PDA

View Full Version : Miscellaneous Hacks - Contact Us Visual Authentication - prevent Spam Bots from sending messages!


steadicamop
01-26-2007, 10:00 PM
Title : Contact Us Visual Authentication

Version : 1.0

Coder : Andy Calderbank & Jason Williams

Purpose : Make your Contact Us page more secure using an image based verification system.

Why : From my other hack (https://vborg.vbsupport.ru/showthread.php?t=132482) it was requested to make this for the Contact Us page - and this is the same hack to secure the Contact Us page from Spam Bots sending messages.

How : This extra feature uses images which are harder for a spam program/bot to interpret than text characters. The user has a choice of 4 randomly displayed images, and the answer is given below. The user must click on that image to proceed, if the incorrect image is selected an error message is shown. The images are randomly shown (from however many are in the directory - you can have as many as you want, just has to be more that 4!) and are automatically created from the images/verification/ directory - all on the fly. Sample images are included with this release, but you can use your own - I recommend using 100 x 100 pixels, in .jpg format and naming the image with a meaningful title (ie A House.jpg) - the extension is stripped so only the filename itself is shown.

To further enhance security, the images are passed through a script which means that none of the images on the screen have file names - and cannot be associated to the question by title alone.

I have been testing this on my forum and have found it to be effective - I cannot guarantee that this will stop all spamming, but this relies more on human input than a computer "reading" the image.

Important : This has been tested on 3.6.2 - I cannot guarantee it will work on anything above, please test with caution - and as always BACKUP FIRST! This will not work on anything below 3.6.0.

Installation :

Please note - if you already have my other hack (https://vborg.vbsupport.ru/showthread.php?t=132482) installed you do not need to upload the images - just go to step 2.

1. Upload the verification/ directory to your images/ folder - make sure .htaccess and show.php are present - if you have problems with the .htaccess file, this isn't vital and will work without.
2. Import Product - product-secure_contact_us.xml

Requirements : GD Libraries installed

File uploads : 39 (including images)
Files to Import : 1
New Templates : 1
New Phrases : 5
Uses Hooks : 1
New Queries : 0

History :
v1.0 - Original release

Done - if you like please click install!

Don't forget you don't have to use the provided images - you can customise these to any you wish - I've used ones that are hopefully universal and everyone will recognise.

steadicamop
01-27-2007, 05:24 PM
Reserved .... I'm only human!!

TheFrienzNet
01-27-2007, 06:05 PM
Thanks, i've been getting a lot of these e-mails in my admin webmail.

Qwest
01-27-2007, 08:01 PM
Isn't this already a default feature in 3.6.4?

Martin-TMGRS
01-27-2007, 08:53 PM
Cool have been looking for something like this ;) to stop them spam emails. If it is a default feature in 3.6.4 where is it?

Eq4bits
01-27-2007, 09:02 PM
Finally! An answer to all the viagra, movies, porn, etc 'contact us' emails I get... must be at least 50 a day for me... now if I could just ban all the IP addresses as well so they don't register.... even with email verification and image verification they still manage it and we get about 4 or more of those a day. I finally had to put all registrations on moderated until admin approves. ugh.
clicks install (as soon as my backup finishes downloading....)

Qwest
01-28-2007, 02:53 AM
If it is a default feature in 3.6.4 where is it?
vBulletin Options > Site Name / URL / Contact Details > Allow Unregistered Users to use 'Contact Us'

You can set it to Yes, No, or Yes, but Verify Image

steadicamop
01-28-2007, 07:11 AM
vBulletin Options > Site Name / URL / Contact Details > Allow Unregistered Users to use 'Contact Us'

You can set it to Yes, No, or Yes, but Verify Image

But as has been proved with the registration, bots can easily bypass the Captcha system - and I thought it might be handy to port this idea over to the Contact Us page.

Hornstar
01-28-2007, 09:45 AM
This is really good if the Captcha system is not working well on your forum, but for most it does do a pretty good job already. Thanks for doing it for the contact page none the less.

steadicamop
01-28-2007, 03:27 PM
I did this based on one request, and after looking into it, thought it was worthwhile - it was a fairly simple change to make this compatible with the Contact Us page, so this is why I have released this - I don't doubt that enabling the Captcha system does prevent/slow down Bots, but this is just an extra line of defence.

Eagle Creek
02-16-2007, 01:49 AM
But as has been proved with the registration, bots can easily bypass the Captcha system - and I thought it might be handy to port this idea over to the Contact Us page.

What about https://vborg.vbsupport.ru/showthread.php?t=124828&goto=newpost ?

ryancooper
03-06-2007, 12:35 AM
cool this will work great for us! thanks

Nathan2006
04-19-2007, 12:40 PM
Thank you steadicamop

Install ;)

Eq4bits
04-19-2007, 01:00 PM
I have had this installed since January and it works great! The vB 'builtin' just wasn't doing the trick, but, since installing this hack I haven't had *any* spambots 'contacting us' :D
Kudu's steadicamop! :D

Chachacha
05-11-2007, 12:18 PM
Installed. Great add-on. Thanks.

Mrdby
05-12-2007, 12:38 PM
yeah intalled works great for me!!!

Mrdby
05-12-2007, 12:40 PM
I do notice..that if i click contact us again i don;t have to verify the image...is there anyway to set...regardless if i click contact us 5-10 times it will give me the image page and have me select the image each time?

Mrdby
05-18-2007, 08:04 PM
gave me an error message in my plug in system.

Contact Us Visual Authentication 1.00 Error An image based verification system to prevent bots using the Contact Us

steadicamop
05-18-2007, 08:37 PM
Any more details than that? A little hard to find out why if it doesn't report what the error is.

Jason

BushyTea
05-23-2007, 03:49 PM
Intalled work perfectly on my 3.6.5 version but the spam bots are still getting through it so not sure what to do now.

Doesn't harm the members just an annoyance to me.

Mike

SnapOff Racing
05-25-2007, 09:11 AM
yea boy! you are god! I've been waiting for a year for this!!!

josh_B
06-05-2007, 04:02 PM
I installed this but the images do not show. htaccess and show.php are there. All permissions are set correctly on the files. v3.6.4

GlitterKill
06-08-2007, 03:20 PM
THANK YOU! This should help curtail the mass amounts of crap I get. :)

steadicamop
06-08-2007, 08:21 PM
I installed this but the images do not show. htaccess and show.php are there. All permissions are set correctly on the files. v3.6.4

Is your forum in a sub-directory from the root? That is something I need to clean up about forum root locations - you can make some simple changes to reflect this if necessary.

lazserus
06-12-2007, 01:43 AM
I installed it and it only works under a single usergroup. I have its counter installed, the one for registration. The directions say just import the xml file if that one is installed, which is all I did. If I sign in under my own admin account it works, but no users aside from me hit the verification page before the contact form. Should I just reinstall?

Magnumutz
06-12-2007, 02:33 AM
Thanks man, i really needed this... my imbox won't get spammed anymore :D
*Clicks Install8

TheBlackPoet
06-12-2007, 02:36 AM
cool... i've had your original hack for registration... this makes the 1st hack complete...

thanks!

InTeNsE-HuMoR
06-17-2007, 08:57 PM
I installed it and it only works under a single usergroup. I have its counter installed, the one for registration. The directions say just import the xml file if that one is installed, which is all I did. If I sign in under my own admin account it works, but no users aside from me hit the verification page before the contact form. Should I just reinstall?

I have the exact same problem.

blastup
07-04-2007, 06:22 AM
yeah ++++en thank god..

steadicamop
09-29-2007, 04:33 PM
I installed it and it only works under a single usergroup. I have its counter installed, the one for registration. The directions say just import the xml file if that one is installed, which is all I did. If I sign in under my own admin account it works, but no users aside from me hit the verification page before the contact form. Should I just reinstall?

My apologies for not getting on top of this one - which usergroup is affected? It wasn't designed with any usergroup intended, just as a way of slowing spammers down. Let me know which usergroup and I will look into it...

Cheers

Jason

Alibass
09-29-2007, 06:19 PM
@steadicamop

I have installed this hack and your enhanced captcha image verification hack also on my 3.6.8 board and both are working fine. Thanks for the great mods! :)

I have also made the change to display from 4 to 6 images. That works great too, however I tried the same change "$amount_of_images_to_show = 6;" to Contact Us Visual Authentication product and it still displays the 4 images. Is there another change that needs to be made to get this mod to display 6 images in contact us?

Alibass
09-29-2007, 08:03 PM
@steadicamop

That's okay mate, I found what I needed to edit and I got it working with 6 images.

Thanks again! :)

Evolution06
10-04-2007, 07:18 PM
wow! this mod is a life saver I was getting all sorts of porn and spam contact emails not anymore! lol *clicks install*

athlon64bit
10-15-2007, 09:47 AM
I couldn't get it working on 3.6.8

jags2ooo
06-09-2008, 11:52 AM
I couldn't get it working on 3.6.8

Same doesn't seem to work o n 3.6.8 oes anyone know of another anti spam contact form?

bulbasnore
07-01-2011, 05:50 AM
Dunno how well these plug-ins will work for us at stopping comment/account spam, but the implementation if amazing. Our spammers are faced with 697 choices. Gotta catch 'em all, ftw.