Strange posts appearing

[Dene2]

Hi guys we have some cyrilic posts and other spam posts coming up in last few days even tho guests are now allowed to post, I am using the lates verson of vb but they still get through, any ideas how to stop this ?

[janaf]

What security against this do you have in place?

Use Q and A if you do not already have it enabled:

- ACP - Settings - Options - Human verification Options
then
- ACP - Settings - Human Verification Manager

I'd not recommend reCaptcha as there are well known (by spammers) ways to get through it.

You can also use promotion:
- New members only have write access to one forum, hidden from others
- If they behave, then you can promote them to a group with full rights
Admins / moderators can monitor the hidden forum and ban spammers before they do any harm. The promotion can be done automatically.

But first, what have you already done?

[Dene2]

I have post and threads hidden from guests , guest cant post, Q& A verification in place and still they get through and have posted as a guest so something isnt right somewhere

[Videx]

You didn't even tell us what version of vb you're running. Update to the very latest first - VB doesn't release these security updates for their own amusement.

[janaf]

There is the possibility they are manually / properly registerd and no technical system can prevent that, if regestering is allowed. Then there is not much to do then but to ban them when they start postig .

Or if it is a forum with limited number of new members and a specific community, then have everyone introduce themselves writing some specifics related to your forum, in a hidden forum that only admins / moderators see. Then promote or ban them depending on how they write their introduction. Most manual spammers will not bother with this step.

[Dene2]

I said the Latest version available in original post which I am assuming is the : 4.1.3 which I have, I have all forums set so that guests cannot post!! I also have the question and answer for registration, so it has nothing to do with members registering and then posts as these ppl are posting as a GUEST this is the issue and somehow they are getting in and doing it.

--------------- Added 1303819247 at 1303819247 ---------------

You didn't even tell us what version of vb you're running. Update to the very latest first - VB doesn't release these security updates for their own amusement.

Yes I did i said the latest version all upto date!

[WEBDosser]

how many others have access to admincp/modcp

[Dene2]

just myself and two guys who works for me both trusted and I have checked all permissions, the posts that appear are sometimes in cyrillic language or code or just basic gobledygook, and they are normally within a thread and non related to the actual thread title, its concerning in case they post links to virus or adult orientated sites and could be a new exploit, hope someone can help maybe even an admin or something??

[WEBDosser]

have you looked at the IP of the poster? try banning it.

[Videx]

Right, you said "latest version", but not which latest version. I just wanted to make sure you weren't running 4.02 and thinking that was the 'latest'.

I'd like to try posting as a Guest myself. I mean, can you post as a guest? In all forums?

[Dene2]

Right, you said "latest version", but not which latest version. I just wanted to make sure you weren't running 4.02 and thinking that was the 'latest'.

I'd like to try posting as a Guest myself. I mean, can you post as a guest? In all forums?

No problem mate, I havent tried posting as Guest yet sounds silly i know hadnt crossed my mind , but your more than welcome to give it ago aswell the site is www.easternanglers.co.uk, I will also be trying it out and let you know

--------------- Added 1303832913 at 1303832913 ---------------

have you looked at the IP of the poster? try banning it.

If they post again I will try that

--------------- Added 1303832963 at 1303832963 ---------------

ok have now tried and cannot post as guest I did find one orum that I could and quickly changed permissions for that one but all others I think are safe