EPrints Technical Mailing List Archive

See the EPrints wiki for instructions on how to join this mailing list and related information.

Message: #08736

< Previous (by date) | Next (by date) > | < Previous (in thread) | Next (in thread) > | Messages - Most Recent First | Threads - Most Recent First

Re: [EP-tech] Spam to submitter via "Copy request" form

CAUTION: This e-mail originated outside the University of Southampton.
Hi Jens,
We use the recaptcha stuff e.g. https://eprints.whiterose.ac.uk/cgi/request_doc?docid=2348396 .
The google.com version and recaptcha.net are essentially the same thing - but recaptcha.net isn't blocked in e.g. China, so we use that.

This does work well for us, and we also use recaptcha.net on our account creation and 'contact us' pages on our eTheses repository.

As the request details are stored in the EPrints database, you could do some analysis of these spam requests, and see if there are common themes - e.g. links in the request reason, or email addresses supplied?
You could also look at historic Apache logs and see if they all originate from the same place?

Cheers,
John



From: eprints-tech-bounces@ecs.soton.ac.uk <eprints-tech-bounces@ecs.soton.ac.uk> on behalf of jens.witzel--- via Eprints-tech <eprints-tech@ecs.soton.ac.uk>
Sent: 13 September 2021 13:34
To: eprints-tech@ecs.soton.ac.uk <eprints-tech@ecs.soton.ac.uk>
Subject: [EP-tech] Spam to submitter via "Copy request" form
 
CAUTION: This e-mail originated outside the University of Southampton.

Hi out there

we have received some feedback regarding spam via the "Copy Request". Lots of emails gone to one submitter. Does anybody use any capture or something else in this direction?

First I found something in /usr/local/eprints/lib/workflows/request/default.xml (line 22ff.) - using googles capture https://www.google.com/recaptcha/about/ but for sure we will have problems with data privacy.

Second i found some hints in the Eprints wiki: A captcha pseudo-field based on http://recaptcha.net/
https://wiki.eprints.org/w/New_Features_in_EPrints_3.2

Anything else? Cookies, Perl driven stuff? What do you guys use?

Every hint is welcome

Jens

--
Jens Witzel
Zentrale Informatik
Universität Zürich
Stampfenbachstrasse 73
CH-8006 Zürich

mail:  jens.witzel@uzh.ch
phone: +41 44 63 56777
http://www.zi.uzh.ch