Cutenews: Invasione SpamBot Molto grave!

[darkwolf]

Il codice che mi hai fornito è sbagliato infatti non mi visualizza piu il comment form cioè mancano pezzi!

Tu lo hai preso dai sorgenti della pagina (html generato) o dal file che lo genera (sorgente php)?

Cercando pezzi di cutenews, ho trovato questo switch if($is_loged_in == TRUE)
Quindi si potrebbe applicare un qualcosa del genere:

if($is_loged_in == TRUE) { //se l'utente è loggato
echo "codice che genera il form del commenti";
} else { // Altrimenti:
echo "Registrati o fai il login per poter commentare";
} 

e se il codice, fosse "criptato" così? :

<script>
<!--
document.write(unescape("%3Cdiv%20style%3D%22background-color%3A%20%23C8C8C8%3B%20height%3A%2025px%3B%20font-size%3A%2020px%3B%20padding-top%3A%202px%3B%20width%3A%20765px%3B%20-moz-border-%0Aradius%3A%203px%3B%0A-webkit-border-radius%3A%203px%3B%20color%3A%20%23A8A8A8%3B%20%22%20div%20align%3D%22center%22%3ELascia%20anche%20tu%20un%20Commento%0A%3C/div%3E%0A%0A%3Cdiv%20style%3D%22padding-top%3A%203px%22%3E%0A%3Ctable%20border%3D%220%22%20cellpadding%3D%220%22%20cellspacing%3D%220%22%20width%3D%22765%22%3E%0A%09%3Ctr%3E%0A%09%09%3Ctd%3E%3Cdiv%20style%3D%22background-color%3A%20%23D0D0D0%20%3B%20color%3A%20grey%3B-moz-border-radius%3A%203px%3B%0A-webkit-border-radius%3A%203px%3B%20padding-top%3A%201px%3B%20border%3A%201px%20solid%20%23999999%3B%20padding-bottom%3A%201px%3B%20cols%3D%2282%22%22%3E%0A%3Ctable%20border%3D%220%22%20cellpadding%3D%220%22%20cellspacing%3D%224%22%3E%0A%09%3Ctr%3E%0A%09%09%3Ctd%20width%3D%2255%22%3E%3Cspan%20style%3D%22font%20size%3A%2014px%3B%20color%3A%20grey%3B%22%3E**Nome%3A%3C/span%3E%3C/td%3E%0A%09%09%3Ctd%3E%0A%09%09%3Cinput%20style%3D%22background-color%3A%20%23C8C8C8%20%3B%20border%3A%201px%20solid%20%23999999%3B%20color%3A%23808080%22%20%0A%0Atype%3D%22text%22%20name%3D%22name%22%20size%3D%2233%22%3E%3C/td%3E%0A%09%3C/tr%3E%0A%09%3Ctr%3E%0A%09%09%3Ctd%3E%3Cspan%20style%3D%22font%20size%3A%2014px%3B%20color%3A%20grey%3B%22%3E**E-mail%3A%3C/span%3E%3C/td%3E%09%09%3Ctd%3E%0A%09%09%3Cinput%20style%3D%22background-color%3A%20%23C8C8C8%20%3B%20border%3A%201px%20solid%20%23999999%3B%20color%3A%23808080%22%20%0A%0Atype%3D%22text%22%20name%3D%22mail%22%20size%3D%2233%22%3E%20%0A%09%09%3C/td%3E%0A%09%3C/tr%3E%0A%09%3Ctr%3E%0A%09%09%3Ctd%3E%3Cspan%20style%3D%22font%20size%3A%2014px%3B%20color%3A%20grey%3B%22%3E**Smile%3A%3C/span%3E%3C/td%3E%0A%09%09%3Ctd%3E%7Bsmilies%7D%3C/td%3E%0A%09%3C/tr%3E%0A%09%3Ctr%3E%0A%09%09%3Ctd%20colspan%3D%222%22%3E%3Ctable%20border%3D%220%22%20cellpadding%3D%220%22%20cellspacing%3D%220%22%3E%0A%09%3Ctr%3E%0A%09%09%3Ctd%20width%3D%22195%22%3E%0A%09%09*%3Cinput%20type%3D%22submit%22%20name%3D%22submit%22%20value%3D%22Aggiungi%20Commento%22%20style%3D%22color%3A%20%23000000%3B%20%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20border%3A%201px%20solid%20%23808080%3B%20background-color%3A%20%23FFFFFF%22%3E%3C/td%3E%0A%09%09%3Ctd%3E%3Cinput%20type%3Dcheckbox%20name%3DCNremember%20%20id%3DCNremember%20value%3D1%3E%3Clabel%20%0A%0Afor%3DCNremember%3E%20%0A%09%09%3Cfont%20color%3D%22grey%22%3ERicordami%3C/font%3E%3C/label%3E%3C/div%3E%0A%20%20%3C/td%3E%0A%20%20%09%3C/tr%3E%0A%3C/table%3E%3C/td%3E%0A%09%3C/tr%3E%0A%3C/table%3E%3C/td%3E%0A%09%09%3Ctd%3E%3Cdiv%20align%3D%22right%22%3E%3Ctextarea%20style%3D%22background-color%3A%20%23D0D0D0%3B%20border%3A%201px%20solid%20%23999999%3B%20%0A%0Acolor%3A%23808080%3B%20font-family%3Asans-serif%22%20cols%3D%2270%22%20rows%3D%227%22%20id%3Dcommentsbox%20%0A%0Aname%3D%22comments%22%3E%3C/textarea%3E%3C/div%3E%3C/td%3E%0A%09%3C/tr%3E%0A%3C/table%3E%0A%3C/div%3E"));
//-->
</script>

P.S: In quale file, hai trovato quello switch?

[darkwolf]

Lo switch: http://scripts.ringsworld.com/news-p...index.php.html (comunque, cercandolo su google con query: cutenews if is logged).
L'uso di quel codice sarebbe l'ideale perché mostrerebbe il form solamente ai registrati e stamperebbe un avviso ai visitatori.

[videofx]

Anche io mi ritrovo tantissimi tentativi di accesso al login del sito da spambot automatici, avendo la lista degli ip da cui partono questi attacchi non si puo' fare niente? cioe' Altervista non puo' fare niente dal punto di vista legale contro questi siti che attaccano?