# Spam protection from three day old account?
**URL:** https://meta.discourse.org/t/spam-protection-from-three-day-old-account/45409
**Category:** Support
**Created:** [6월 8, 2016, 2:10오전 UTC](https://meta.discourse.org/t/spam-protection-from-three-day-old-account/45409 "2016-06-08T02:10:38Z")
**Posts on this page:** 12
**Page:** 1
### Author:  [@peternlewis](https://meta.discourse.org/u/peternlewis)
#### Post date: [6월 8, 2016, 2:10오전 UTC](https://meta.discourse.org/t/spam-protection-from-three-day-old-account/45409/1 "2016-06-08T02:10:38Z")
So my site was just hit with a porn spammer account that posted ten new topics, all with content like:
```
```
The account was created three days ago, and then presumably left dormant to avoid the “max topics in first day”.
Might I suggest that flag actually be “max topics in first day that user posts any topic”? Same for the _max replies in first day_ flag.
Also, does anyone have any recommendations for settings that might have further limited this intrusion without negatively impacting real users (many of whom tend to be new users and light visitors, and thus not particularly trusted). 3 new topics in the first day you post any topic seems quite sufficient.
Thanks.
---
### Author:  [@sam](https://meta.discourse.org/u/sam)
#### Post date: [6월 8, 2016, 2:19오전 UTC](https://meta.discourse.org/t/spam-protection-from-three-day-old-account/45409/2 "2016-06-08T02:19:15Z")
I just saw a flood of them on a few of our sites as well, are you running akismet? Did it not catch it?
---
### Author:  [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [6월 8, 2016, 2:28오전 UTC](https://meta.discourse.org/t/spam-protection-from-three-day-old-account/45409/3 "2016-06-08T02:28:16Z")
We saw this as well, and no, they weren’t caught by akismet. Not sure when they created there account though, after the third post we blocked them while we investigated. 1 post was deleted by a moderator almost immediately, the other 2 posts were flagged and subsequently deleted. I then went in and deleted the user, also blocking email and IP.
---
### Author:  [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [6월 8, 2016, 2:56오전 UTC](https://meta.discourse.org/t/spam-protection-from-three-day-old-account/45409/4 "2016-06-08T02:56:54Z")
> [@peternlewis](#):
>
> Might I suggest that flag actually be “max topics in first day that user posts any topic”? Same for the max replies in first day flag
Yeah that would be better, can you add that to your list @neil? “first day” timer should start after the first topic / reply is posted. It is a strengthening of the first day user limits.
---
### Author:  [@peternlewis](https://meta.discourse.org/u/peternlewis)
#### Post date: [6월 8, 2016, 3:06오전 UTC](https://meta.discourse.org/t/spam-protection-from-three-day-old-account/45409/5 "2016-06-08T03:06:46Z")
I’m not running akismet whatever that is, no.
---
### Author:  [@peternlewis](https://meta.discourse.org/u/peternlewis)
#### Post date: [6월 8, 2016, 3:08오전 UTC](https://meta.discourse.org/t/spam-protection-from-three-day-old-account/45409/6 "2016-06-08T03:08:09Z")
> [@codinghorror](#):
>
> Yeah that would be better, can you add that to your list @neil? “first day” timer should start after the first topic / reply is posted. It is a strengthening of the first day user limits.
I’d suggest keeping independent start dates for each, that way they could not get clever and post a reply to some old topic that might go unnoticed before creating a bunch of new spam topics.
---
### Author:  [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [6월 8, 2016, 3:31오전 UTC](https://meta.discourse.org/t/spam-protection-from-three-day-old-account/45409/7 "2016-06-08T03:31:25Z")
Oh geez if you are not running the Akismet plugin you are cruisin’ for a bruisin’. _Strongly_ advise that you run it otherwise you are super vulnerable to human spammers, of which there are tons these days.
---
### Author:  [@claas](https://meta.discourse.org/u/claas)
#### Post date: [6월 9, 2016, 2:39오후 UTC](https://meta.discourse.org/t/spam-protection-from-three-day-old-account/45409/8 "2016-06-09T14:39:33Z")
PS: The plugin can be found here: [GitHub - discourse/discourse-akismet: give spam a whoopin · GitHub](https://github.com/discourse/discourse-akismet/)
---
### Author:  [@neil](https://meta.discourse.org/u/neil)
#### Post date: [6월 20, 2016, 10:26오후 UTC](https://meta.discourse.org/t/spam-protection-from-three-day-old-account/45409/9 "2016-06-20T22:26:28Z")
I made this change today, although the descriptions of `max_topics_in_first_day` and `max_replies_in_first_day` still need to be updated now that they’re a bit more complicated.
---
### Author:  [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [6월 20, 2016, 11:22오후 UTC](https://meta.discourse.org/t/spam-protection-from-three-day-old-account/45409/11 "2016-06-20T23:22:58Z")
OK I updated copy as follows, hopefully this keeps it clear:
`max_topics_in_first_day: "The maximum number of topics a user is allowed to create in the 24 hour period after creating their first post"`
`max_replies_in_first_day: "The maximum number of replies a user is allowed to create in the 24 hour period after creating their first post"`
---
### Author:  [@peternlewis](https://meta.discourse.org/u/peternlewis)
#### Post date: [6월 21, 2016, 1:21오전 UTC](https://meta.discourse.org/t/spam-protection-from-three-day-old-account/45409/12 "2016-06-21T01:21:01Z")
Does the number include the first post? If so, I would think the text should be “24 hour period starting when they create”, or briefer “24 hour period from creating” - after implies the first one would not be included.
---
### Author:  [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [4월 27, 2017, 7:21오전 UTC](https://meta.discourse.org/t/spam-protection-from-three-day-old-account/45409/13 "2017-04-27T07:21:00Z")