vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 3.7 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=228)
-   -   Miscellaneous Hacks - Enhanced Image Captcha - Stop bots from signing up! (https://vborg.vbsupport.ru/showthread.php?t=181818)

guile09 01-10-2009 01:28 PM

Quote:

Originally Posted by cmd19872002 (Post 1651146)
Humm there is a huge flaw that has been in this since v1.

Ok, basicly the bot goes to the page, detects its this style of auth and instead of trying to guess the correct image, it just does them all. What i mean is... it loads this page /register.php?clicked=1 increasing the clicked number each time using the same cookies. Once it guesses the correct number, it can continue to register.

~Cmd

The above still seems to be an issue. You do not need to even look at the images. Just go to a forum running this mod and click on the first image you see. If you are wrong it will tell you to go back. Instead of going back, change where it says "/register.php?clicked=1" in the address bar to "/register.php?clicked=2". If 2 isn't the right image, enter 3 and so forth. Once you get to the number where the correct image is located, you are allowed to register. If you have a total of 8 images, it only takes 7 attempts max to get through.

It would be nice to combine this with image captcha so that each time you guess a wrong image, you have to re-enter a word in an image. That would really bullet-proof this mod.

steadicamop 01-10-2009 01:49 PM

Quote:

Originally Posted by guile09 (Post 1707275)
The above still seems to be an issue. You do not need to even look at the images. Just go to a forum running this mod and click on the first image you see. If you are wrong it will tell you to go back. Instead of going back, change where it says "/register.php?clicked=1" in the address bar to "/register.php?clicked=2". If 2 isn't the right image, enter 3 and so forth. Once you get to the number where the correct image is located, you are allowed to register. If you have a total of 8 images, it only takes 7 attempts max to get through.

It would be nice to combine this with image captcha so that each time you guess a wrong image, you have to re-enter a word in an image. That would really bullet-proof this mod.

I think no matter what system you come up with, some bot somewhere will defeat it, it's just finding ways of making it much harder, and admittedly, this does allow some in, as I've found, but it does slow their work. Maybe instead, turn the text into a graphic, fair enough which can still be read by a bot, but have the enter it in too -- then that way, it takes two processes to pass this part. I did think about trying to include the standard VB captcha as well ... but I've not had time to investigate how this would work.

kfiasche81 01-12-2009 10:15 AM

Italian pack

steadicamop 01-12-2009 03:29 PM

Thanks for adding the Italian Pack, I will put it with the releases at the top,

Jason

csoroner 01-12-2009 06:32 PM

Quote:

Originally Posted by steadicamop (Post 1702457)
Quick update on this .. I have just tested this on 3.8 RC1, seems to have no problems at all .... the demo should be back up and running now, I will try and change this over to 3.8 compatible now.

I like what I see but unfortunately I get this error when I installed on to the latest 3.8"

Quote:

Fatal error: Call to undefined function: session_start() in /home/XXXXXXXX/www/rippersplace.com/forum/register.php(204) : eval()'d code on line 3
Not good!

Any ideas!

Uninstalled untill reply....

saltedm8 01-27-2009 08:18 PM

great mod, but one of my new users had a problem

Quote:

Why have only IE and Firefox to show your Enhanced Image Captcha?

My install of Chrome and Safari did not show some
could you check this out please... just in case, my site is http://webprocafe.com

thank you

csoroner 01-28-2009 07:14 AM

steadicamop,
Could you please look into the issue I'm having. It was posted before and unanswered?

I really would like to get this to work.....

LaydeeVictoria 03-24-2009 11:17 AM

Steadicamop thanks for this! Easy to install!

abdulbasitsaeed 03-26-2009 02:54 AM

Thank you for the lovely add-on, Steadicamop. :cool:

Tree Guardian 04-23-2009 01:18 AM

Thank You - installed


All times are GMT. The time now is 08:04 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01122 seconds
  • Memory Usage 1,740KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (5)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete