Opened 17 years ago

Closed 17 years ago

Last modified 15 years ago

#216 closed Defect (fixed)

Implement private messaging limits

Reported by: Rytis Owned by: Rytis
Priority: Major Milestone: Undetermined
Component: Web - Private Messages Version:
Keywords: pm spam Cc:

Description (last modified by Nicolas)

Suspend PM sending if the user has sent more than a certain number of PMs in the set amount of time.

The plan is to limit:

  • 2 messages per minute
  • 5 messages per 10 minutes
  • 15 messages per hour
  • 50 messages per day

Change History (11)

comment:1 Changed 17 years ago by Nicolas

Description: modified (diff)

Fixed bug summary formatting.

comment:2 Changed 17 years ago by Nicolas

Component: Server - Web - ForumsServer - Web - Private Messages
Keywords: pm added; PM removed

comment:3 Changed 17 years ago by anonymous

Sounds like a good idea.

How about space/size limits as well (if not already implemented), to prevent people writing excessive junk into the database?

comment:4 in reply to:  3 Changed 17 years ago by MikeMarsUK

Replying to anonymous:

Also allow mods/admin to bypass limits or have larger limit

comment:5 Changed 17 years ago by Saenger

Is it possible to disable the feature for known spammers at all? Is it possible to disable the feature for oneself in total?

comment:6 in reply to:  5 Changed 17 years ago by anonymous

Replying to Saenger:

Is it possible to disable the feature for known spammers at all?

Yes, by two different mechanisms: banned members can't post, and secondly you can add them to your 'ignore' list if they haven't been banned.

Is it possible to disable the feature for oneself in total?

In practical terms, yes, just ignore the bit saying 'You have 3,142 unread messages' :-)

comment:7 Changed 17 years ago by Saenger

@anonymous: I just pmed myself though I'm banned @Seti. I have not yet tried to ignore someone and let him/her send me a pm

The email notification will still be send, or I have to disable the wanted newsletters by the project team as well. No good implementation.

comment:8 in reply to:  7 Changed 17 years ago by Rytis

Replying to Saenger:

@anonymous: I just pmed myself though I'm banned @Seti. I have not yet tried to ignore someone and let him/her send me a pm

The email notification will still be send, or I have to disable the wanted newsletters by the project team as well. No good implementation.

SETI isn't using latest version of PM code yet. The latest version has separate settings for email notifications, and banned users can't send PMs.

comment:9 Changed 17 years ago by MikeMarsUK

Thinking about this one a bit further:

50 limit per day seems high, perhaps it could be reduced (say, to 25 or 30).

Are minute, 10 minute, and hourly limits necessary or are they needless complexity?

It might be an idea to also introduce number and size limits on forum postings as well (i.e., perhaps 50 forum postings / day). Higher limit for mods + admin.

A variation would be to allow different limits based on RAC / total credit ... i.e.,

RAC 0- 9 = limit 20 posts per day, 15 PMs per day RAC 10- 49 = limit 30 posts per day, 20 PMs per day RAC 50-249 = limit 40 posts per day, 25 PMs per day RAC 250 + = limit 50 posts per day, 30 PMs per day Mod/admin = limit 100 posts per day, 50 PMs per day

comment:10 Changed 17 years ago by Saenger

As it's possible to include many recipients in the "To" field, how is this counted, 1 pm = 1 letter in the inbox of any recipient or 1 pm = 1 letter in the outbox of any sender?

In case of the second, spam won't stop. Why is it at all possible to send a 'personal' message o lot's of recipients?

comment:11 Changed 17 years ago by Rytis

Resolution: fixed
Status: newclosed

(In [12937]) Implement private message limits (fix #216).

Note: See TracTickets for help on using tickets.