I took a look at the data we are sending to Akismet, a WordPress plugin for comment spam protection, for each comment submitted on your blog, if you use this plugin for comment spam prevention.我一看数据我们发送给akismet , wordpress插件为垃圾评论的保护,为每个评论提交的关于您的博客,如果您使用此插件为垃圾评论的预防。 I have recently最近我曾 started using Akismet开始使用akismet , a WordPress plugin from WordPress author , wordpress插件从作者的WordPress Matt Mullenweg马特mullenweg . I have to say I was surprised at the copious amount of data, some sensitive, being sent to Matt’s server for handling every single comment.我必须说我很惊讶于,再用大量的数据,一些敏感的,被派往马特的服务器处理每一个单一的评论。

Tons of useless (for spam protection) information is being sent for every comment, most of which rarely, if ever, changes on a server.吨的无用(垃圾邮件防护)的资料,正在发送的每个评论,其中大部分很少,如果以往的变化,在服务器上。

Here are the data that was sent to Akismet server for a single test comment on my blog.这里的数据被送往akismet服务器为一个单一的测试发表评论我的博客。 I have commented on them inline.我对他们的评论,内插。

comment_post_ID=1128 // Why does he need this? comment_post_id = 1128 / /为什么他是否需要这个?
comment_author=Angsuman+Chakraborty comment_author =由Angsuman +查敏
comment_author_email=angsuman%40taragana.com comment_author_email =由Angsuman % 40taragana.com
comment_author_url=http%3A%2F%2Fblog.taragana.com%2F comment_author_url =的HTTP %第3 A % 2楼% 2fblog.taragana.com % 2楼
comment_content=[Actual comment] comment_content = [实际评论]
comment_type= comment_type =
user_ID=1 // Why does he need this? user_id = 1 / /为什么他是否需要这个?
user_ip=59.93.245.60 user_ip = 59.93.245.60
user_agent=[Truncated] user_agent = [截断]
referrer=[Truncated - Post url] 引荐= [截断-邮政网址]
blog=http%3A%2F%2Fblog.taragana.com 博客=的HTTP %第3 A % 2楼% 2fblog.taragana.com
CONTENT_LENGTH=98 content_length = 98

// Isn’t it obvious? / /是不是很明显吗? Why send it?为什么它传送? Does it ever change?难道以往任何时候都改变?
CONTENT_TYPE=application%2Fx-www-form-urlencoded内容类型=应用% 2fx - WWW的形式- urlencoded

// What is he doing with it? / /什么是他做的与它呢? This information is useless for spam protection.此信息是无用的垃圾邮件防护。
DOCUMENT_ROOT=[File system path] DOCUMENT_ROOT在= [文件系统路径]

// Why does he need this? / /为什么他是否需要这个? Yet another useless junk.又一无用的垃圾。
HTTP_ACCEPT=[Truncated] http_accept = [截断]

// Why does he need this? / /为什么他是否需要这个?
HTTP_ACCEPT_CHARSET=[Truncated] http_accept_charset = [截断]
HTTP_ACCEPT_LANGUAGE=en-us%2Cen%3Bq%3D0.5 http_accept_language = -我们% 2cen % 3bq % 3d0.5

// Why does he need this? / /为什么他是否需要这个?
HTTP_CONNECTION=keep-alive http_connection =保持活着
HTTP_HOST=blog.taragana.com http_host = blog.taragana.com

// Why does he need this? / /为什么他是否需要这个?
HTTP_KEEP_ALIVE=300 http_keep_alive = 300
HTTP_REFERER=[Truncated] http_referer = [截断]
HTTP_USER_AGENT=[Truncated] http_user_agent = [截断]

// Why does he have to have my PATH information? / /为什么他是否有有我的路径信息呢?
PATH=[PATH environment variable]路径= [ PATH环境变量]
REMOTE_ADDR=59.93.245.60 remote_addr = 59.93.245.60
REMOTE_PORT=1567 remote_port = 1567

// How many times does it change on a server? / /多少次,是否改变在服务器上呢? Why does he need it?为什么他是否需要它?
// It contains file system information / /它包含文件系统信息
SCRIPT_FILENAME=[Truncated] script_filename = [截断]

// How many times does it change on a server? / /多少次,是否改变在服务器上呢?
SERVER_ADDR=69.36.187.98 server_addr = 69.36.187.98

// How many times does it change on a server? / /多少次,是否改变在服务器上呢? Why does he need it?为什么他是否需要它?
SERVER_ADMIN=Postmaster%40taragana.com server_admin =邮政% 40taragana.com
SERVER_NAME=blog.taragana.com服务器= blog.taragana.com

// How many times does it change on a server? / /多少次,是否改变在服务器上呢? What does he need it for?是什么,他是否需要它呢?
SERVER_PORT=80 server_port = 80

// How many times does it change on a server? / /多少次,是否改变在服务器上呢? What does he need it for?是什么,他是否需要它呢?
SERVER_SIGNATURE=[Truncated] server_signature = [截断]
// How many times does it change on a server? / /多少次,是否改变在服务器上呢? What does he need it for?是什么,他是否需要它呢?
SERVER_SOFTWARE=[Truncated] server_software = [截断]

// How many times does it change on a server? / /多少次,是否改变在服务器上呢? What does he need it for?是什么,他是否需要它呢?
GATEWAY_INTERFACE=CGI%2F1.1 gateway_interface =的CGI % 2f1.1

// How many times does it change on a server? / /多少次,是否改变在服务器上呢? What does he need it for?是什么,他是否需要它呢?
SERVER_PROTOCOL=HTTP%2F1.1 server_protocol =的HTTP % 2f1.1

// How many times does it change on a server? / /多少次,是否改变在服务器上呢? What does he need it for?是什么,他是否需要它呢?
// This is always POST! / /这是始终邮政!
REQUEST_METHOD=POST request_method =后

// How many times does it change on a server? / /多少次,是否改变在服务器上呢? What does he need it for?是什么,他是否需要它呢?
QUERY_STRING= query_string =

// How many times does it change on a server? / /多少次,是否改变在服务器上呢? What does he need it for?是什么,他是否需要它呢?
REQUEST_URI=%2Fwp-comments-post.php request_uri = % 2fwp -评论- post.php

// How many times does it change on a server? / /多少次,是否改变在服务器上呢? What does he need it for?是什么,他是否需要它呢?
SCRIPT_NAME=%2Fwp-comments-post.php script_name = % 2fwp -评论- post.php

// Why does he need to know where I installed WordPress on my server? / /为何他要知道我安装的WordPress在我的伺服器上?
PATH_TRANSLATED=[Truncated] path_translated = [截断]

// How many times does it change on a server? / /多少次,是否改变在服务器上呢? What does he need it for?是什么,他是否需要它呢?
PHP_SELF=%2Fwp-comments-post.php php_self = % 2fwp -评论- post.php

// This is inane / /这是inane
argv=Array argv =阵列

// This is inane / /这是inane
argc=0 argc = 0

This huge amount of data (considering it is send for every comment) can consume a not-so-insignificant portion of your bandwidth quota, if you get lots of spam.这个庞大的数据量(考虑到这是发送的每个评论)可以消耗没有那么微不足道的一部分,请在带宽配额,如果您收到大量的垃圾邮件。

It is clear Matt & Co. haven’t taken the effort to filter out the unnecessary information, even though they can easily do so.很显然,马特公司没有采取的努力,过滤掉不必要的信息,即使他们可以轻松地这样做。

Some of these information may also be used by hackers (bad ones).一些这些资料也可能被黑客(坏人) 。 Remember all information is submitted over the internet in cleartext.记住所有的资料是提交了在互联网上明文。

Kind of makes you feel warm and fuzzy, doesn’t it?种让你感到温暖和模糊,不是吗?