vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 3.8 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=235)
-   -   Miscellaneous Hacks - Enhanced Captcha Image Verification - stop bots from signing up!! (https://vborg.vbsupport.ru/showthread.php?t=132482)

EtaiWix 07-03-2010 08:57 AM

What's GD libraries? I'd like to install it, but I can't find it...

This sounds like a great hack for our forum.

dtommy79 07-03-2010 12:04 PM

GD libraries is installed on your webserver. Usually it's not your concern

Naan-Kadavul 07-10-2010 11:24 PM

Warning: dir(images/verification/) [function.dir]: failed to open dir: Result too large in [path]\register.php(204) : eval()'d code on line 6

Fatal error: Call to a member function read() on a non-object in C:\Inetpub\vhosts\MovieJockey.com\httpdocs\forum\r egister.php(204) : eval()'d code on line 7

I get this :(

thunderclap82 07-27-2010 07:28 PM

Any plans for a vB 4 release? Or does it already work with vB4?

Naan-Kadavul 08-11-2010 11:46 AM

Thanks for it, Going to install first n say the rest.

alehawk 08-11-2010 06:46 PM

I got this installed but bots are passing thru :(

flashfocus 08-19-2010 07:24 PM

This was working fine for us too, but since a few weeks, a lot of bots (or chinese?) have made it through ...

KLUNZ 08-27-2010 01:06 PM

don't work on 3.8.5

Merjawy 09-08-2010 10:37 AM

Quote:

Originally Posted by flashfocus (Post 2086504)
This was working fine for us too, but since a few weeks, a lot of bots (or chinese?) have made it through ...

I wouldn't use the default (images/file names) It's bound to get bots trained on it

I use different images and/or different file (pic) names. Let them keep training their bots for all I care.. I haven't had 1 single bot register since I installed this where I used to have lots every day



Thanks

XanderZone 09-11-2010 08:10 PM

I installed this today, and bots are still posting all over my forums.
I will try to upload some other pictures.

Although, if they programmed their bots well, comparing a piece of text with a filename isn't all that hard to bypass ;)

Areku 09-19-2010 01:24 PM

Quote:

Originally Posted by XanderZone (Post 2096871)
Although, if they programmed their bots well, comparing a piece of text with a filename isn't all that hard to bypass ;)


Well, that should not be happening:

Quote:

the images are passed through a script which means that none of the images on the screen have file names - and cannot be associated to the question by title alone.
It's actually easier than that for bots.

Problem is actually that with default installation bots just revisit the site UP TO 4 times and they'll come in, just adding the ?parameter=correctanswer to the url...

Just increase the number of images and replace default images/names.



SO the more images you add, the less likely they'll pass thru. It just depends on how many retries the bot has been set to.

voter 01-13-2011 07:45 PM

1 Attachment(s)
Nice hack.
Thank you.
Here are some more "intellectual" pictures that may be will help also real users to learn something when already registering to your forum :cool:
Attachment 125579
I think due to actual hacked reCAPTCHA problem this mode must get a MoD of The Moth status.

Big Kahuna 01-16-2011 08:52 PM

Well -- that's didn't stop the bots

voter 01-18-2011 01:27 PM

Quote:

Originally Posted by Big Kahuna (Post 2150213)
Well -- that's didn't stop the bots

Do you mean it didn't hinder Bots to register into your forum?
I could say that after installing this, new Bot/XRumer registrations in our forum are 0 now. To be honest I increased the complexity to 6 images.

Or if you need to prevent Bots from posting when using already registered, e-mail verified users, then you need to use Spam Management of vbulletin with Akismet?

Big Kahuna 01-18-2011 01:55 PM

ten minutes late I had a couple new registrations --

However I've since changed the directory of the images, and updated the addon and the template for the updated directory name.

I also installed the addon that checks thje ip address against a blacklist of known spammers, and change the human verification to the most complicated captcha -- and the combination of that has stopped the spamming.

creative-friend 01-21-2011 09:53 PM

i have just installed it but the images are not showing

i dont knw why??

tom001 01-22-2011 12:58 PM

Does not work for 3.8.5

akanevsky 04-10-2011 03:33 PM

Why is this mod published in 3.8 section if it's for version 3.6?

Paul M 04-10-2011 03:58 PM

Because it works on 3.8 as well, and was moved in 2009. They have just never updated the version in the first post.

singh9211 05-16-2011 08:13 AM

Can anyone please upgrade it to work with Vbulletin Version 4.xxxx

Narshelia 09-14-2011 05:39 PM

Works like a charm for 3.8.7.

Installed.

montsa007 09-22-2011 03:43 AM

Had numerous registrations despite of installing it. Removed

0ptima 11-27-2011 10:27 PM

1 Attachment(s)
This is a cool mod, hope it works well for me. On another note, I went to the author's site and it has been hacked!:eek: I hope it was not due to this mod.....

0ptima 11-28-2011 01:49 AM

Spammers are getting through and filling out the registration page :( . I have the hack set to display 8 images, changed all the phrases, the ALT image tag, etc and they still were able to successfully pass through.

0ptima 12-03-2011 09:13 PM

Code:

The following was written between the CODE tags so only members can see this

I did some searching on bot software and found one called xrumer. One of the features of this bot is to be able to defeat captchas. If you scroll down to the bottom of this link http://www.botmasterlabs.net/pictocod/ , you will see the images used in this mod! If you are using this mod, please do not use the default images !


X-or 02-21-2012 10:18 PM

So godamm amazing finally the flood of bots was stopped thanks so very much

BTW sometimes it seems that randomly an image doesn't show up and the word "vb secure" appears instead. I have verified by refreshing several times that the 16 images can be displayed correctly so there is not a broken image in particular.

CharLzarD 03-05-2012 03:26 AM

Quote:

Originally Posted by 0ptima (Post 2274406)
Code:

The following was written between the CODE tags so only members can see this

I did some searching on bot software and found one called xrumer. One of the features of this bot is to be able to defeat captchas. If you scroll down to the bottom of this link http://www.botmasterlabs.net/pictocod/ , you will see the images used in this mod! If you are using this mod, please do not use the default images !


Even so, it will still block lower level bots at the minimum.

Installed, thanks!

0ptima 03-28-2012 10:50 PM

I have been using this mod for a few months now and I am very impressed. I did change the default pictures and did some other tweaks.

hyperspin 04-02-2012 03:36 AM

I REALLY wish this mod worked for v4.x. I think this method is one of the most secure methods after you change all the default images and add a large number of possible images. We changed all the images to be inline with our site and our members have stated they really enjoyed it. The only spammers that we've had it make it through have actually been humans and not bots.

ChiNa 08-22-2012 04:03 PM

Hey all, I was searching for Image Verification for vB 3.8, and this one showed up!
I hope this work for vB 3.8.6 or 3.8.7... I will try befor Click in Installed!

Thank you!

X-or 10-01-2012 12:45 PM

Hi,

Why does it almost always fail to load all pictures?

oBen28 10-01-2012 10:30 PM

thank you..great idea

RRCamellini 11-11-2012 10:46 PM

very thx my friend

erdiyilmaz 12-12-2012 08:59 PM

It's successfully worked on (vBulletin 3.8.7 Patch Level 2)

matrex722 01-07-2013 05:48 PM

i was looking for it
thank you so much

JourneyDeep 04-23-2013 08:01 PM

I am running 3.6.7 .. since the update it appears that this is only for 3.6.8?

Anyways I tried to install it, everything looked fine as far as the install process. However I tried registering a new user and only had to type in the old Captcha, no new image verification is apearing. Thoughts?

PKGM 07-21-2014 01:11 AM

So, what is stopping this mod from working under vb4? The plugin hook still seems to be there.

ozzy47 07-21-2014 09:01 AM

Quote:

Originally Posted by PKGM (Post 2507559)
So, what is stopping this mod from working under vb4? The plugin hook still seems to be there.

Most of the vB3 mods do not work in vB4, they need to be recoded with the new syntax.

togotutor 09-16-2014 08:59 PM

Looks Good.


All times are GMT. The time now is 11:41 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01732 seconds
  • Memory Usage 1,793KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (2)bbcode_code_printable
  • (6)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (2)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (39)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete