Upload protection

jonki

Hi - I was wondering if anyone can throw some ideas at me for protecting my webpage.

I have a page where people can upload text and pictures free of charge and this opens me up to abuse.

I suppose I can include "if" statements to check for swear words.

I am not too sure how cookies work - could I leave a cookie that could tell me details about the whereabouts of the abusive user and can I get those details easily? A simple IP address is no good if I can't get the address of the individual.

Does anyone know of a system that checks picture files to see if it could contain porn? (ie - checking to see if there are too many flesh coloured pixels)

I have only been up and running 3 weeks and already I am having problems - has anyone had anything similar and any suggestion about how to stop this kind of behaviour?

I really appreciate any help.

Thanks a lot.

Jon

Kudose

Here's what I did to my site that I allow uploads to. First, I password protect the upload portion. No password, no upload. If they try it logs thier IP and timestamp. If they abuse it, it stil logs what they upload, timestamp and IP. You can also limit the file size, type a bunch of stuff. If you need help I know of a few good resources.

Also, if you log thier IP and get a timestamp you can get thier ISP from the IP and you can get a court order to get them to tell you everything about ther person that had that IP at the timestamp you have due to thier malacious intent. It is some new Act. Atleast in the US you can get them to. I dont know about other countries.

jonki

Cheers for your help. I am a bit worried about making my site too complicated - I live in an area where 10 years ago this was third world and my site has to be as simple as possible - so logging people in would scare away users.

I suppose leaving a cookie would be extremely simple and if they refuse the cookie I can refuse access - is that right?

Also - the sort of abuse I'm getting could be sorted out with a simple phone call - "I know what you did - please stop" kind of thing - this island is small and I doubt I'd need to take it much further than that. A court order is a bit extreme - have you heard of any other way? I doubt service providers give that sort of information away easily huh?

Again - thanks a lot for your help.

oh - and I think I posted this in the wrong section ... not quite sure how that happened - sorry.

Jon

jonki

Just thought
This might work - a pop up window saying - we're watching you - type thing as they are submitting their data "are you sure you want to continue?"........

It would certainly stop a few prankster kids who are not too sure of what I can do.

Kudose

You could be a dick and when someone tries to upload alot or doesnt have access to you can make a javascript window of death.

Basically they click ok or close the window, but as soon as they do it opens another one. An infinate loop of windows. The only way toget rid of them is to kill IE or whatever browser all together, therefore kicking them off your site.