vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 4.x Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=245)
-   -   Anti-Spam Options - Rename register.php by BOP5 (https://vborg.vbsupport.ru/showthread.php?t=297834)

djbaxter 05-11-2013 02:59 PM

Quote:

Originally Posted by Max Taxable (Post 2421314)
I figured it might be.

Alot of people don't realize the timer add-ons are all page load time dependent. Terrible proxies the botnets usually use, and other factors can contribute to slow load times thus letting some autospam bots get registered.

Spam fighting requires layers of defenses and vigilance by site owners, for sure. It's not a casual undertaking.

What version of the timer add-on are you using? I'm still on the original v1.1.

This is getting off-topic. However, to answer your question, I'm using Spambot Stopper, v 1.1.1. I think you're using that other one that keeps changing names and having hissy-fits.

Max Taxable 05-11-2013 04:12 PM

Quote:

Originally Posted by djbaxter (Post 2421316)
This is getting off-topic. However, to answer your question, I'm using Spambot Stopper, v 1.1.1. I think you're using that other one that keeps changing names and having hissy-fits.

The other mod of the month one nothing's gotten through as yet. Yeah. Mainly because I paid to have it coded and released free to the community, and the first version of it was exactly as asked for.

Max Taxable 05-11-2013 04:23 PM

Back on topic and sorry for the derail... But BoP5 it might be helpful to mention this really works alot better if folks do NOT use the word "register" in the new name, and if one changes the name of ALL images that link to the registration page, and all that have the word "register" in them.

djbaxter 05-11-2013 04:31 PM

Quote:

Originally Posted by Max Taxable (Post 2421334)
The other mod of the month one nothing's gotten through as yet. Yeah. Mainly because I paid to have it coded and released free to the community, and the first version of it was exactly as asked for.

Total BS. I had that one installed and bots still got through.

Max Taxable 05-11-2013 04:42 PM

Quote:

Originally Posted by djbaxter (Post 2421336)
Total BS. I had that one installed and bots still got through.

It's not BS on this end, I should have been more clear. I personally haven't had one get through as yet and it's reporting anywhere from 40 to 100s of attempts daily.

Speedy131 05-11-2013 06:49 PM

Awesome!

Installed & nominated.

Thank you

Speedy131 05-12-2013 06:22 PM

Turns out I have some very smart bots on my forum ... they're still getting through every now and then despite the renamed register.php :(

Max Taxable 05-12-2013 06:51 PM

Quote:

Originally Posted by Speedy131 (Post 2421583)
Turns out I have some very smart bots on my forum ... they're still getting through every now and then despite the renamed register.php :(

This is going to be every bit as good as the renaming we do. See some of the earlier posts.

smirkley 05-13-2013 03:45 AM

Quote:

Originally Posted by Speedy131 (Post 2421583)
Turns out I have some very smart bots on my forum ... they're still getting through every now and then despite the renamed register.php :(

Your also going to get a smart bot or two, now and then. Expect that as a norm.

But as an admin,... get used to juggling a dozen methods of preventing spam.

Some last and never need changing,... some or good only for a month or two.

But stick with what works and dump what no longer does.

BirdOPrey5 05-13-2013 12:55 PM

Quote:

Originally Posted by Speedy131 (Post 2421583)
Turns out I have some very smart bots on my forum ... they're still getting through every now and then despite the renamed register.php :(

Making sure register in not in the filename will help.

Another big help would be editing the register phrase to something else without the word register. if "bots" get through without the word register anywhere in the link or text they're probably not bots. Not all spammers are bots.

djbaxter 05-13-2013 07:59 PM

There are other phrases, for example in the Registration FAQ entry, that contain links to register.php that will need to have the anchor text changed. They also link to the newly named register.php after installing this mod.

Do a search for phrases containing the word "Register".

Speedy131 05-14-2013 03:46 PM

I first renamed it to registerforfree.php ... saw no decrease in "fake" registration attempts (about 200 a day)
Then indeed figured still having "register" in the filename may no be the smartest thing to do so I changed it to something else, but still no sign of a decrease in registration attempts.

Perhaps leaving a fake register.php on the server may also help ... those bots might be set up to only look for a registration url if what it considers default returns a 404

Gonna try that first, and if that fails I'll be editing the phrases as suggested.

David Copeland 05-15-2013 12:30 PM

We were getting hammered by China recently, eating up our server resources - even though we have all new registrations go into Moderation. The bots figured out what the answer was to our verification question. Once we changed the question and answer, all the bots stopped. We will continue to monitor the server for a while to see if they return - and if so, we will look at using this mod.

Thanks,

David

SaN-DeeP 06-04-2013 09:47 AM

One of the best modifications, we required to stop SPAMMERS who are hammering register.php page.
Thanks BirdOPrey5

FYI - I had to manually change 5 more language phrases and 5 more places in my style to make this work on 3.x

BirdOPrey5 06-04-2013 11:21 AM

Quote:

Originally Posted by SaN-DeeP (Post 2425727)

FYI - I had to manually change 5 more language phrases and 5 more places in my style to make this work on 3.x

If the phrases weren't email phrases the mod itself would normally take care of those changes without needing to manually edit the phrases. That is to say- I know register.php appears in a number of phrases/templates but they don't need to be changed.

Do you remember any of the 5 other places?

SaN-DeeP 06-04-2013 11:49 AM

We installed this modification properly, but within few minutes those spammers have started hammering the new renamed register.php
Makes no difference..

Am i missing something ?

BirdOPrey5 06-04-2013 12:13 PM

Then your spammers are either human or following links.

A couple of things-
1) Make sure register isn't in the new file name. make it just some random letters.

2) It has been suggested editing phrases with the word "Register" in it and change it to something else, perhaps an image of the word register instead- but again don't use the word in the file name.

Christos Teriakis 06-04-2013 05:20 PM

Gland to know that my idea to rename register.php as anti-spam protection, became a mod after 3 1/2 years of my post (Jan 9th, 2010):
https://vborg.vbsupport.ru/showthread.php?t=232624

Edited: If you want to extend it a bit to become 100% anti-robot safe, add the following code in the registration form:
Code:

<input type="checkbox" id="malakas" name="malakas" value="1" style="display:none;">
and this code to php file (after form submission):
Code:

if ($vbulletin->input->clean_gpc('r', 'malakas', TYPE_UINT) == 1)
{
  header('location:http://www.disney.com');
}

Bots used to read the page code and fill all fields. Non human can use this as it's hidden. So if this field gets value, means that it's a bot and he will be redirect to ...Disney.com

I'm using it for years and works 100% (always talking for bots).

BirdOPrey5 06-04-2013 09:57 PM

Interesting stuff- never saw that thread before- or didn't recall it if I did. This came about I was talking with other vb support personnel and we had a ticket of someone complaining of having to delete register.php to stop some sort of "bot attack."

I know I had looked into renaming register.php several times over the years but the sheer number of replacements needed always put me off. Finally it clicked to basically use a replacement variable- and more or less that is what the mod does. But it does do a few more complex matches so that if someone links to some other site's register.php page or just types register.php in a post it does not get changed- which it would in a pure replacement variable scenario.

Finally I had to add some magic for links to work in the admincp as replacement vars don't work in the admin cp.

djbaxter 06-09-2013 01:53 AM

Bug in this add-on:

Clicking "Email Activation Codes" from the user panel in the AdminCP does not send the codes and does not give an error message. It just loads the smilies page.

BirdOPrey5 06-09-2013 02:33 AM

What VB version are you using?

You sure you have downloaded the latest version of the mod?

djbaxter 06-09-2013 04:27 AM

Quote:

Originally Posted by BirdOPrey5 (Post 2426769)
What VB version are you using?

vBulletin 4.2.1

Quote:

Originally Posted by BirdOPrey5 (Post 2426769)
You sure you have downloaded the latest version of the mod?

Yes. Version 1.15 installed.

kmplex 06-09-2013 11:16 AM

Thank you, signed up for your forum and left a post as well.

- Brian

BirdOPrey5 06-09-2013 12:49 PM

Quote:

Originally Posted by djbaxter (Post 2426779)
vBulletin 4.2.1



Yes. Version 1.15 installed.

Weird, working ok for me. I added code to fix this issue.


Please do this- in your admin cp, right click on the users link and choose to open in a new window.

Then try sending the codes again.

Let me know the URL in your browser on the smilie page. (you can remove your domain if you want)

djbaxter 06-09-2013 02:08 PM

Quote:

Originally Posted by BirdOPrey5 (Post 2426845)
Weird, working ok for me. I added code to fix this issue.


Please do this- in your admin cp, right click on the users link and choose to open in a new window.

Then try sending the codes again.

Let me know the URL in your browser on the smilie page. (you can remove your domain if you want)

I created a new dummy user (me-test) and then selected that new member profile in AdminCP.

I don't have an option to right click "send activation codes" and open in a new tab or window from the button at the top of the AdminCP page.

The button is titled "Email Activation Codes".

Using the Firefox Web Developer: Inspector feature, i can see that this fills in and submits a form. Here's the code:

Code:

<!-- form started:49 queries executed -->
    <form id="cpform" name="cpform" method="post" action="../register.php?do=emailcode"><input id="do" type="hidden" value="emailcode" name="do"></input><input type="hidden" value="4eaa72378b27e70a445a12c6a9846659" name="adminhash"></input><input type="hidden" value="1370790095-f6d3a87b7ba0ac11ee6a32833ba6a21ce6b3649e" name="securitytoken"></input><p align="center"><input id="submit0" class="button" type="submit" accesskey="s" value="Email Activation Codes" tabindex="1"></input></p><input type="hidden" value="TESTUSER@ISPDOMAIN.COM" name="email"></input></form>
<!-- form ended: 49 queries executed -->

Notice that it is still referencing register.php although that is no longer the correct name for the file.

1. I do use email verification and have made all the edits in the two indicated phrases.

2. I do not use Facebook Connect.

RFViet 06-10-2013 02:52 PM

Hi POB5,
The mod looks interested to me, before installing this mod my question is will it effects vB update since it changes file name register.php ? and how do I uninstall if I won't use it in the future ?

JamesUK 06-11-2013 08:35 AM

installed easily and working great, thanks.
I can instantly see a big drop-off in cpu useage on our server (39% of all website traffic has been to our register.php recently!!)
I've put a dummy 'hello world' file in as register.php so the server's not serving up a load of 404s and it all seems happy :)
thanks again,.
James

BirdOPrey5 06-12-2013 12:28 AM

Quote:

Originally Posted by RFViet (Post 2427116)
Hi POB5,
The mod looks interested to me, before installing this mod my question is will it effects vB update since it changes file name register.php ? and how do I uninstall if I won't use it in the future ?

After an upgrade you would need to rename register.php again to whatever the custom name you chose is.

If uninstalling just undo whatever manual changes you made. If you manually changed the phrases, change them back. If you manually changed the class_core.php file, change it back. Then just rename the register.php file back to normal and disable/install the mod. It should take just as many steps to install as uninstall.

BirdOPrey5 06-12-2013 12:33 AM

Quote:

Originally Posted by djbaxter (Post 2426861)
I created a new dummy user (me-test) and then selected that new member profile in AdminCP.

I don't have an option to right click "send activation codes" and open in a new tab or window from the button at the top of the AdminCP page.

The button is titled "Email Activation Codes".

Using the Firefox Web Developer: Inspector feature, i can see that this fills in and submits a form. Here's the code:

Code:

<!-- form started:49 queries executed -->
    <form id="cpform" name="cpform" method="post" action="../register.php?do=emailcode"><input id="do" type="hidden" value="emailcode" name="do"></input><input type="hidden" value="4eaa72378b27e70a445a12c6a9846659" name="adminhash"></input><input type="hidden" value="1370790095-f6d3a87b7ba0ac11ee6a32833ba6a21ce6b3649e" name="securitytoken"></input><p align="center"><input id="submit0" class="button" type="submit" accesskey="s" value="Email Activation Codes" tabindex="1"></input></p><input type="hidden" value="TESTUSER@ISPDOMAIN.COM" name="email"></input></form>
<!-- form ended: 49 queries executed -->

Notice that it is still referencing register.php although that is no longer the correct name for the file.

1. I do use email verification and have made all the edits in the two indicated phrases.

2. I do not use Facebook Connect.


Thanks. I can confirm this is working on 4.2.1 on my site, so I assume it must be due to some conflict on yours.

In the drop down menu there should also be an option to email activation codes, can you try there too.

I'm talking about the "Quick User Links" drop down.

djbaxter 06-12-2013 12:37 AM

Quote:

Originally Posted by BirdOPrey5 (Post 2427520)
Thanks. I can confirm this is working on 4.2.1 on my site, so I assume it must be due to some conflict on yours.

In the drop down menu there should also be an option to email activation codes, can you try there too.

I'm talking about the "Quick User Links" drop down.

The same thing except it opens a new blank window with the url

Code:

http://myforum.com/register.php?do=requestemail&email=testuser%40isp.com&url=http%3A%2F%2Fmyporum.com%2Fadmincp%2Fuser.php%3Fdo%3Dedit%26u%3D10444
Again, notice it is referencing register.php, not the alternate filename.

I'm not sure what other plug-in could be interfering, or indeed what other plugin I have installed that even references register.php

BirdOPrey5 06-12-2013 12:45 AM

It has nothing to do with register.php in terms of the plugin, in the Admin CP it's working directly on the PHP Output buffer, which I suppose if another mod is doing as well could cause issue.

Please go to the Admin CP -> Plugins & Products -> Plugin Manager

And see if any other plugins are on this hook: useradmin_edit_column2

Hint- if you have a lot of plugins press CTRL+F to open the "Find" function in your browser and paste in the plugin name to quickly search.

djbaxter 06-12-2013 12:50 PM

I did have one. However, I changed that to useradmin_edit_column1 and tried again. Same result.

Is the plugin "Send Activation Code Fix Part I" supposed to be disabled? Not that it made a difference when I enabled it but it seems to be unchecked by default.

djbaxter 06-12-2013 01:22 PM

I just tried this on a different forum with a new registration. There, I get an error message:

Quote:

Not Found

The requested URL /register.php was not found on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.

Disco_Stu 06-12-2013 04:32 PM

fyi...had to change the following phrases:

admin_required_register
you_lost_activation_code_or_username
coppa_rules_description
vb3_register
activate_deleterequest
invalidactivateid

and the following templates:

activateform
activate_requestemail

Update:
Seems to be working ok. I was able to register a new user without any issues. The various links are working as well.

Good mod! Thanks. Marking as installed.

BirdOPrey5 06-12-2013 06:09 PM

Quote:

Originally Posted by djbaxter (Post 2427609)
I did have one. However, I changed that to useradmin_edit_column1 and tried again. Same result.

Is the plugin "Send Activation Code Fix Part I" supposed to be disabled? Not that it made a difference when I enabled it but it seems to be unchecked by default.

I would suggest temporarily disabling the other plugin on the hook.

Yes this mod is supposed to have 1 disabled plugin.

Quote:

Originally Posted by djbaxter (Post 2427623)
I just tried this on a different forum with a new registration. There, I get an error message:

Maybe you got a bad copy? Try re-downloadig.

socialteenz 06-12-2013 07:05 PM

Working fine on 4.2.1 :)

Thank you.

djbaxter 06-13-2013 02:25 AM

Quote:

Originally Posted by BirdOPrey5 (Post 2427737)
I would suggest temporarily disabling the other plugin on the hook.

I disabled all products or plugins using that hook or anything using any useradmin_edit_? hook, including vBulletin Blog. No change.

Quote:

Originally Posted by BirdOPrey5 (Post 2427737)
Maybe you got a bad copy? Try re-downloadig.

Tried that. Downloaded and re-imported. No change. It is still trying to run register.php instead of the new name.

New Joe 06-13-2013 07:53 AM

I installed it but it didn't work.
It went to the new path I had made but instead of going to the registration page it just sent to my home page.

BirdOPrey5 06-17-2013 07:26 PM

Quote:

Originally Posted by New Joe (Post 2427824)
I installed it but it didn't work.
It went to the new path I had made but instead of going to the registration page it just sent to my home page.

I don't understand... Perhaps the file had a slightly different name then you entered in the mod?

Do you have VBSEO installed? It should still work but that is the only way I can think you'd be sent to the homepage instead of a 404 error.

FYI (to everyone)- for those not sure if this helps, some people here said it was no help, but at least one guy found it reduced his bandwidth usage by 80%.

http://www.vbulletin.com/forum/forum...different-name

djbaxter 06-17-2013 09:28 PM

Quote:

Originally Posted by djbaxter (Post 2427804)
I disabled all products or plugins using that hook or anything using any useradmin_edit_? hook, including vBulletin Blog. No change.



Tried that. Downloaded and re-imported. No change. It is still trying to run register.php instead of the new name.

BOP5, any other ideas?


All times are GMT. The time now is 12:52 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01776 seconds
  • Memory Usage 1,857KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (5)bbcode_code_printable
  • (22)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (3)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (40)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete