Yes - the privacy statement is a field that was added to the request dataset.

It is stored as the version of the privacy statement that was agreed e.g. 'request_v1'.

We only have one version at the moment, but if we revised this to make a v2 statement, we would store 'request_v2' in the database.

Cheers,

John

Hi John

thanks a lot for your quick answer. I'll keep an eye on it. Q: Do you store the "Privacy Agreement" click?

Of cause we analyse apaches logfiles and feed our badbot list, but unfortunately at the moment of sending the form it's to late ;-)

Anybody else doing the same or something different?

Cheers
Jens

--
Jens Witzel
Zentrale Informatik
Universität Zürich
Stampfenbachstrasse 73
CH-8006 Zürich

mail:  jens.witzel@uzh.ch
phone: +41 44 63 56777
http://www.zi.uzh.ch

"John Salter" ---13.09.2021 15:30:46---Hi Jens, We use the recaptcha stuff e.g. https://eprints.whiterose.ac.uk/cgi/request_doc?docid=23483

Von: "John Salter" <J.Salter@leeds.ac.uk>
An: "eprints-tech@ecs.soton.ac.uk" <eprints-tech@ecs.soton.ac.uk>, "jens.witzel@uzh.ch" <jens.witzel@uzh.ch>
Datum: 13.09.2021 15:30
Betreff: Re: [EP-tech] Spam to submitter via "Copy request" form

Hi Jens,
We use the recaptcha stuff e.g. https://eprints.whiterose.ac.uk/cgi/request_doc?docid=2348396 .
The google.com version and recaptcha.net are essentially the same thing - but recaptcha.net isn't blocked in e.g. China, so we use that.

This does work well for us, and we also use recaptcha.net on our account creation and 'contact us' pages on our eTheses repository.

As the request details are stored in the EPrints database, you could do some analysis of these spam requests, and see if there are common themes - e.g. links in the request reason, or email addresses supplied?
You could also look at historic Apache logs and see if they all originate from the same place?

Cheers,
John

From: eprints-tech-bounces@ecs.soton.ac.uk <eprints-tech-bounces@ecs.soton.ac.uk> on behalf of jens.witzel--- via Eprints-tech <eprints-tech@ecs.soton.ac.uk>
Sent: 13 September 2021 13:34
To: eprints-tech@ecs.soton.ac.uk <eprints-tech@ecs.soton.ac.uk>
Subject: [EP-tech] Spam to submitter via "Copy request" form 
 
CAUTION: This e-mail originated outside the University of Southampton.
Hi out there

we have received some feedback regarding spam via the "Copy Request". Lots of emails gone to one submitter. Does anybody use any capture or something else in this direction?

First I found something in /usr/local/eprints/lib/workflows/request/default.xml (line 22ff.) - using googles capture https://www.google.com/recaptcha/about/ but for sure we will have problems with data privacy.

Second i found some hints in the Eprints wiki: A captcha pseudo-field based on http://recaptcha.net/
https://wiki.eprints.org/w/New_Features_in_EPrints_3.2

Anything else? Cookies, Perl driven stuff? What do you guys use?

Every hint is welcome

Jens

--
Jens Witzel
Zentrale Informatik
Universität Zürich
Stampfenbachstrasse 73
CH-8006 Zürich

mail:  jens.witzel@uzh.ch
phone: +41 44 63 56777
http://www.zi.uzh.ch