasn't been too happy since Google bought Blogger a couple of years ago. Anyway, she complains that her site loads slowly and was looking for a new blogging software package ... got turned on to b2evo and AM!
Thoughts?
Well hells bells and taco shells. I believe we don't have to have a logo contest after all. :D I came up with one (out of necessity) and you know what? IT ROCKS. It's simple, conveys "astonished" in a very appropriate way and just looks cool.
The lastest rendition of the mock up of the www.goodboating.net front page can be seen HERE.
I've zipped up the files for you, Yabba, and put them in the goodboating subdomain on AM. Summat like here, I think ... (not 100%, but more like 85% ... it's late, damn near 2AM). :o
Have a look at a couple of things, if you can. I did a rounded corner deal on the H2 headers, but I kluged it together. I've got a faded image, wanted %text for accessibility ... and needed two corners in addition ... tried to do a <h2><div><span> thing to get all three images in, but had alignment issues on the <div>, for some reason. (Couldn't seem to get the BG image into the corner, was like there was a border or summat hiding it). Anyway ... that's one.
The other is the right sidebar title fades. I made a shorter version, which will "fade-to-black" in the sidebar ... called them, but it's still pulling up the OTHER ones, for some reason.
I had a HELL of a time getting our logo, CSS rollover in ... one of those ... :o ... why isn't it working things. (till i realized i fergot to close a curly brace immediately above ... ACK. :|
Urm ... I think it validates. (checking) ... strict, yes. Only warnings on the CSS, no errors, and most are bgcolors and simple stuff.
I haven't done anything with the input text boxes - have a play. I still need to add (dunno 100x100, or 150x150) thumb->zoom images on some "sample posts" for a mock-up of the body content. Have a play there if you'd like, but I've got a pretty firm idea of the kind of thing I'm shooting for, but just not certain how to "contain them", as *i think* DIVS are out, b/c they won't slide by the boat really well.
The flowing text around that boat totally rocks, Squirt! (Noggin ... fin)
I've seen Nemo, too many damn times and did I say? It's late. :|
Cheers ... ... I'm on with Rachel tomorrow (today), as she's really stressed with a 3-hour presentation on Monday, mid-term sometime next week and a term paper the following Monday. I'll probably be thin on the 'puter this weekend ...
stk out <-----------
Adoring fans are flocking to Ben's new site and the response to the update is under?whelming.
See it for yourself (maybe) at his newest web location. (He'll love all the attention from us, when he looks through his server logs). ;)
Mind you, you'll need to have javaScript enabled, or the page will be nothing more than a JPG file. Also, you'll need the Macromedia Flash add-on, because you won't be able to read a post without it ... (of course, finding out HOW to read a post the first time, might be a tad difficult). AND ... though it's reported to "work flawlessly" in IE, I only get a "undetermined" javascript error in my IE version (6.0.2900.2180) when I try to read a post. :(
However ... if you're lucky enuff to be a member (and have commenting privileges) ... you'll be happy to know that your email is STILL shown on the page with a "mailto:" link.
Watch out for validation errors, though, because there are a "few".
Elmo gives "Lightality" a big thumbs UP, but then again, he's just a stuffed animal. My review is more harsh, but worry naught ... since very few can actually READ the entries, whatever point poor Ben wanted to make, will rest securely locked in his beautiful JPG website. :|
On the other hand credit should be given for the effort he is putting into his creation.
Ok, I've had a tad of a play under the hood of the download manager plugin and it now has two hooks.
If you want to log a download then use h[x]ttp://download/<file path/name>
If you just want to protect a file (such as images etc) from hotlinking then use h[x]ttp://protected/<file path/name>
All files just get uploaded to media/blogs/chat/protected/<path to file>
I changed the media dir to put it back in the webroot as the filemanager throws a fit if I put it above webroot (must remember to bring that one up on the dev list).
Coming soon :-
Two more "hooks" [am_dl_percent <file path/name>] and [am_dl_count <file path/name>] these will return numbers and can be used as straight text or part of an img url:-
This file has been downloaded [am_dl_count <file path/name>] times
<img src='h[x]ttp://skin/img/[am_dl_percent <file path/name>]percent.jpg' />
Ohh yeah, and I need to render h[x]ttp://skin/ as '' to allow for urls relative to SkinBase().
¥
I'm thinking that this would make for a good article for folks. I know, for me, I was actually "afraid" of upgrading, b/c I was gonna lose my core hacks and thought it was gonna be forever to get them back.
Having upgraded from Paris (our first b2evo install) -> Dawn and then -> v1.6 ... all recently, has taught me a better way to keep track.
Basically, what I do is this:
Do either of you have a way of managing core hacks? (or suggestions/additions)? (This is really more a question for Danny and/or Ed, because I know that Blabba is a cowboy and probably doesn't have a method at all. :p )
The only thing that I've wanted in mine, is a relative level of importance (some core hacks are minor ... some critical). It would be nice to know which is which, so that WHEN I do upgrade, I can do the critical ones first ... though I usually do a parallel install with a copy of the DB and wait to go "live" till all core hacks are accounted for.
function DisplayHelp ( & $params )
{
?>
Docs go here.
<?php
}
The user can find that by going to Settings > Plugins > Democracy Poll > Help, but I wanted to add a link in the Tools > Democracy Poll page. So I added this right at the top of my AdminTabPayload event:
echo '<div style="float:right">';
echo $this->get_help_link('#');
echo '</div>';
That puts the help icon in the top right of the page. If you put anchors in the help page, you can make contextual help links that go straight to that section, like this:
echo $this->get_help_link('#installation');
The get_help_link method can also point to the external help url:
echo $this->get_help_link( '#', '', true);
Maybe you already knew about this, but perhaps we can discuss the best way to use it. Also, I needed an excuse to use the amcode for the first time. B)
Ok, the On Deck blog was starting to get a tad confused and untidy with the mixture of fluffy articles in progress and "chat" style posts between ourselves, so I decided that we should have a dedicated blog for those "I've been thinking" style posts.
¥
Here's a plugin idea I've been thinking about, but I don't know if it's possible or anyone would want it.
A rating system
The use case that I'm thinking of is plugins.b2evolution.net. It would be nice if I could post a plugin description there, then users could rate it. Out of 5 stars or 10 points, or better yet something that could be defined in the plugin settings (I give this post 645 out of 666 demons, or 37 out of 42 cups of tea). Each user rating could be submitted along with a comment. Or it could be done another way. But the post would always show the average of all the user ratings. You would also want ways to sort posts by rating. Maybe list the top five rated posts in the sidebar.
I don't know if there are plugin hooks that could make this happen. I guess you could use the Install event to add a rating column to the comments table, then use SkinTags to do the rest. What do you think?
Once again I just thought I'd bring all y'all up to speed.
Now that we've started to publish posts, and ping to the world, I've disabled all skins and feeds except the am skin and the rss2 feed until I have a chance to hack the other skins to use our "just show non members first page" bits, and the other feeds to just show teasers.
When I get round to it, I'll do a default install that we can use to show off our skins without having to hack them all to do the "only show non-members first page" bits and other stuff. I'll also start coding in the logic for "special posts" that show off the features of any skin etc.
Talking of plugins (and skins), since the beta seems to be imminent (lol, where have I heard that before?), should we hold off on releasing any skins/plugins until it's released? Otherwise we need to code for 1.6 alpha and 1.# beta as these will be the public releases that people will be using.
If we decide to release and code for 1.6 alpha then we won't be able to release certain plugins, Dannys weather plugin and our code plugin are examples of ones who's minimum requirements are higher than 1.6 alpha.
Anyway, as always, let me know what all y'all think ;)
¥
Anyone crazy enough to be running it on their production site
First off, just to help Danny get up to speed, Super Blog is an attempt to get a blog to be a forum without any core hacks.
Right, now you know as much as we do here's my thoughts :-
We need a way of differentiating between forum blog(s) and normal blogs, so far I'm going along the lines of :-
My thinking is - if we use seperate blogs for each forum, then we can assign group permissions (in bo) which enables us to have "anybody", "members only", "staff only" etc, which is a major forum feature. I'm also considering making all posts protected, which will keep them out of the all blog (which I know we don't use here). If I did this then I'd create a pseudo login for "guests". I thought about using categories for the forums but then we'd have to piss about trying to hack in descriptions and all the permissions stuff.
I still need to work a way to make "posting" easy (ie, from front page with no choice of blog/cat [would be current blog]), and of course we'd need to enable plugins for comments (smilies, bbcode, code etc)
Ideally I'd like to make this a set of plugins, but I think the reality is that it's much easier to make an uber custom skin, but we'll see
Anyway, if either of you have any thoughts on the matter just let me know
¥
I couldn't resist trying this outEDIT: Done (and killed the PZ2 ALT-button to keep blabba happy) ;)
The General might try to talk you into donating that code to the central plugin and skin repositories.
Ok, this is gonna take a tad of work, but it'll be worth it.
We need to create a db table and admin page for uploading plugins/skins and entering them into the db with a "current version" number. I can code the logic required into our current plugins, it won't actually do anything until I code the update plugin but it means that they'll be "update enabled". We also need to add a file to all of our skins (so that the update checker can "grab" their version and check them as well).
I'm thinking of keeping this plugin as a current members only function.
I'll hammer on with the toolbar coding first though, as that's needed before the code plugin can be released.
First off, great skin Danny :D, validates as strict and the css (although it has a shedload of warnings) validates as well :D
You did have a tad of an error with your black/white code, but if you change it to this it works :-
<div class="bPost<?php if ( isset( $black) and $black ){echo 'Black'; $black = false; } else { $black = true; } ?>" xml:lang="<?php $Item->lang() ?>">
(Damn, that code plugin rocks ;))
One other thing to note, until I convert the comment form to our random fields version it won't work here, so you'll need to use the astonishme one to make comments (not finished nebula skin so comments wont work from their either)
We also need to hack in the custom css/title stuff and do the info icons for this skin (lol, and I bet you thought it was finished huh Danny :p), but that's all custom to here and wont affect the released skin
Then we just need one of you to write a fluffy article to go with the skin
I'll (hopefully) have this coded up and working on the code plugin by the end of the day, it should be the last of the work required for it. It's mainly a matter of doing all the js logic, but I can steal some of that from the quicktags plugin.
Anyway, I hope you two lazy arses enjoyed sleeping whilst poor old me worked my fingers to the bone :|
Have fun
¥
How about using a mix of hard-coded links and category listing for the sidebar?
Presently, when you go to "Home" you see:
Categories
ALL (Newest->Oldest)
Articles (0)
Antispam (0)
CSS (0)
Web Design (0)
XHTML (0)
Blubberton (0)
News (1)
Yuck! Seems like visitors should see somthing like what's below, instad.
Description
Search
Members
Sign In Box
Join
Inside
About Astonish Me! (hard link to about us)
Member Benefits (hard link to post)
Services (hard link to post)
Portfolio (hard link to Portfolio blog)
What People are saying (hard link to post)
b2evolution blogging (hard link to b2evo blog)
by topic(cat listing minus certain cats?)
Anti-spam
Comments
Site Critique
SEO
Enhancements
Better Blogging
CSS
Skins
(this would be a long list)
by type
Informative ArticlesArchives (Collapsible List of all stuff by "Type" category? With list of post titles upon expansion of "Type" (e.g. ... "Hacks")
I'm not quite sure how to do this in b2evo and it's quite different from our own menu system on Randso, as I just have a simple cat/sub-cat thing. We could do that here, using the types (plugins, articles, etc) as the main cat ... but then each main cat would ahve to have the same (and a really long list) of sub-cats (by topic) ... which doesn't seem either efficient or make for a very good list of cats on the sidebar.
Was thinking a FLAT cat structure where the main cat is the type and the topics are "extras", when making a post.
Will that work?
Front Page
I'm not sure what to do here. We have a "home" blog, but really, what is the content going to be. It seems we either need a static front page ... maybe it can be a "home" blog, with a few never-changing articles "about us" type stuff. OR we could go the other way and make it a blog all and have it update anytime we add new content anywhere? Dunno.
Regardless of content, we need to add some pleasing graphics or summat to the page, so it looks a tad nicer and inviting (looks very plain right now).
<?php
echo 'hello world';
echo 'smilies are fun ;) :) :( => :O';
?>
<script type="text/javascript">
window.alert('the [xb] tag in bbcode produces [b]bold[/b] text ;)');
</script>
Competing In the Same Space?
Ben Lupton ... owner of Lightality
Claim: "Bringing a Rich Experience to Blogging"
Goal: To try and make skinning just as easy and feature packed as creating a post. This will be achieved by attempting to design a "CMS for skinning" by including a "Lightality" tag inside the blog properties. (I think he means 'tab' ... but who's quibbling with the master?) The tab will include the following sections: About, General, Settings and Look-and-Feel - which, in turn, will include: Color Themes, Layouts, Posts & panels.
When: Christmas Eve ... because "I'm heading for a month-long holiday to Europe" (Watch out there Yabba ;) )
Claims to have the Lightality Skin released on Oct. 24th, 2005, but waiting for Christmas release so can work on 'problems' and CMS. A preview of the CMS can be found here.
1) (4/3/2 Columns) - only seen pics of 3 and his site is 2.
2) (Show/Hide, Add/Remove, Drag/Re-Order Panels) - 1 & 3 yes, 2 yields scads of dotted boxes.
3) (Blog, Category and Author Avatars) - Seen 1 & 3 ... not 2
4) (Customizable BGs/Layouts/PostSkins/Styles/Themes) - unknown
Some untold stats:
• He claims on the Oct 24th that his site works in IE 6, but not for me.
• He has a trackback icon, but no trackback address (or permalink address for that matter) shows on individual posts. When you click the trackback link ... it indicates you need to log in to leave a message.
• The email icon, when clicked ... opens up an email client (security breach?) dunno ... no "To:" addy is filled out ;)
• Commentors won't be happy tho. Although you must be a registered user to MAKE A comment, any idiot can right click and view source to get the email address of every commentor. :p
• Ergometrics suck. Can't determine number of comments (total doesn't show till you actually VIEW comments). Can't link any articles via a permalink b/c none is displayed (and prolly wouldn't work anyway b/c of the weird js interface). New time visitors will have fun figuring out how to READ the flippin article to begin with ... and of course, as previously explained ... those with IE6, despite his claims, won't get to even if they DO figure out the one, b/c of javascript errors.
Speaking of errors ... and i'm only hashing this again because I want to document the numbers: (XHTML) - FAILS on 'transitional' and what's worse ... no character encoding is defined ... 182 XHTML errors. (CSS) - Irrelevant, b/c XHTML is so badly screwed up.
Two more things: (1) TABLES layout? Gimme a break (2) Got JS turned off? Site is little more than a JPG image. :o
OKAY ... This guy scares me. Not just b/c of what he's like on the boards, but b/c i think his idea is really GREAT ... just his execution sucks (and of course, he has no real clue). What do you think of an idea like he's describing, where one can basically build an object-oriented skin from a back office tab? The big problem that i see with it: to allow the kind of flexibility that would suit 80% of people's personal wants/desires/needs ... the interface would be too cumbersome for the average joe. But still ... esp if color and images could be customized ... it would seem you could hit 50% of ppls needs and still have a lightweight, user-friendly interface.
OKAY ... enough on this. I gotta de-blubbertise myself for a while ... i feel yucky all over
It's a shame I never kept a copy of my ancient 9.0.summat version, if you remember it had two new tabs on the blogs tab in the BO, one for layout and one for theme. At the time, I abandoned it because it meant I had to convert all of the sidebar stuff into customiseable modules, of course in Phoenix these are now the plugins.
I also started to recreate the same system as a plugin for Phoenix, if you look in the archives of my dev blog, you'll see me rabbiting about a skin/system called simplicity. Now that Phoenix has pretty much hit beta and the code is "fairly" stable I'll probably ressurect it and expand it into a full skinning system..... after I've got all the other plugins ported across and tested ;)
Just to touch upon the subject of blubber, his attitudes and methods, when it comes to coding, are rife amongst amateur coders ... usually the sort that call themselves "webmaster", they get on the big wide web and it's full of bells and whistles and new toys and they just want to have them all. So, they produce a website made of tables (when it'd be far easier and bandwidth friendly to use divs), they have flash buttons (to achieve a rollover effect that could be achieved with css), they use javascript effects (quite a few of which can be reproduced with just css) and usually their site only works in IE6 (although a few hours with a validator could cure most of that). They also tend to produce fixed width sites, because they're easier.
Ok, I might sound like a bitch, but let me tell you why I find all of the above appalling.
One of the main aspects of the web is the WW bit, it stands for "Word Wide" (yeah, yeah, I know you know). What that actually means is, it's available to anyone and everyone in the world (allow me a rose tinted glasses moment) and is controlled and owned by nobody. This means that even a blind man in outer mongolia has the right to expect to browse the internet as freely and easily as anybody else (this is what WAI/508 is all about) ...... lets follow him as he hits a "webmasters" site using a text reader :-
So, until the web has a damn sight less "webmasters" and more coders who actually give a shit about the visitor being able to browse through their site no matter what their abilities or needs, I'm afraid it's been reduced to just plain "Web". Of course, the "webmaster" couldn't care less, his stats show that 98% of his visitors are using IE6 with javascript enabled and flash installed ....... they never think to ask "why ?".
I say all this from experience, my first website was a pure javascript controlled monstrosity that only worked in IE (mind you my stats showed me that all my visitors used IE with js enabled :| ), and even when I converted it to be cross-browser compliant it still requires javascript !! As you know it's since then gone into recoding, and the next version only uses javascript to enhance a visit, if it's enabled, and to still be fully functional with as many bells and whistles as possible, even in a text reader ...... once I finish the galleries :p
So, if you're a webmaster and you happen to be reading this, here's what I recomend you should do :-
Of course, you don't have to listen to anything that we've said in this post and my reply, you have the right to close your browser and carry on being a webmaster ..... just don't be suprised when I visit your site and I close my browser because I'm using FireFox with flash disabled (and frequently with javascript disabled) and I browse at 1280 x 1024 ...... but your stats will still show you that 98% of your visitors use IE6 with javascript enabled and flash installed, so that's not a problem right?
¥
Egomania, Australia - Only 18 minutes after a board member thanked Danny (AKA Personman) for his quick reply and indications that he would follow up on his suggestion, Blurbberton (AKA Balupyers Buddy) chimed in with way more than two cents.
Sources confirm that Blubberton, reeling from an overdose of narcissistic empowerment, which made him feel he had invincible powers of deductive reasoning, decided that the reason the the poster, a Reggie Ryan, wanted to pull up deleted posts was to "monitor what the students have been posting."
Calls to Reggie Ryan have gone unanswered, but at this point, it is uncertain why he wants to pull up deleted posts, or even if he is a teacher a the unnamed middle school. Although ... Blubberton was cagey enough to couch his introduction with a legally-binding, "i[sic]'m guessing" and from the vocabulary, sentence construction and spelling, one might surmise that this mystery poster is, indeed, employed by the unnamed middle school.
Regardless of facts, Blubberton launched into a potential solution, (constructed mainly of off-the-top-of-a-narcissistic-high-head, half-baked thoughts, with little substance). Then, he pulls an about face, declaring the matter even too difficult for himself to solve in 5 seconds. He returns (an unknown amount of time later) to add the periods to his afore-mentioned half-baked ideas ... all presuming, of course, that the unknown poster has the authority to SPY on his students and is seeking a resurrection of posts precisely for this purpose.
An exit poll, conducted at b2evolution headquarters, outside a small French Pub, revealed mixed results.
"That BlabberMouth," one said dressed for some strange reason in a military uniform, "He's an ass."
Still, we did find supporters, though only a few. One remarked, "I just signed on with b2evolution yesterday, so what do I know?"
Taking his final, misanthropic swipe at the b2evolution crowd, a quite heady Blubberton signed off his unsolicited solution for a drug-induced premise, by listing off the various features he's managed to employ on his site.
"Lightality (4/3/2 Columns) (Show/Hide, Add/Remove, Drag/Re-Order Panels) (Blog, Category and Author Avatars) (Customizable BGs/Layouts/PostSkins/Styles/Themes)"
[And a link] - http://blog.blubberton.bimbo.biz
Our own investigation reveals that only 23% of web visitors will actually figure out which buttons are necessary to push, before Blubberton's message can be read. Further, because 90% of the browser universe still relies on IE (and even if you push the correct button, when you use IE, only a javaScript error results and the message is NEVER seen. Consequently, we conclude that Blubberton's fantastic site, built as a testament to narcissistic need, will be thankfully hidden behind a curtain of js errors and invalid code.
The final parting shot is still peeling off partying (er, working) b2evolution developers tongue's - "I've helped you, now you go help someone!" (or, more properly said: I'VE HELPED YOU, NOW YOU HELP SOMEONE!"
Our best advice ... "Go git some help yerself, Blubberton!"
Recent Comments