README

Spam prevention is an extension based on our spam fighting experience on the official Flarum community Discuss. After installation it does a great job at preventing any form of unwanted spam. Give it a spin if spam is an annoyance on your community!

Requirements

flarum/approval - this is required
flarum/flags - this is recommended
fof/spamblock - optional, when enabled immediately deletes users that open discussions with spam subjects

Installation

composer require floxum/spam-prevention

Now enable this extension from your admin area and it will already do its job. No further configuration needed.

That's it. Read below what this package does and how to customize its behavior.

Spam prevent logic

How does it try to identify spam?

it scans for phone numbers
it scans for email addresses
it scans for links that aren't in the allow list
it identifies the language used against the language packs installed
it ignores elevated users (mods and admins)

Where does it scan for spam?

it scans (first) posts
it scans user bio's

How does it take action?

it flags posts with flarum/flags enabled
it marks posts as not approved with flarum/approval enabled
it overwrites user bio's if it identifies spam
it marks users as spammer if a discussion subject contains spam with fof/spamblock

Customization

<?php

/*
 * This file is part of Flarum.
 *
 * For detailed copyright and license information, please view the
 * LICENSE file that was distributed with this source code.
 */

use Flarum\Extend;
use Floxum\SpamPrevention as Spam;
use Laminas\Diactoros\Uri;
use Flarum\User\User;

return [
    (new Spam\Filter)
        // use domain name
        ->allowLinksFromDomain('luceos.com')
        // or just a full domain with protocol, only the host name is used
        ->allowLinksFromDomain('http://flarum.org')
        // even a link works, only the domain will be used
        ->allowLinksFromDomain('discuss.flarum.org/d/26095')
        // Alternatively, use an array of domains
        ->allowLinksFromDomains([
            'luceos.com',
            'flarum.org',
            'discuss.flarum.org'
        ])
        // Use custom (expert) logic.
        // Return true to ignore further checking this link for validity.
        ->allowLink(function (Uri $uri, User $actor = null) {
            if ($uri->getHost() === '127.0.0.1') return true;
        })
        // How long after sign up all posts are scrutinized for bad content
        ->checkForUserUpToHoursSinceSignUp(5)
        // How many of the first posts of a user to scrutinize for bad content
        ->checkForUserUpToPostContribution(5)
        // Specify the user Id of the moderator raising flags for some actions, otherwise the first admin is used
        ->moderateAsUser(2)
        // Disable specific spam prevention components
        ->disable(\Floxum\SpamPrevention\Filters\UserBio::class),
];

FAQ

Why is there no admin settings page?

Building a ux for an extension takes a lot of time, especially when the code isn't mature enough. Changes to the inner workings might affect a settings page countless times. We will build a settings page once we're satisfied about the features contained in this tool.

Migrating from blomstra/spam-prevention

This package replaces blomstra/spam-prevention. Because the extension ID changes from blomstra-spam-prevention to floxum-spam-prevention, follow these steps:

composer remove blomstra/spam-prevention && composer require floxum/spam-prevention
Replace Blomstra\Spam with Floxum\SpamPrevention in your extend.php.
Enable the extension again in the admin area.

floxum / spam-prevention

Package info

Security

Statistics