URGENT! Please help!

Anon

Hi, I have a php guestbook setup on my band's website. It's been there for months with no problems. However, recently, some moron has been filling the guestbook with stupid entries(check it out @ http://www.hypertheory.com/fenix/guestbook/guestbook.php)

Anyway, how can I prevent this? I'm just learning PHP, but I don't mind diving in and figuring out how to solve a problem like this.

Thanks,
Chris

ps: the guestbook uses a flat file rather than database.

samharwin

bastards!!

Firstly, I would set up a file to get all user's ip addresses and hosts.

If you see someone that is at the same host doing this, just block them from entering your site.

Next, you can create an array of "bad words" that you don't want entered in your posts.

before you update your guestbook, just check for those words.

hope that helps.

sammy

brandonschnell

there isn't an easy way to stop idiots without a database, and that'll just slow them down.

here is some possiblities that might work with a flat file.

1) you could limit the amount of text thats entered (set textarea to MAXLENGTH=500 for example)

2)you could also record the ip address and the time in a log, read the log, split the vars, and make sure the ip hasn't posted in so many minutes.

3)check for the number of newlines, restrict the user to 20 or so newlines (prevents really long pointless posts)

good luck!

daarius

i think the IP baning is the best solution. 🙂

or, dont post the guestbook entries direct to the site. add them to appending list, and when you approve it, then publish it.

Anon

Can PHP handle things like reading IPs and then banning them? Any good resources that explain how to use PHP to handle network tasks?

Thanks,
Chris

ps: I don't mind switching over to a MySQL db since I do have it installed.

Thanx guys...

brandonschnell

tho you may find banning ips ineffective against dialup users.

many potential spammers most likely will be discouraged after being told to wait 15 minutes between posts. set a cookie to enforce it.

Anon

I think the easiest way to control the posts is to create an admin side to your guestbook so once the post has been reviewed -- it can be posted.
You can also create a session variable that will determine whether the user has been to your site or has posted to the GB. I think sessions would be a quick solution.

Mark

abelajohnb

Chris,

Check out http://www.4cm.com/guestbookpro/

It pretty much has all the features listed/suggested above.

Seems to be one of the best PHP guestbooks there are.

Later.
JbA

Anon

Are you serious? A PHP script that you have to pay for? There are 100's of free, complete scripts out there, and 1000's of code snippets that someone could learn to piece together themselves.