One of the tiny, but impactful, features of the Mollom module (which will no longer be with us in a year or so) is it's simple blacklisting functionality. On many of my sites, where Honeypot and/or Mollom still take a beating and let through large numbers of human-powered spam, the Mollom term blacklist functionality has squashed about 90% of the common human spam I get. Here's the configuration for one of my sites that gets slammed the hardest:

Mollom blacklist configuration page

Consider one fun spam comment I'd get 4x daily for a few months—the author was always "XRumerTest" and the contents were always "Hello. And bye."

After I added xrumertest to the blacklist, I never got another one of those comments again.

Obviously, content blacklists can be pretty bad for the UX, if you're not specific enough. If you blacklist the wrong terms (e.g. shorter words that could make up larger words in valid posts), then you can frustrate your users.

But used surgically, the blacklist is immensely helpful.

Therefore, my proposal:

  • Honeypot adds a new configuration page/tab, titled 'Blacklist'.
  • The Blacklist page is just a list of 'Blacklist values'.
  • The user can add or delete (maybe edit too if it's simple enough) a blacklist value.
  • Honeypot scans all fields in any form for which the new blacklist protection is applied, and checks for the term.
  • If the term is found, the submission is rejected with a generic message like "This form submission was rejected due to spam protection filters... [something]." (Don't know exactly what to make this message say for decent UX).
CommentFileSizeAuthor
#3 mollom-blacklist.png263.12 KBgeerlingguy
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

geerlingguy created an issue. See original summary.

geerlingguy’s picture

Issue summary: View changes
geerlingguy’s picture

Issue summary: View changes
FileSize
263.12 KB
John Pitcairn’s picture

+1

It would be nice to be able to blacklist the inclusion of html links.

TR’s picture

Version: 8.x-1.x-dev » 2.0.x-dev

New features should go into the most-current version of this module first, then be backported if there is community interest.

TR’s picture

Marked #2958296: String blacklist feature, if not in Honeypot in add-on module as a duplicate, but that issue should be read by anyone working on this issue.

TR’s picture

Version: 2.0.x-dev » 2.1.x-dev
Status: Active » Postponed

Postponed because it doesn't seem like the community is interested in this feature, and because no-one has worked on it or submitted a patch during the 5 year period this issue has been open.

If you are interested in seeing this feature included in Honeypot, please submit a patch for review.