Registration Floodcheck

[filburt1]

This hack will automatically shut down the registration system and e-mail you if it detects that a bot is flood registering. The number of registrations per minute that the system will consider as flooding can be changed from the admin CP.

This hack was designed for 2.3.0 but will intelligently decide between using vbmail() (2.3.0) or mail() (<2.3.0) so it should work with older versions as well.

[filburt1]

Admin CP options:

[filburt1]

What a user sees after flooding:

[Boofo]

Good idea. Keep 'em coming. ;)

[filburt1]

Side notes:
1. My installation script is so cool, only takes me seconds to edit it and it will work for other hacks
2. WDF's standarderror is the coolest thing ever :D

[Boofo]

Does this check for registrations from the same user or system-wide? If you have a busy board and a bunch of people try to register at the same time, what will happen? Would it be better to have the option allow so many minutes between registration? Sorry, if I sound confused here, but I am. It must be that hellacious standarderror of yours. ;)

[filburt1]

System-wide (it compares the joindates from the user table). It's extremely unlikely though that you're get a registration every 12 seconds which is what the default setting is unless you get slashdotted in which case your site would probably be mindnumbingly slow.

[Boofo]

Ok, I see. What would be a good number to set it at? The default or would 1 be better?

And we replace all instances of the code for the reg error? I had 4 of them.

[filburt1]

1 would mean only one registration per minute. Whatever floats your boat.

[filburt1]

Today at 09:47 PM Boofo said this in Post #8 (https://vborg.vbsupport.ru/showthread.php?postid=370330#post370330)
And we replace all instances of the code for the reg error? I had 4 of them.

Yes. Good eye, editing the instructions, although there are only two occurances in my otherwise unhacked 2.3.0.

[Boofo]

I have PPN's check user name upon registration hack (or whatever it's officially called) installed. That's where the other 2 came from. So the default 5 would probably be the best way to go then, right? What do you have yours set at?

[filburt1]

I haven't installed hacks on WDF and won't until 2.3.0 final comes out. Even HelperBot isn't back yet because we got killed when I upgraded from 2.2.9 to 2.3.0 RC1 with the whole porn spammer incident.

[Boofo]

I must have missed hearing about that. Sorry to hear it.

Ok, I'll leave it at 5 for now and see how that goes. Thanks for the hack. ;)

[filburt1]

Today at 10:13 PM Boofo said this in Post #13 (https://vborg.vbsupport.ru/showthread.php?postid=370344#post370344)
I must have missed hearing about that. Sorry to hear it.

Ok, I'll leave it at 5 for now and see how that goes. Thanks for the hack. ;)


My board never got hit, but 2.2.9 had a hole which allowed the bot to operate so I preemptively upgraded.

[Boofo]

You wouldn't have an idea of where the hole was or how to fix it, would you, by chance?

[filburt1]

Somewhere in register.php where the e-mail address wasn't trimmed.

[Boofo]

I think that was the one line fix that Logician came up with, IIRR. I did that one a while back. Thanks!

[sabret00the]

very awesome, should help me with fools who just flood the registrations process for nothing

[Giorgioggwt]

Tnx installed.
I had a very simpatic banned member that registered 200 times nicks like 0903904 03940343 0394 4 ecc, now, with this hack, is quite ;)