PDA

View Full Version : Spambot infiltrated Calendar



nxvc
Wed 20th Aug '08, 11:55am
Hello,

I have a serious question: It seems that a Spam-bot has token some actions in our calendar and he just added about 2400 events for only 1 day, in example july 30th.

How can I now delete all these events? When I try to enter the day through frontend, it just load and load and then I get the error message "Fatal error: Maximum execution time of 30 seconds exceeded".

Is there a possiblity to delete all these events for this day in one step? And how can I find out the name of the spam-bot?

Steve Machol
Wed 20th Aug '08, 11:59am
This is a server time limit. To increase your limits edit your includes/config.php file and add this line right under the <?php line:

ini_set("max_execution_time", "240");

nxvc
Wed 20th Aug '08, 1:15pm
Thank you for your answer Steve, I will try this.

I guess not, but is there a possiblility to delete all events in one step for this day or do I need to delete all 2400 events manually one after the next? Would be a horrible imagination :-/

nxvc
Thu 21st Aug '08, 5:57am
Okay, to increase the time made me able to access the day-page after 4 minutes waiting.

... but what can I do to delete all 2400 entries? I always have to wait 4 minutes again after I deleted one of the spambot entries. That's not a solution and furthermore there's no garanty that another spam-bot just put thousands of other entries again for another day, or how to prevent this?

Jason Buchanan
Thu 21st Aug '08, 9:01am
The first thing would be to either ban the spambot or if it is accessing the calendar as a guest then change the calendars permissions. You can also set the moderate new events option. As far as deleting the events you may be stuck unless you can do it through an mysql statement, such as clearing the table. I would keep deleting them one by one until someone chimes in.

nxvc
Thu 21st Aug '08, 9:09pm
I deleted the spam-bot account, but it would take exaclty 10.000 minutes to delete his entries step by step .. can someone tell me the sql table of calendar entries? Can I delete them from the database table without causing other problems?

nxvc
Sun 31st Aug '08, 7:00pm
Okay I've found a faster solution:

calendar.php?do=getinfo&e=3

Then change the last number... but it is still annoying to delete 5000 spams by 4 clicks each spam-entry .. means 20.000 clicks and no garanty that another spam-bot posting 5000 entries again..

So, what's jelsoft doing to prevent this? Is there any anti-spam for the calendar planned?