Re: Globally disabling sendto_form?

Jean Jordaan schreef op 01-03-14 10:27:
> Hi all
>
> Do we have any idea how badly this is being being abused in the wild?
> I've encountered two cases of Plones blasting spam.
> Worth a security patch for older Plones?

I added some honeypot measures to a 3.3 site recently, including logging 
to see how effective the measures are.  We were focussing on the 
comments section there, but I see that the past four days 29 sendto 
attempts were made.  Not good, but much less than the 600 posts to the 
join_form that were done earlier in four hours...  (they always failed 
for other reasons).



-- 
Maurits van Rees: http://maurits.vanrees.org/
Zest Software: http://zestsoftware.nl


------------------------------------------------------------------------------
Subversion Kills Productivity. Get off Subversion & Make the Move to Perforce.
With Perforce, you get hassle-free workflows. Merge that actually works. 
Faster operations. Version large binaries.  Built-in WAN optimization and the
freedom to use Git, Perforce or both. Make the move to Perforce.
http://pubads.g.doubleclick.net/gampad/clk?id=122218951&iu=/4140/ostg.clktrk