coppermine-gallery.com/forum

Support => cpg1.4.x Support => Older/other versions => cpg1.4 miscellaneous => Topic started by: OutKa5t on January 21, 2007, 11:02:19 AM

Title: Spam accounts and Google
Post by: OutKa5t on January 21, 2007, 11:02:19 AM
Hi,

My gallery has been started to recieve account signups from 'spammers'. Each time one of these accoutns are created comments are left on photo's. The comment is a link with text google.pl but actually links to a virus file exe

I have been through many logs in attempt to trace where these users are coming from and the majority appear to be from France and finding the site with the following Google search

'powered by coppermine photo gallery user registration site .uk'

Has anyone else had this problem? I am using cpg 1.4.10

Thanks
Title: Re: Spam accounts and Google
Post by: Tranz on January 21, 2007, 11:12:35 AM
Spam is a problem for just about any app that allows user input. Please search the forum for spam captcha or spam akismet for some solutions specific to comment spam in your gallery.
Title: Re: Spam accounts and Google
Post by: Purrsia on January 22, 2007, 01:33:37 PM
Been getting the same thing. But actually, it put some folder called .logs inside one of my album folders and inside that, there was something Norton caught (I happened to be downloading a copy of one of my galleries to my computer as a backup, and Norton wouldn't let it download this part) was called backdoor.dextenea (http://www.symantec.com/security_response/writeup.jsp?docid=2005-032316-4307-99&tabid=1)
Searched the forum for that term and came up with nothing, so I hope this isn't a repost.

That seems a little worrysome. Any advice on that? As in, methods to prevent people from uploading such things? Well, short of killing the functionality of the gallery.
And how about making future updates of Coppermine come with a captcha of some sort to prevent this spamming business? I know I could turn comments off, but the majority don't abuse it and they can be fun and valuable for feedback. Seems like installing such a thing yourself will  put you out the next time coppermine does a major  update, right? Well, it would if adding it meant altering or adding code to a file. If it's just built in, one wouldn't have to worry about it. Just wondering. Thanks.
Title: Re: Spam accounts and Google
Post by: Joachim Müller on January 22, 2007, 07:01:13 PM
An existing backdoor on your server is not related to comment spam. However, you should be alarmed and react immediately. Ask your webhost for support.