glFusion Wiki

Site Tools


Spam / Bot Protection

BB2 Enabled
Set this to true to enable Bad Behavior 2 plugin protection.
Enable Automatic Banning
If set to true, IPs will be automatically banned if they fail the CAPTCHA entry 5 times, or if a post fails the Cross Site Forgery Check. IPs will be banned for 24 hours.
Display Stats
Enabling this option will add a blurb to your web site footer advertising Bad Behavior's presence and the number of recently blocked requests. Sites receiving more than 1,000 visitors per day should leave this option disabled as it is database intensive. This option is not available or has no effect when logging is not in use.
Strict Checking
Bad Behavior operates in two blocking modes: normal and strict. When strict mode is enabled, some additional checks for buggy software which have been spam sources are enabled, but occasional legitimate users using the same software (usually corporate or government users using very old software) may be blocked as well. It is up to you whether you want to have the government reading your blog, or keep away more spammers.
Verbose Logging
Turning on verbose mode causes all HTTP requests to be logged. When verbose mode is off, only blocked requests and a few suspicious (but permitted) requests are logged. Verbose mode is off by default. Using verbose mode is not recommended as it can significantly slow down your site; it exists to capture data from live spammers which are not being blocked.
Logging Enabled
You can disable logging entirely, but this is not recommended since it may cause additional spam to get through.
HTTP BlackList Key
Bad Behavior is capable of using data from the http:BL service provided by Project Honey Pot to screen requests. This is purely optional; however if you wish to use it, you must sign up for the service and obtain an API key. To disable http:BL use, remove the API key from your settings.
http:BL Threat Level
This number provides a measure of how suspicious an IP address is, based on activity observed at Project Honey Pot. Bad Behavior will block requests with a threat level equal or higher to this setting. Project Honey Pot has more information on this parameter.
http:BL Maximum Age
This is the number of days since suspicious activity was last observed from an IP address by Project Honey Pot. Bad Behavior will block requests with a maximum age equal to or less than this setting. Project Honey Pot ( has more information on this parameter.
Allow Offsite Forms
Bad Behavior normally prevents your site from receiving data posted from forms on other web sites. This prevents spammers from, e.g., using a Google cached version of your web site to send you spam. However, some web applications such as OpenID require that your site be able to receive form data in this way.
EU Cookie
Enable this option to alter Bad Behavior's cookie handling to conform to 2012 EU cookie regulations.
glfusion/configuration/spam-bot_protection.txt · Last modified: 2017/01/17 08:45 (external edit)