RopeWiki / RopeWiki/app

spammer accounts still active

Open
#129 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
PHP
Stars
5
Forks
3
Avg merge
21h 30m
Merged PRs (30d)
3

Description

The account captcha was broken for a week or two, allowing a bunch of spammers to create accounts.

FirstnameLastnameNumber

Eyeballing accounts it seems these accounts still exist. There are many which take the format FirstnameLastnameNumber, e.g. SalinaBardin1

root@ropewiki ~ $ rwusers | sort | grep -E '[A-Z][a-z]+[A-Z][a-z]+[0-9]+'
[...]
2025-04-09 19:37:27     SalinaBardin1   Salina Bardin   gloriastingley@wuuvo.com
2025-04-09 19:52:00     LouisaCallanan7 Louisa Callanan jenica@c.seoneo.info
2025-04-09 20:03:33     TeriCurtis89    Teri Curtis     domingamcloud6609@freundin.ru
2025-04-09 20:45:28     RaeStringer469  Rae Stringer    rae_stringer_5789@stake-casinonova.lol
2025-04-09 21:32:54     JennyClaxton0   Jenny Claxton   jenny.claxton-8533@korailmail.com
2025-04-09 21:41:14     KevinKraegen7   Kevin Kraegen   kevinkraegen80@slave.ernsys.com
2025-04-09 23:06:28     RandiShackell9  Randi Shackell  maudeblackham@mailmenot.io
2025-04-09 23:52:25     TamelaBobbitt22 Tamela Bobbitt  nadiascarbrough3325@tempr.email
2025-04-10 00:08:50     LoreneMuskett4  Lorene Muskett  lorene-muskett-141@pcpomail.com
2025-04-10 00:29:38     LydaChatham3    Lyda Chatham    lydachatham.8810@stake-casinoprimetime.lol
2025-04-10 00:33:18     FatimaYke669    Fatima Coggins  eulaliaborders2329@bheps.com
2025-04-10 01:45:52     MirandaMintz36  Miranda Mintz   janabroadhurst@asia.dnsabr.com
2025-04-10 02:37:34     KrystleMassola0 Krystle Massola cissy@j.cosmicbridge.site
[...]

Note that this isn't universal: https://ropewiki.com/User:Saibraxia. We were likely hit but a whole bunch of different bots!

Note about account creation volume

Since maps have been limited to logged-in users only (starting 03-27), there have been lots of new accounts created. However @BenjaminPelletier fix to the captcha on 04-10 shows a steep drop off. So we can't just assume the overall rise is only spammer.

root@ropewiki ~ $ rwusers | sort | awk '{print $1}' | uniq -c
[...]
     1 2025-03-14
      1 2025-03-15
      1 2025-03-16
      2 2025-03-17
      1 2025-03-19
      1 2025-03-20
      1 2025-03-21
      2 2025-03-23
      1 2025-03-24
      1 2025-03-25
      1 2025-03-27
     13 2025-03-28
     24 2025-03-29
     42 2025-03-30
     56 2025-03-31
     85 2025-04-01
     97 2025-04-02
     78 2025-04-03
     71 2025-04-04
     71 2025-04-05
    119 2025-04-06
    125 2025-04-07
     90 2025-04-08
    112 2025-04-09
     37 2025-04-10
     21 2025-04-11
     16 2025-04-12
     16 2025-04-13
     23 2025-04-14
     27 2025-04-15
     25 2025-04-16
      1 2025-04-17

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the rwusers command and the listed account-name and email patterns to identify the affected accounts. Review the captcha-related account-creation behavior mentioned in the issue, then define completion as confirming which accounts are spam and determining how the remaining accounts should be handled.

Written by the indexing model from the issue text.

Assessment

Tech stack
php
Domain
authentication, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.