Comment Spam Reduced to 0

Whaddya mean? Spam on

Blame popularity, notoriety or just plain old dumb luck. The blog has been recently attacked by a particularly motivated spammer crew operating from IP addresses in China and Russia. This meant endlessly going into my blogCFC administration and removing any spam posts from the night before. Annoying, redundant and frustrating.

Sounds Annoying, Redundant and Frustrating, what did you do?

In a moment of intense frustration, I pulled every IP address in my block list and wrote a script to block the entire Class A address for that specific spammer. Even though this solution would block whole countries and over 2 billion people from adding their comments to the conversation on, it was a decent tradeoff to not deal with these persistent spammers.

Hmm... Seems drastic, like killing a fly with a shotgun

As the Rage subsided, I realized that even that Nuclear option was really only a temporary solution. I'd be forced to chase an endless stream of IP addresses and would still subject my readers to assaults of Viagra, Batteries and WoW gold. There had to be another way...After a litte effort, I reached the 0 Comment Spam solution

0 Comment Spam? Do Tell!

Jake Munson wrote a library called CFFormProtect. This library protects any form from robotic spam and well as human entered spam. It has all sorts of tests that it uses to grade comments as spamorific or legit and blocks the spamorific ones from posting. Imagine if ColdFusion had an IsSpam() function.

How long did it take you to implement?

From start to finish, about 20 minutes. That includes downloading the project, reading the docs, and altering the appropriate parts of BlogCFC.

That's it? Why didn't you do it sooner?

A good question. I've asked myself that. A few times.

And you have gotten 0 Comment Spam?

Yeah, 0. Not a single one. The weeks leading up to this I had been assaulted from numerous sources, sometimes as many as 30 comment spam a night. Now I get 0.

What are you waiting for? Go Download CFFormProtect today!

10054 Views Print Print Comments (15) Wow

There are no comments for this entry.

Add Comment Subscribe to Comments

10/13/08 7:38 PM # Posted By charlie griefer

very cool. so do you still need to use CAPTCHA or does the cfformprotect negate the need for that? or is it a matter of using both for max protection?

just curious, as i see you still have CAPTCHA enabled :)

10/13/08 7:40 PM # Posted By Dan Wilson

CFFormProtect will replace the need for CAPTCHA.

I guess I forgot to turn of is off now...


10/13/08 8:00 PM # Posted By Michael Sharman

Sounds great Dan (and Jake).

I've been using Akismet (on Wordpress) for almost 2 years and it's only let a handful of comments through the filter.

Not bad considering I hit 90,000 spam comments last week!

Interesting to note is that you can use Akismet with just need an API key. Well worth it if you ask me :)

10/13/08 8:50 PM # Posted By me


10/15/08 11:00 AM # Posted By Bob Silverberg

Sounds great Dan. Care to share the mods that you made to BlogCFC with us lazy bastards?

11/27/08 10:09 PM # Posted By Hamad Amaral

(Testing if I am blocked)

2/4/09 10:19 PM # Posted By Ryan

Akismet is awesome! I can't tell you how many spams I've caught on my <a href="http="">c... justice</a> blog.

8/3/09 12:14 AM # Posted By ed hardy

Thank you!

10/28/09 4:35 AM # Posted By metin2 yang

good day for you

11/27/09 2:14 AM # Posted By Tom Smith

I've been using Akismet (on Wordpress) for almost 2 years and it's only let a handful of comments through the filter.

11/27/09 2:46 AM # Posted By Edwin Kyalangalilwa

thanks for the share..nice website good read

12/22/09 9:53 AM # Posted By Bernard McFly

This post addressed all the question I had and provided great answers. Thanks for sharing.

1/29/10 1:21 AM # Posted By UK Laptop Battery

bright future for ColdFusion? I really hope so~!!

4/1/10 4:45 AM # Posted By Diablo 2 cd key

Thanks for your post!I'll come back~

8/14/10 6:44 PM # Posted By James

Great article, thanks!

Add Comment Subscribe to Comments