Archive for Web Development

How to Obtain a Microsoft Hotfix

Posted Monday, June 26th, 2006 at 3:36 pm

Knowing who to contact and what you need in hand will save you lots of time. When I need a Microsoft hotfix, here is what I do:

  • Call Microsoft’s support phone number (800) 642-7676
  • Navigate through the phone menu, selecting the option regarding hotfixes
  • Tell the representative you are seeking a hotfix
  • Provide the Microsoft representative the knowledgebase Article ID number
  • They will take some contact information, give you a few warnings, provide a case number, and wait on the line for you to download the hotfix

Comment Spam and Adobe Redirect

Posted Thursday, June 1st, 2006 at 2:07 pm

While sifting through some of my site’s comment spam, I noticed a clever trick one spammer used in an attempt to fool my website’s defenses.

Instead of directly linking back to their site, they posted links that take advantage of an Adobe redirect script. For example, instead of linking to http://spam.com/, they linked to http://store.adobe.com/cgi-bin/redirect/?http://spam.com/.

Here’s an example you can try:
http://store.adobe.com/cgi-bin/redirect/?http://www.macromedia.com/. Oh wait, I guess that’s now an infinite loop.

Wiki Spam Without Style

Posted Friday, March 24th, 2006 at 5:36 pm

Wiki spam is when users or bots append unwanted links and URLs into established or abandoned wiki-based websites. Though most wiki software like MediaWiki automatically adds the attribute/value rel="nofollow" to a tags, spammers still flood your content in an effort to peddle there wares.

Most wiki spam uses CSS to hide their content from the average user. They wrap their content with a div tag that uses inline CSS tricks to keep their content from displaying. But when you take a look at the change log or attempt to edit the content, you’ll see their attempts at deception.

The most common way I’ve seen spammers hide their content is to use CSS overflow and height as follows:

<div style="overflow: auto; height: 1px;">spam content here</div>

This ends up working out pretty well for them. Thanks to the cascading CSS rules, their inline styles override any global CSS counter measures I might try to implement. But I’m not without my own bag of tricks.

wgShowIPinHeader

# prevent information on IP addresses from being added
$wgShowIPinHeader = false;

Adding this line to your localsettings.php file will remove the IP address and related Talk links from the top of MediaWiki pages.

wgGroupPermissions

# prevent anonymous users from being able to edit while allowing users
$wgGroupPermissions['*']['createaccount'] = true;
$wgGroupPermissions['*']['read'] = true;
$wgGroupPermissions['*']['edit'] = false;
$wgGroupPermissions['user']['edit'] = true;

Adding these lines to your localsettings.php file will keep anonoymous users from making changes. Users will at least have to create an account before adding wiki spam to your site.

wgSpamRegex

# prevent the hidden CSS trick
$wgSpamRegex = "/\<.*style.*((display|position|overflow|visibility|height)\s* :|font-size\s*:\s*\.?\d+).*>/i";

Adding this line to your localsettings.php file will stop most of the hidden CSS tricks. When a user attempts to include text that matches the above string, the edit will fail and MediaWiki will return a message like this:

The following text is what triggered our spam filter:
<div style="overflow:auto; height:1px;">spam content here</div>.

To learn more about how to stop wiki spam, consider visiting chongqed.org.

Upcoming Redesign

Posted Friday, March 17th, 2006 at 11:00 am

Lambda Chi Alpha’s IT team is getting ready to flesh out some of the wireframing, information architecture, layout, and content for lambdachi.org. There are so many tools and best practices I have referenced in the past, I wanted to post a few here for easy reference:

Design Documentation

Web Standards Guidelines

CSS/XHTML Wireframes

Optimization

Color Selection

Inspiration (Standards)

Inspiration (Non-Standard)

PFA Meeting

Posted Thursday, September 8th, 2005 at 2:00 pm
PFA Meeting

Today — right now, in fact — I’m giving a presentation on electronic communication to the Professional Fraternity Association at its conference in Orlando, Florida. I took this photo and posted this content via my cell phone to demonstrate how easy it is to publish content on the web. When they read this on my live site, they’ll either think I’m pretty cool or a super geek. Could I possibly be both?

My Workshop

I promised to post my PowerPoint presentation online, so here it is: PFA IT Workshop (September 2005)