Feature preview

Feature Introduction

AnQiCMS content security settings: sensitive word filtering and anti-crawling

Content security has two aspects: internally preventing the release of违规 information, and externally preventing the bulk collection of original content. AnQiCMS provides sensitive word filtering and keyword replacement, content review process, and built-in anti-collection interference codes in the background;配合 JWT authentication and defense against SQL injection and XSS, forming a complete chain from pre-publication to being crawled. This article provides the configuration sequence and common mistakes.

Content security Anti-crawling

Feature Introduction

AnQiCMS protects content in two layers: before publication, use sensitive word filtering and content review to block illegal information, and after publication, use anti-crawling interference codes to increase the cost of bulk transfer. The former ensures that 'your site will not publish inappropriate content,' and the latter ensures that 'others cannot take away the complete usable original text.'

How to configure sensitive word filtering

AnQiCMS's content security settings include sensitive word filtering and keyword replacement. It is recommended to divide the processing actions into three levels during configuration:

  • Block level: If a match is found, it is not allowed to be saved, suitable for expressions explicitly prohibited by laws and regulations;
  • Replace level: After a match is found, it is replaced according to the rules with compliant writing, suitable for common variants of violations;
  • Review level: After a match is found, it is transferred to manual confirmation, suitable for industry words that are semantically sensitive and difficult for machines to judge.

The dictionary should be maintained according to the business scenario. The direct application of a general large dictionary results in the injury of a large number of normal contents. After going online, the expressions that were mistakenly blocked are recovered from the audit log, and the dictionary is reduced regularly.

When processing historical content in batches, first use site-wide replacement or batch review to confirm the scope of impact, then proceed by category to avoid a single change covering all articles.

Content review process design

AnQiCMS provides a content review mechanism. When multiple editors collaborate, it is recommended to fix the process into three stages: contributor submission, proofreading to confirm compliance and facts, and administrator release. The document status is divided into draft, pending release, and formal document along this chain, and deleted documents enter the recycling bin instead of disappearing physically, and can be restored if deleted by mistake.

The review process should leave traces: who made what changes, and why was it approved. When there are complaints or when self-inspection is needed, this record is more reliable than after-the-fact recollection.

The principle of anti-crawling interference code

When content is publicly accessible, it is impossible to prevent others from reading the page. The role of interference code is to turn 'take and use' into 'take and clean'. AnQiCMS built-in anti-crawling interference code is used to protect the content from being bulk collected: in the normal rendering page given to readers, interference content presented to crawlers as part of the text is inserted according to the strategy, and the text collected by the collection end will mix with irrelevant segments, which will obviously affect the quality if used directly.

Three experiences to use:

  1. First, turn on the test column to confirm that the front-end display and copy experience are not affected;
  2. Retain the original proof chain, such as the first release time, author signature, and the accessible address of the original text inside the site;
  3. The interference code is not copyright protection, and still needs to go through the complaint and legal channels when it is moved.

Do not ignore the defense line of the system layer

Content security is not equal to site security. AnQiCMS is developed based on GoLang, the background interface uses JWT authentication, the system is built-in to prevent SQL injection and XSS attacks, and the sensitive word and content review are based on the premise that 'the background has not been accessed.' Any breach in the three may lead to违规 content bypassing the review and appearing directly on the page.

It is recommended to enable reCAPTCHA verification code on form pages (留言, contact, registration) to prevent robots from submitting spam content in bulk.

Common questions

If you have connected a third-party AI or collection source, do you still need sensitive word filtering?Yes. The content from external sources should also go through filtering and review when entering the publishing pipeline, otherwise it is equivalent to transferring the compliance responsibility to others.

Does the content collection function conflict with anti-collection?There is no conflict. The former is that you obtain authorized content according to the rules, and the latter is to prevent others from copying your original text in bulk without authorization.

Will the interference code affect SEO?The design does not change the semantic meaning for readers, and if any abnormal content is found, the site can be temporarily closed and the strategy scope checked.

Can the review process be simplified?The small team can merge two positions, but at least one person who is not the writer must review before publication.

Related functions

Preview

How does AnQiCMS multi-site management support multi-brand operations?

Group operations often require the simultaneous maintenance of the main brand, sub-brands, and event sites. AnQiCMS supports the management of multiple independent sites within a single system, where each site can be independently configured for domain names, templates, and content structures; with multi-language site switching and full-page HTML translation, it can cover overseas brands and divide management permissions of different sites according to user groups, reducing the maintenance costs of multi-brand operations.

Preview

Should the uploaded files and database be backed up together?

The backup range should be determined according to 'any missing data during recovery counts as a failure': only backing up the database will result in the loss of uploaded images and attachments, and only backing up files will result in the loss of article structure, categories, and user data. AnQiCMS supports backing up data including static files together, combining the two types of content into a single operation. The availability of the backup should be determined by recovery drills, not by file size; the backup is a site-wide operation, and permissions should be controlled according to controlled actions.

Preview

How can an AI writing assistant improve content creation efficiency?

Content teams often hit a bottleneck in tasks outside of writing: coming up with titles, tags, finding images, and writing summaries. AnQiCMS has been providing AI writing capabilities since April 2023, automatically generating tags, images, and title keyword descriptions (TDK) when creating articles, and has AI Chat and AI skills to handle bulk operations and checks. This article outlines the methods for integrating AI into the content process and the key points for manual review.