It's quite possible that some of the bots are made smart enough to pause before completing the registration.

This is a great mod.

I highly doubt that as it would defeat the purpose of using a bot.

Am running 3.8.6 PL1 with this wonderful add-on.

Is there a way to disable the email notification to the admin?

Bill

Where should I look to find this code?

Bill

In the plugin settings (acp).

B.t.w. I just delete over 13.000 blocked bot email notification messages.

This things is like a timex, it still keeps on ticking. It caught 2 of them today. ;)

Works on 3.5.3 if you edit the database. I had a bot blocked before I was even done testing it!! :eek:

It does not. The same bot could easily visit many other forums and fill in the registration forms and come back to submit the current one, then go back to each of the others and submit.

Multi-tasking.

Now your stretching things a bit. Unless you really have something worth the bots time and attention, it is not going to go through all of that. The purpose is to do as much as possible by going the fastest route. Think about it.

It is still fast. Let's say, it can complete 1 registration form in 1 second. Instead of doing one form every 1 second, it simply does 20 forms in 20 seconds.

In fact, it could be faster. Because while it is waiting for the web server to respond to it's HTTP request, it will be idling. So instead of idling, it can simply shoot off a few more HTTP requests to few more servers.

I'm really simplifying it here. I'm leaving out server response time and such. A well written bot can be much more efficient.

True, but most bots will do a grab and rub and move on to the next site. I have yet to see a bot that will backtrack after so many seconds to the same site. That would be a lot of http calls.

Nope. It's still the same number of HTTP requests. Requesting the reg form is one request. Submitting it is another request.

3 questions

1. Where do I change the time period?
2. what is the recommened time used by everyone?
3. Where are the settings for this after installed?

I answered you all of this in the other thread.

Hi,
I'm having problems with spambots submitting multiple requests to register.php?do=addmember; thousands per day.

Of course, since I use the human verification option with graphics etc., they are unsuccessful in completing any registrations. But the traffic is slowing down the server greatly and my ISP is pissed off.

Will this mod do anything to alleviate that issue? Once they are detected by this, does that in any way stop them from making more requests to register.php?do=addmember?

Will this work with v4

Yes it does, with some simple changes. Go see post #347 (on page 24) of this thread. Also read the posts following that for additional information.

Just to clarify post #347:

It should read:

and not:

... note the missing '$'

thalamus, Thanks for catching that. I've edited post #347 to remove the error.

This post had it correct. Did you originally copy it from that one?

https://vborg.vbsupport.ru/showpost....&postcount=342

#347 Is correct because I corrected it after thalamus pointed it out.

I understand that. But I was asking if you copied the code from my earlier post and if so, how the $ got in there and it wasn't in the one I posted.

Probably a typo on my part.

Glad you got it sorted out.

I did change a part of it though that now shows the info like this:


That is an actual email from this mod, by the way.

I have read about the edits that need to be made for this plugin to work with vb4, however either im missing something or having a blonde moment...

when i search for: <input type="hidden" name="url" value="$url" />
in the register template, as stated in the install instructions, I just get not found.. ?

could anyone shed some light on where i need to insert the code for vb4.

Thanks

nevermind, found it!

for anyone else looking, its: <input type="hidden" name="url" value="{vb:raw url}" />

That's not necessary. You can edit the file on the fly from the plugin manager in AdminCP.

would this work for 4.1.7??

I will try this for vB 4.1.7 and report back once I have it installed.

Have you tried this successfully? I am running the same version and interested if this works.

A few simple changes to make this compatible with 4.x.x.

1. Install as instructed, except add this line to the register template instead:
2. Then go to Admin CP -> Plugins & Products -> Plugin Manager.
3. Look for the register_form_complete hook for the isBot product and click Edit.
4. In the Plugin PHP Code text box, add the following line below the only line of code there.
5. Click Save and you're done.

There is no potential for damage for you trying this mod yourself on your 4.1.7, you can uninstall this Mod and revert the change to the register template easily.

Here is how I test this:

Making sure I am logged out and all cookies are cleared, I load the board then click the "register" link. I check the box acknowledging the rules, and submit. The IsBot timer now starts.

I previously set the IsBot time to 60 seconds to make sure I can click "submit" under the set time. I fill out the form very fast, using already saved information for all the fields and I just copy/paste. I then submit the form under the 60 second time.

After testing put the time back to 15 seconds.

I have had this mod for quite a long time now, it is still catching 15-20 bots per day, with an average elapsed time each of 3.2 seconds. Most of them are registering in between 0-1 second. This is well over 500 bots caught by this mod since install. None have successfully registered since install. None have been seen to try to be "adjusting" to this Mod. It gives the bot the default vBulletin "Administrator has disabled registration" message, it doesn't tell them speed is in any way involved.

NO humans have been rejected by this Mod since install, either. It is easily the best spambot stopping mod, ever and should be a default part of vBulletin IMO.

great! i appreciate the walkthrough, ill def be installing this on my site this weekend!

Does this work in vbs 4.1.8 ???

for vb 4.1.8 in the register template i found this line:

<input type="hidden" name="url" value="{vb:raw url}" />

and under it I placed the following line:

<input type="hidden" name="isbot_time1" value="${vb:raw isbot_time1}" />

is this correct? or is it without the $???

<input type="hidden" name="isbot_time1" value="{vb:raw isbot_time1}" /> without the $ worked.

With those changes, this mod works great in vB 4.1.8

Thanks to all who helped from this thread.

This code needs to be added to vB 4.2.0

Thanks for the work! Since installing this mornig, it has blocked 300 attemps

thats right. 300+

Great hack, but i have some question.
Normally with Captcha i notice a new spam bot once every 12 days at the top, not more.
Within 10min after i installed Is Bot two mails was recieved with two different bots with funny looking names and mails.
I appreciate to get rid of bots, but how big is the chance that two bots within 10min tries to register when i only got one bot every 12 days before? Captcha i still running at the same time as Is Bot.

Also, what kind of notification does the member that tries to register but fail get? If any, can i edit it somehow?

You are now getting real-time information when these bots leave the register.php page before the time set up in IsBot. You will be amazed how many you will now catch. This works even if they ignore or fail the captcha, and even if they don't fill out all fields. IsBot merely looks at time spent between pages. It doesn't care what data is entered into the fields, other than recording it to send to you via email.Humans will never see the message. Members will never see the message. Only bots will. Failed registrations get the standard vBulletin message, "The administrator has disabled registration" that is given if registration is actually disabled. There's not a "gotcha" message or any type of message that tells what went wrong. This is so the human botnet administrators don't get a clue as to why their bots can't register.

It doesn't give second chances. It doesn't explain, it just stops them.

I had a human see the message as he beat the setting I had when we were first testing it. I still don't know how he did it.