<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="padding-bottom: 10px; padding-top: 5px;">
<div style="padding:12px; border:1px solid #8D3970; background-color:#F7F9FA; color:#8D3970; font-size:14px; line-height:22px; font-family: Calibri, Arial, Helvetica, sans-serif;">
<strong>CAUTION:</strong> This e-mail originated outside the University of Southampton.
</div>
</div>
<div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Hi Jens,<br>
We use the recaptcha stuff e.g. <a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Feprints.whiterose.ac.uk%2Fcgi%2Frequest_doc%3Fdocid%3D2348396&data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C7cca04139b78406f943e08d976baabf8%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637671366381239129%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=AlOvEZ%2Fdl1B%2BO0fdWn9cV8UZkS5bf7v2w67l24mWPT4%3D&reserved=0" originalSrc="https://eprints.whiterose.ac.uk/cgi/request_doc?docid=2348396" shash="f/2V2hVPTBONmtYKXm53R9tj8UdoYu6e0FNgMIEW9EhJtQ2J5LWdrQDmB16RXGq40X8y16ZtOXTSwOF71tlSG5CHBkV1ciqdrBS51HccIbMN0a4cBjGVy0BkL7+ZIvbgISSTVhI87bvYmRBTyAo7Pu5MUfzLY9aEyRd8/IgX6wo=" id="LPlnk781319">
https://eprints.whiterose.ac.uk/cgi/request_doc?docid=2348396</a> .</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
The google.com version and recaptcha.net are essentially the same thing - but recaptcha.net isn't blocked in e.g. China, so we use that.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
This does work well for us, and we also use recaptcha.net on our account creation and 'contact us' pages on our eTheses repository.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
As the request details are stored in the EPrints database, you could do some analysis of these spam requests, and see if there are common themes - e.g. links in the request reason, or email addresses supplied?</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
You could also look at historic Apache logs and see if they all originate from the same place?</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Cheers,</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
John</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> eprints-tech-bounces@ecs.soton.ac.uk <eprints-tech-bounces@ecs.soton.ac.uk> on behalf of jens.witzel--- via Eprints-tech <eprints-tech@ecs.soton.ac.uk><br>
<b>Sent:</b> 13 September 2021 13:34<br>
<b>To:</b> eprints-tech@ecs.soton.ac.uk <eprints-tech@ecs.soton.ac.uk><br>
<b>Subject:</b> [EP-tech] Spam to submitter via "Copy request" form</font>
<div> </div>
</div>
<div>
<div style="padding-bottom:10px; padding-top:5px">
<div style="padding:12px; border:1px solid #8D3970; background-color:#F7F9FA; color:#8D3970; font-size:14px; line-height:22px; font-family:Calibri,Arial,Helvetica,sans-serif">
<strong>CAUTION:</strong> This e-mail originated outside the University of Southampton.
</div>
</div>
<div>
<p><font size="2" face="sans-serif">Hi out there</font><br>
<br>
<font size="2" face="sans-serif">we have received some feedback regarding spam via the "Copy Request". Lots of emails gone to one submitter. Does anybody use any capture or something else in this direction?</font><br>
<br>
<font size="2" face="sans-serif">First I found something in </font><font size="2" face="sans-serif">/usr/local/eprints/lib/workflows/request/default.xml (line 22ff.) - using googles capture
</font><a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.google.com%2Frecaptcha%2Fabout%2F&data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C7cca04139b78406f943e08d976baabf8%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637671366381249089%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=W4sGtHwgjC7JyCkaUSmS2%2FNFAoYBOZoImyH2kLHq3qE%3D&reserved=0" originalSrc="https://www.google.com/recaptcha/about/" shash="nWOziNEyjMC1ME5J0lUELPO/iCRHIJjD60KRDqmtFcmIOs3x0X4a1ZZl68o/VIgr0HtSL/po6t/xDSqrl9U5TjBBeRoK0WqTkZNN6vvrMlHyHA1LKCXSwONhbJmb4iJn/vNRBEJIkWnMIa4qoOfbPQa5RHVBpYNc8r5Uw4/mqP4=" originalsrc="https://www.google.com/recaptcha/about/" shash="tQGUsL4a4bZFOYn619QYVfju4YlBJ356Cd69OPngrnO3bK50Zt4FURR5uvVVi17SDU2TfmOkNLbbivSFpdSJ/gnJq/c+TmnUiNPFskf6UurHx0AFctcB/pDD4XpWmQXE8RgYDvvMzctPoMhkTfJedSrO7bsKDaMm+xBj0aBxB+k="><font size="2" color="#0000FF" face="sans-serif"><u>https://www.google.com/recaptcha/about/</u></font></a><font size="2" face="sans-serif"> but
for sure we will have problems with data privacy.</font><br>
<br>
<font size="2" face="sans-serif">Second i found some hints in the Eprints wiki: A captcha pseudo-field based on
<a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Frecaptcha.net%2F&data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C7cca04139b78406f943e08d976baabf8%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637671366381249089%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=edxm%2BnqD3aMpUYOVg%2F1iS3emAz4a10TM40IgCNCCFdk%3D&reserved=0" originalSrc="http://recaptcha.net/" shash="ILPaUm+2cqKYA+2WQaiutp8uWIiGFVYEy5w2qVCPFgmSgkcY2NtESex7Gl8/k98s90KSE9pwMaMw/IeObjdinvHOEA+5nPHOjV4HrwgnhCQleK1X6pW6lZJRll2xR6OP9CdYh22ifEdmhrhmoomi0R7I0znpF205/tgEeV3A1/I=" originalsrc="http://recaptcha.net/" shash="FZh0ZSjFjRPcVIUVJdK9C09gtTJjos9r8DYASU2yghpXZE8ZbfJSoapLRqk5Zrpr0aDkVgioUIG4+znEx0TIRZDUt+fiYaVzUhrH/WPgxCqxxnomoetGFlMSotZV+tOvT12LWN0WD8BiZ9eamDCQn3R4oFpzMtjsoq/m4fMnn3U=">
http://recaptcha.net/</a></font><br>
<a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.eprints.org%2Fw%2FNew_Features_in_EPrints_3.2&data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C7cca04139b78406f943e08d976baabf8%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637671366381259050%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=c8RvcGv0tXplyK3V%2FNMLM5aUxww7YGk8V%2FnTNK76fy8%3D&reserved=0" originalSrc="https://wiki.eprints.org/w/New_Features_in_EPrints_3.2" shash="v9ChmJSjhbdwYv9RijN5DD6ETA2kC5uINXFKOzaT/2YpWXL3On5DJnlnom29SGaTlAj6Nxg6999u0i6bR7ApypB54ex/mcv+5mn+TikxGrJleBQ1oN6odzxAkVGehr0hiYXz2kjjhowFXKWvo8QVRSip4XQAl/b/Ga/dP3Q5xjw=" originalsrc="https://wiki.eprints.org/w/New_Features_in_EPrints_3.2" shash="fck+n/DX2B9LOaBD/wSvWO70WQGJXchtFuN8kldRggxMMMLhtFiQd9FQmv9NLrny3pUUHj5T3g59v1Mhrx/elGKy70r3tXE5O7XpZOKGpGhgoVK81Svt9v9LxxQ4V/iyl0YUtMBVywZGt3LMdrWumz9Y3uGpyfkh9lG2HNqioZY="><font size="2" face="sans-serif">https://wiki.eprints.org/w/New_Features_in_EPrints_3.2</font></a><br>
<br>
<font size="2" face="sans-serif">Anything else? Cookies, Perl driven stuff? What do you guys use?</font><br>
<br>
<font size="2" face="sans-serif">Every hint is welcome<br>
<br>
Jens</font><br>
<br>
<font size="2" face="sans-serif">-- <br>
Jens Witzel<br>
Zentrale Informatik<br>
Universität Zürich<br>
Stampfenbachstrasse 73<br>
CH-8006 Zürich<br>
<br>
mail: jens.witzel@uzh.ch<br>
phone: +41 44 63 56777<br>
<a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.zi.uzh.ch%2F&data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C7cca04139b78406f943e08d976baabf8%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637671366381259050%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=MSnExyXLGhcNOfBaMKiwCz1qYBc54oF%2BGTQmggUdjvM%3D&reserved=0" originalSrc="http://www.zi.uzh.ch/" shash="vyERW/ys97+RzO+ytLV3cqK/EMiYt6sfPCqsU1yqd8A/+nBf4+xHK5jXXRswWE8mOiey8qC/X22TuvJ1GytMMzhPx/4C1dR1kVs68KO+pTsVU+9avQhV/UYNHbclMYEtMn6gi8Y+0cafqfKkioRZxD8uCnfP4eLxcrd2e9svhiU=" originalsrc="http://www.zi.uzh.ch/" shash="YjQlTNo3uIWafyCaCq4oUFqvec6DDNFjh2PZZ1uG6yxdhFLRSZ7yRsJlcCm9ADIP2QC4fFHNiQqYPkhUqT/dSj5MPRtxxarjHU7+5u3Zd57bnt1ZNgrqtpctvPwYxL8aY47CHoKGp997bdhBrVIbtRlkprwYZsTjzgwPq3RDTg0=">http://www.zi.uzh.ch</a></font></p>
</div>
</div>
</div>
</body>
</html>