vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 3.6 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=194)
-   -   Administrative and Maintenance Tools - vbStopForumSpam - known spammer lookup for new registrations (https://vborg.vbsupport.ru/showthread.php?t=176481)

fulviods 11-02-2009 10:10 AM

hi, thanks it works fine except one problem.
Since I ve installed it on a 3.8.2 i can't erase anymore users from the list "users waiting validation".

I can erase them one by one from the user menu, but not from the list! any idea?

thanks

this is the error
Database error in vBulletin 3.8.2:

Invalid SQL:
DELETE FROM vb_user WHERE userid = 206;

pedigree 11-02-2009 02:05 PM

Quote:

Originally Posted by fulviods (Post 1909340)
hi, thanks it works fine except one problem.
Since I ve installed it on a 3.8.2 i can't erase anymore users from the list "users waiting validation".

I can erase them one by one from the user menu, but not from the list! any idea?

thanks

this is the error
Database error in vBulletin 3.8.2:

Invalid SQL:
DELETE FROM vb_user WHERE userid = 206;

This is valid SQL but my mod doesnt touch any user admin in this way. I created users on my test forum (default install, just my mod) and I was able to delete users. This doesnt look like my mod causing these issues.

fulviods 11-02-2009 02:36 PM

ok in fact...now it works!! it was a server problem probably! thanks and sorry ;)

Ohiosweetheart 11-04-2009 05:27 PM

What is the importance of the API Key? Do I have to have one?
I'm confused as to how to get the key.

Thanks

techtir 11-04-2009 05:55 PM

The API key is for reporting

Read http://www.stopforumspam.com/add

signup to Forums also with same email

ShaolinTiger 11-05-2009 02:38 AM

Would it be possible in the next version to integrate with the "Delete as Spam" hook and have a checkbox to submit user details to the Stop Forum Spam database when you delete as spam.

ilrglen 11-05-2009 06:58 PM

I saw cURL mentioned a few times here. What exactly is this and is it needed in order to run this mod? I don't look after the server myself as my site is hosted by another company and I don't know if they use cURL. I'm still waiting to hear back from them. Thanks.

techtir 11-05-2009 08:16 PM

it's a php method preferable (I think) to fopen to get text via a URL

If you have the correct PHP version, you probably don't need to worry.

ilrglen 11-05-2009 10:34 PM

Thanks. I just heard back from the hosting company and they do have it. Apparently all of their software is current.

skippybosco 11-05-2009 11:08 PM

@ilrglen:

create a file on your server called phpinfo.php and put the following in it:

Code:

<?php
        phpinfo();
?>


then browse to http://yourdomain.com/phpinfo.php (or wherever you put the file) and search for CURL in the results. Should see something like this:
Quote:

cURL support enabled
cURL Information libcurl/7.14.0 zlib/1.2.3 libidn/0.6.8

SamirDarji 11-06-2009 01:00 AM

Quote:

Originally Posted by skippybosco (Post 1910764)
@ilrglen:

create a file on your server called phpinfo.php and put the following in it:

Code:

<?php
        phpinfo();
?>


then browse to http://yourdomain.com/phpinfo.php (or wherever you put the file) and search for CURL in the results. Should see something like this:

You can also see the phpinfo without creating a file from the admincp under Maintenance-->View PHP Info.

skippybosco 11-06-2009 01:51 AM

Quote:

Originally Posted by SamirDarji (Post 1910795)
You can also see the phpinfo without creating a file from the admincp under Maintenance-->View PHP Info.

I had no idea that was there.. cool!

ilrglen 11-06-2009 12:37 PM

Quote:

Originally Posted by SamirDarji (Post 1910795)
You can also see the phpinfo without creating a file from the admincp under Maintenance-->View PHP Info.

Hey, that was even easier. Thanks guys. It's in there.

Wired1 11-07-2009 04:24 AM

Pedigree: Take down the October 2009 MotM message... CAUSE YOU WON :)

Ohiosweetheart 11-08-2009 01:24 AM

Where do I find the spam log viewer as shown in the attachments? For some reason, I can't locate it.

kylek 11-08-2009 01:57 AM

Quote:

Originally Posted by Ohiosweetheart (Post 1911479)
Where do I find the spam log viewer as shown in the attachments? For some reason, I can't locate it.

Admincp > Statistics & Logs > vbstopforumspam logs

rootsxrocks 11-08-2009 07:32 AM

I keep finding stopforumspam.com when looking up suspicious users , Unless someone tells me there is a better Mod I think Ill try this as well.

skippybosco 11-08-2009 07:54 AM

This mod uses stopforumspam.com data to check against.

Ohiosweetheart 11-08-2009 02:24 PM

Wow this mod is rejecting just about everyone with a gmail address.



Quote:

Originally Posted by kylek (Post 1911488)
Admincp > Statistics & Logs > vbstopforumspam logs

Thank you :)

Gav-n-Tn 11-09-2009 06:09 AM

Quote:

Originally Posted by rootsxrocks (Post 1911553)
I keep finding stopforumspam.com when looking up suspicious users , Unless someone tells me there is a better Mod I think Ill try this as well.

Quote:

Originally Posted by skippybosco (Post 1911556)
This mod uses stopforumspam.com data to check against.

Quote:

Originally Posted by Ohiosweetheart (Post 1911640)
Wow this mod is rejecting just about everyone with a gmail address.

Thank you :)

This is an awesome mod (I LOVE IT!) but be careful not to let SFS be your ONLY way of trying to stop the idgits. I'm sure the author of this will tell you the same but it does get better as more people report the spammers to SFS and build the database. I still moderate all new members as a second line of defense and I use more than just SFS to check the IPs.

techtir 11-09-2009 06:33 AM

It's only rejecting spammers with gmail address. We have plenty of real members with gmail addresses.

A recent tactic of US spammers seems to be to get a fresh Nigerian Human to sign up. We see the IP is Nigerian and do nothing. About 5min to 15min later the 1st post comes, a large advert for phones etc from a US IP, often with new email addresses to send the order to.

If it's a cable or Fibre IP, then the user IP doesn't change much. So then we add those posting Emails and original email to VB's own blocked emails list (in case in future Stopforumspam is down) and then add all the IPs and Emails and user names to stopforumspam.

I'd like to see this mod add blocked or banned IPs & email, (i.e. no matter if registration was successfull or not) to VB's blocked list.

I already made one tiny change on the addon reporting script so the Report to Stopforumspam box and button doesn't appear unless the user is Banned user group (Change NOT admintrators group to EQUAL Banned Group). That submit button needs to simply update the Blocked IPs and Banned Emails settings visible in VBoptions userBanning, two SQL statements)

pedigree 11-09-2009 10:11 AM

Quote:

Originally Posted by techtir (Post 1911871)
I'd like to see this mod add blocked or banned IPs & email, (i.e. no matter if registration was successfull or not) to VB's blocked list.

I already made one tiny change on the addon reporting script so the Report to Stopforumspam box and button doesn't appear unless the user is Banned user group (Change NOT admintrators group to EQUAL Banned Group). That submit button needs to simply update the Blocked IPs and Banned Emails settings visible in VBoptions userBanning, two SQL statements)

Explain the 1st one a bit more if you could please. 2nd one - click click, add the IP number to the vbulletin banned IP address list as well?

techtir 11-09-2009 10:54 AM

Here is the code from the "submit" to stopforumspam. It's the plugin add on I got from this thread with one small change.
PHP Code:

if (is_member_of($user['usergroupid'], 8)) // we dont want to ban our admin account now do we
        

            
print_table_break(''$INNERTABLEWIDTH);
            
print_table_header("vbStopForumSpam");
            if (
$vbulletin->options["vbstopforumspam_apikey"])
                
print_label_row('Submit these details to www.stopforumspam.com ban list<BR><table><tr><td>Username:</td><td><input type="text" name="username"  size="30" value="'
$user['username'] . '"></td></tr><tr><td>Email:</td><td><input type="text" name="email"  size="30" value="' $user['email'] . '"></td></tr><tr><td>IP:&nbsp;</td><td><input type="text" name="ip_addr"  value="' .$user['ipaddress'] . '"></td></tr></table><input name="api_key" type="hidden" value="' $vbulletin->options['vbstopforumspam_apikey'] .    '"><input onclick="this.form.action=\'http://www.stopforumspam.com/add.php\';this.form.submit()"  type="button" class="button" value="' $vbphrase['submit'] . '"/>');

            else
                
print_label_row('You need an API key from www.stopforumspam.com before you can submit to the database' ,'');    
        } 

Changed line
if (is_member_of($user['usergroupid'], 8))
Note it's now ==8, banned Group, rather than != Admin Group

This means the box with email, username, IP and submit to stopforumspam only appears if you banned user (i.e. automagically via Delete all posts as Span etc)
I haven't added anything else.
But this is where you would add two SQL statements, one to add email and other to add IP to the database normally accessed manually in VBoptions User Banning settings.
Then assuming all the spammer's posts where physically deleted you can now safely delete the user.
I usually also manually add IP used and email quoted in the Spamvertisment that is deleted, as well as the user account IP and email.

None of this is automatic, I'm only suggesting that that's what I would automate and where I'd add it.

techtir 11-09-2009 11:08 AM

The other issue is that the vbstopforumspam 1st checks IP then it checks email.
If there is a match on email in log I update manually the IP and user name with that email to Stopforumspam as the email pretty much is always real spammer.
a)
That would be a useful thing to automate.

b)
Since spammers usually try with same email and / or IP multiple times and stopforum spam database could go down for a while, I thought that if any successful blocks on email or IP found at stopforumspam, it would make sense to automatically update VB's own blocking database with those likely to be retried IP and/or email. I think that's quite useful compromise between loading the entire stopforumspam database (and syncronising changes) or doing nothing.

I don't think anything needs added to the "in forum" delete as spam or ban user as you want to review banned users in Admin CP before blocking/reporting them.

The Submit code (in last post above) ideally should use a custom user field (Reported) and NOT automatically delete the user. Then the button text could be Unsubmit and remove the details from Stopforumspam, the vboptions user blocking, and unbanned the user (change group to Registered User) if it was all a mistake. Mistakes happen.

Johndd 11-10-2009 09:22 PM

Fantastic I was getting really frustrated banning spammers every morning. Thanks

Barteh 11-11-2009 09:29 AM

Quote:

Originally Posted by techtir (Post 1911871)
It's only rejecting spammers with gmail address. We have plenty of real members with gmail addresses.

A recent tactic of US spammers seems to be to get a fresh Nigerian Human to sign up. We see the IP is Nigerian and do nothing. About 5min to 15min later the 1st post comes, a large advert for phones etc from a US IP, often with new email addresses to send the order to.

If it's a cable or Fibre IP, then the user IP doesn't change much. So then we add those posting Emails and original email to VB's own blocked emails list (in case in future Stopforumspam is down) and then add all the IPs and Emails and user names to stopforumspam.

I'd like to see this mod add blocked or banned IPs & email, (i.e. no matter if registration was successfull or not) to VB's blocked list.

I already made one tiny change on the addon reporting script so the Report to Stopforumspam box and button doesn't appear unless the user is Banned user group (Change NOT admintrators group to EQUAL Banned Group). That submit button needs to simply update the Blocked IPs and Banned Emails settings visible in VBoptions userBanning, two SQL statements)

Easiest way to deal with this is both a reCaptcha protected 'contact us' form (which iirc is automatically referred to when people are unable to register because of banned email addresses) and a moderation queue for new users.
vBSFS keeps out the vast majority of spammers (say, 999 per 1000 attempts at least), so you'll only have to deal with possible human spammers on occasion, assuming you have enough people who can authorise new users of course. You might want to install the ModCP moderate new users plugin as well, helps share this load with your supermoderators and thus keeps response time to a minimum.

Coop1979 11-12-2009 04:10 PM

Wow, I installed this an hour ago and already have had 20 spammers try to sign up and be rejected!

pedigree 11-14-2009 09:14 PM

Im in the code again at the moment, putting code in there so that its hooked in inline_deleteaspam.

Now, given that you can delete posts as spam and not ban someone, what options should be put in to avoid submitting non banned users to the database?

Either
1. No submission to the database if the user isnt set to be perm-banned
2. A form checkbox in the page, to overwrite #1
3. Admin options (off by default) that allows non-banned users to be submitted regardless of the form data.

Wired1 11-14-2009 09:40 PM

After you select Delete post as spam, under Punitive Action add a 3rd radio box that says "Ban these users and submit to vBSFS". It'd be nice if it submitted the IP they posted from as well as the IP they registered from, as like someone said earlier, they can be different. ESPECIALLY those wankers who spam the cell phone crap!

pedigree 11-14-2009 10:26 PM

Thats what I have at the moment but submitting data when not banning a user, a bit of an odd action

Wired1 11-14-2009 10:47 PM

That's why I'd do Ban + submit as one button. Only problem is the actual banning part. Last time I looked at the code it was over complicated.

I wonder if you can inject another page after you select ban that has the submit options (e.g. post IP, registration IP, enter in alternate email addresses that may have been in the post, etc).

Don't want to submit all banned people of course as some may just be jerks and not spammers.

pedigree 11-14-2009 10:49 PM

There are lots of things going on with the banning, like akismet submissions, lots of thread stuff etc etc. I have to make sure that I get it just right or code starts running all over the place.

Wired1 11-14-2009 10:55 PM

My point exactly. Same goes for mass bans. I SO FRIGGIN WISH It was an option!

techtir 11-15-2009 06:06 AM

I think it should only be in the Mod or AdminCp. not in the inlinehook..

Often people may be banned who are not Spammers.

pedigree 11-15-2009 09:57 AM

so, a fine balance of usability and funtionality... oh fun :)

pedigree 11-15-2009 04:31 PM

Work so far... The template insert is all in php so it should work if the template changes, as long as it has the same fieldset/table structure.

scott_gersforum 11-15-2009 07:20 PM

Brilliant mod - has cut down my spam amazingly!

Skydiver10 11-15-2009 10:04 PM

Installed thanks for this mod. The only thing...I followed:

4 - You can edit the default rejection message by Admin Control Panel / Languages & Phrases / Phrase Manager / Front-End Error Messages / vbstopformspam_reject and vbstopformspam_reject_connectionerror

There is no "Front-End Error Messages" there. Only "Front-End Redirect messages"

And what exactly does this edit? Is this an important edit? Thanks

Kosmic1 11-15-2009 10:06 PM

Quote:

Originally Posted by scott_gersforum (Post 1914767)
Brilliant mod - has cut down my spam amazingly!

Indeed!! :)

Installed. Thanks!

Gav-n-Tn 11-16-2009 04:47 AM

Wait a minute here! Have I been missing out on some dialogue? Are we talking about adding a function to the AdminCP that submits the rejected registrars data to SFS without having to log on and fill out all three fields and submit them manually? If so, I LOVE IT! If not, that would be a great addition to the mod. This mod flippin rocks and so does the author! :)


All times are GMT. The time now is 09:35 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01972 seconds
  • Memory Usage 1,852KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (2)bbcode_code_printable
  • (1)bbcode_php_printable
  • (13)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (2)pagenav_pagelinkrel
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (40)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete