General discussion

I recently had a Drupal site defaced. A little bit of carlessness on my part but I noticed that they seemed to have a script specifically designed to deface drupal installations. First the server was compromised with an upload script, then they upload a file called drupal_view.php, from there it looks like they deface the site. Unfortunately I have to say I'm running and older version of Drupal, but I've kept up with the advisories and gone so far as to remove or hand edit files (like xmlrpc) when they come under question. Anyone out there run across this type of attack?

I've been seeing huge amounts of spam trackbacks on my site. I don't see any comment spam, because I require registration before comments can be posted. But when I have thousands of spam trackbacks at a time, the current facilities aren't sufficient. What I instead do is::

   DELETE FROM trackback_received WHERE status = 0;

Which deletes any unapproved trackbacks. If there are any legitimate ones in there, but there's too many spamm'd ones, then I don't have time to delete the spamm'd ones individually. So away they all go, whether or not they're legit.

I tried searching here and didn't come up with much in the way of discussion.

I did install the spam.module and it ties with the trackback.module so that there is bayesian filtering. Hence, the majority of the trackbacks I'm receiving are marked as spam alright.

HOWEVER ... with the current user interface, I still have to individually delete them. There's no effective batch mode delete in trackback.module. It would be great if there were a "delete all" button or "select all" which could let one select all the trackbacks shown on the page letting you easily remove them in large chunks. Right now the UI is clumsy in that it requires to you click on 40 checkboxes per page, then scroll back to the top and select "delete selected trackbacks" and click the submit button.

In any case, I did a bit of research about spam trackback fighting methods. The results are here:

Please provide example of using each. It seems they are the same.

when i tried to change my password , I have to provide an email address , the feedback I get is UNABLE TO SEND MAIL . I am using local host. I have microsoft express outlook locally. what must i do ? it is urgent.

Hi,

Just wondering if I'm missing something...
I know you can look up what functions do etc... at:
http://drupaldocs.org/api/

but what about for modules that you download from
http://drupal.org/project/Modules

Do they have an API where I can look up the functions within the module,
check out the parameters... etc?

Cheers

I managed to get drupal working , I found the drupal web page with its logo and login forms and a link called primary and secondary links. i logged on as admin and drupal generated a password for me. i am excited and forget to remember the password. Besides, i am working on local host . what shall I do to get that admin right.
thankx.