#47240 [NEW]: is_spam_ip() creates false positives

From: kiam at avpnet dot org Operating system: Mac OS X PHP version: Irrelevant PHP Bug Type: Website problem Bug description: is_spam_ip() creates false positives Description: ------------ The function used to check the IP of whom submit a note in the documentation pages can create false positives. This happens because: * one of the three DNSBL servers it uses is not anymore active (see http://dsbl.org/). * the code checks against three DNSBL servers, but it returns TRUE when a single server reported the IP to be in its list. This means that the code could also check against 1,000 DNSBL servers, but it would report the IP like suspicious if only a single server doesn't contain update data about that IP. Considering that most people has dynamic IPs, that is not a so remote possibility. -- Edit bug report at http://bugs.php.net/?id=47240&edit=1 -- Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=47240&r=trysnapshot52 Try a CVS snapshot (PHP 5.3): http://bugs.php.net/fix.php?id=47240&r=trysnapshot53 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=47240&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=47240&r=fixedcvs Fixed in CVS and need be documented: http://bugs.php.net/fix.php?id=47240&r=needdocs Fixed in release: http://bugs.php.net/fix.php?id=47240&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=47240&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=47240&r=needscript Try newer version: http://bugs.php.net/fix.php?id=47240&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=47240&r=support Expected behavior: http://bugs.php.net/fix.php?id=47240&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=47240&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=47240&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=47240&r=globals PHP 4 support discontinued: http://bugs.php.net/fix.php?id=47240&r=php4 Daylight Savings: http://bugs.php.net/fix.php?id=47240&r=dst IIS Stability: http://bugs.php.net/fix.php?id=47240&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=47240&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=47240&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=47240&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=47240&r=mysqlcfg