PDA

View Full Version : Blind Email Spammers


oldengine
10-25-2004, 01:50 PM
Is there a way to incorporate the board user's IP number within the blind email text that is sent to the recipient (a registered user) so as to get a quick report back from my users about the IP number of an email spammer?

I use this on my current WebBBS system and it works very well to allow me to place a spamming user's IP into the firewall. Yes, I know that I can ban the VB offender's account and email address, but in this day of spam, putting their IP (or their ISP's IP range) into my firewall is the ultimate cure. (They cannot simply sign up again with another throwaway email address.)

I note that this information already shows in a received email when using the "Contact Us" system manager's contact link at the bottom of each VB web site page:

Referring Page: h t t p : / / etc.
IP Address: xx.xxx.xxx.xxx
User Name: Unregistered
User ID: 0

The programming for this stuff must already be in sendmessage.php but when using the mailmember link from a user's profile, none of the above link, IP or user name information comes through to the recipient. It should!

oldengine
03-01-2005, 01:13 AM
Finally familiar enough with vBulletin to chew into this one...

Add colored text to sendmessage.php

// ############################### start mail member permissions ###############################
if ($_REQUEST['do'] == 'mailmember' OR $_POST['do'] == 'domailmember')
{
globalize($_REQUEST, array('userid' => INT));

//don't let people awaiting email confirmation use it either as their email may be fake
if (!$bbuserinfo['userid'] OR $bbuserinfo['usergroupid'] == 3 OR $bbuserinfo['usergroupid'] == 4)
{
print_no_permission();
}
// added to put ip numbers in vbphrase usermessage
$ip = IPADDRESS;
// end mod
// check that the requested user actually exists
if (!$destuserinfo = $DB_site->query_first("SELECT userid, username, usergroupid, email, (options & $_USEROPTIONS[showemail]) AS showemail, languageid FROM " . TABLE_PREFIX . "user WHERE userid = $userid"))
{
$idname = $vbphrase['user'];
eval(print_standard_error('error_invalidid'));
}
else if ($destuserinfo['usergroupid'] == 3 OR $destuserinfo['usergroupid'] == 4)
{ // user hasn't confirmed email address yet or is COPPA
eval(print_standard_error('error_usernoemail'));
}

}

// ############################### start mail member ###############################

Next, edit phrase usermessage and add colored text:

This is a message from $bbuserinfo[username] at $vboptions ( $vboptions[bburl]/$vboptions[forumhome].php ). The $vboptions[bbtitle] owners cannot accept any responsibility for the contents of the email. [B]Use these numbers to report abuse: $ip To email $bbuserinfo[username], you can use this online form: $vboptions[bburl]/sendmessage.php?do=mailmember&userid=$bbuserinfo[userid] OR, by email: mailto:$bbuserinfo[email] This is the message: $message


Moderator: Yes, I answered my own request. Please move if appropriate.