vBIndex shoutbox spam problem

[Club3G]

I run VBIndex at http://www.club3g.com, and am having a small issue with trolls filling up my shoutbox with spam and profanity. Users need to be activated to post messages, but the shoutbox is available for unconfirmed/unvalidated users, and there's zero flood control on it.

Last night I had one guy shout over 100 times in a matter of minutes, so disabled the shoutbox altogether.

Is there something out there that can require _activation_ for shouts, as well as flood control?

Thanks much.

[AN-net]

activation of shouts would be redundant since so many are posted in a day but flood control is not

find this in you vbindex php file:

$DB_site->query(" ## INSERT NEW SHOUT ##
INSERT INTO ".TABLE_PREFIX."vbindex_shoutbox
(shoutid, userid, shout, dateline)
VALUES
(NULL, '$bbuserinfo[userid]', '".addslashes(convert_url_to_bbcode($_POST['shout']))."',
'".TIMENOW."')");


change that to:

$flood= $DB_site->query_first("SELECT dateline FROM ".TABLE_PREFIX."vbindex_shoutbox WHERE userid=".$bbuserinfo['userid']." ORDER BY dateline DESC");
if((TIMENOW - $flood['dateline'])<= XX)
{
eval(print_standard_error('vbi_shoutflood'));
}
else
{
$DB_site->query(" ## INSERT NEW SHOUT ##
INSERT INTO ".TABLE_PREFIX."vbindex_shoutbox
(shoutid, userid, shout, dateline)
VALUES
(NULL, '$bbuserinfo[userid]', '".addslashes(convert_url_to_bbcode($_POST['shout']))."',
'".TIMENOW."')");

$url = "$_SERVER[PHP_SELF]?$session[sessionurl]";
eval(print_standard_redirect('redirect_vbi_shoutad ded'));
}

replace XX with the number of seconds between each shout

you will also have to add a new phrase to front end error messages group in admincp and name it vbi_shoutflood.

In that phrase you can say such things as "You must wait longer before shouting again."

also this hasn't been tested;)

[Club3G]

Hmm, didn't seem to work. :( And as soon as I turned it on, the idiot spammed it full immediately. :mad:

Thank you though =)

[AN-net]

just tested it and it doesnt work, it doesnt even use the redirect which is coded in there, i searched for maybe another insert query but none exists so this is very odd....

[Club3G]

^ A fix for this would be just spiffy. :( Our users are missing it, and I can't turn the thing back on without a flood of profanity.

[Club3G]

Bump :(

[Nomadite]

Wow, this is an old thread...

I'm starting to have the same prob in my forum whereby unregistered users are posting crap and porn/spam links and profanity in the Shoutbox. Is there any way to stop them from being able to access the Shoutbox (v 3.5Gold) if they are not registered users?

[Dismounted]

You said yourself, this is an old thread.....Why don't you post in the shoutbox's release thread?