413: Limit message sending frequency - Composr CMS feature tracker

ID	Project	Category	View Status	Date Submitted	Last Update

413	Composr	core_cns	public	2012-03-25 17:15	2021-03-15 17:21

Reporter	Chris Graham	Assigned To
Priority	normal	Severity	feature
Status	new	Resolution	open

Summary	413: Limit message sending frequency
Description	Limit use of contact member, PT, and recommend, features, to be under a particular threshold of messages in any 24 hour period. This threshold would be via a new usergroup option. For the Guest group, usage would be tracked by IP address (not session), otherwise it would be by member ID.
Tags	Type: Spam
Attach Tags	(Separate by ",")

Time estimation (hours)	5
Sponsorship open

Date Added	Member	Amount Sponsored

Chris Graham 2012-03-26 21:47 administrator ~372	Alternate approach by iamageneralist on the forum (http://compo.sr/forum/topicview/findpost/82115.htm)... "Is it possible to leave the recommend module active and not limit access to it but have the outgoing messages held for review by an administrator or moderator? That way I could keep the recommend feature active and visible for all, keep the nefarious messages from going out and identify which user was sending them so that I could ban that user."

Chris Graham 2019-07-04 17:09 administrator ~6025	Actually I've done something simpler than all this for v11. I've made it so the new CAPTCHA "Post threshold for members" option defaults to 5, and disconsiders any posts made in the last 24h or any made non-publicly. This way even members will get a CAPTCHA if they haven't established themselves well on the forum yet. I'll keep the issue open, but I think this solution is good. It'll cover the standard case of someone joining once then spamming invisibly, under the radar. Few spammers are going to make the effort to not only join, but establish themselves with legitimate forum posts. It's possible, and it'd be bad if they did it via a bot, but I think it's unlikely enough. I've also added user-level action logging for using the recommend module and making a new PT. Such logging was already added for using the contact member module.

View Status	Private (for security issues or disclosing of private information; if you submit as a guest, you will not be able to see your submission)
Note
Upload Files Maximum size: 32,768 KiB	Attach files by dragging & dropping, selecting or pasting them.
You are not logged in	You are not logged in. This means you will not get any e-mail notifications. And if you reply, we will not know for sure you are the original poster of the issue.

Date Modified	Username	Field	Change
2017-05-04 20:51	Chris Graham	Tag Attached: Type: Contact forms
2017-05-04 20:52	Chris Graham	Tag Detached: Type: Contact forms
2019-06-27 01:52	Chris Graham	Tag Attached: Type: Spam
2019-06-27 17:52	Chris Graham	Tag Attached: Roadmap: v11
2019-07-04 17:00	Chris Graham	Tag Detached: Roadmap: v11
2019-07-04 17:09	Chris Graham	Note Added: 0006025
2021-03-15 17:21	Chris Graham	Summary	Limit message sending => Limit message sending frequency