[QUOTE=GlowHost.com;2179750]Did you upload functions_ghsom.php into your includes folder?

Somehow, I forgot to upload that file. It's working for 10 minutes and has stopped a few spammers already. Marked as installed and MOM. Thanks for your efforts

After using GlowHost with V 4.1.2 the didnt show at newest Posts any new post.
And at the AdminCP on every page I can only scroll to the half of Page.

I doubt its directly related to this mod. Does anyone else have this problem?

Hi,
why is only the username checked and not the combination of both - username and ip or username and email?
We got false positives on common usernames like "honey" and "einstein".
Olli

Those are the default settings. If you want to change the default settings that are checked, or even make it so that the options you want are always checked/unchecked and not changeable by other admins or mods, then edit your settings in the admin area for this mod.

Hi, after I installed this mod, the "what's going on" section had all its stylevar options returned to the default values, ignoring the current ones. Is there anyway to avoid that?

OK now check this out.
I just installed the Spam-O-Matic. Now just above the main logo in the header I find A little box. 2pixel by 2 pixel. You can't see it with IE. unless you high light that area. It will show up with Fire fox. But if you have an I Pad you get an Icon that links you to a statical site in China. I will show the line of code in another post. Right now the code and information taken is being analyzed by my IT guy. The line of code will be posted later.
I'm not pointing fingers at this but I did want you to be aware that the download may have been compromised by someone.
I will upload the code later on so you can look to see if you have it also. This was installed on 4-2-11

Things that came up right after the install.

Here are the links to where the icon takes you. Click if you dare..
http://countt.51yes.com/index.asp?Id=485085618
http://www.cnzz.com/stat/website.php?Web_id=2858758

I noticed that once the spammers figure out your board isn't a slut any more they drop off in number of attempts. When I first installed it I stopped over 500 spammers in a day well over 800 in a week, I upgraded and installed this version which restarted my counter and I've yet to reach 100...

I'm definitely going to nominate this one for MOM, it flat just does the job. Especially if they give me back my reporting options in the AdminCP. ;)

All right.. Here is the offending line of code that was causing the little box and all the spy ware to give red flags.

This line was injected some how.
It's path in the root folder \clientscript\yui\connection\connection-min.js
It is the very last line of code. Please look to see if you have been injected with this. If so remove this line..
Thankyou.

What the heck!? is there a security hole in this mod?

\clientscript\yui\connection\connection-min.js is a standard vBulletin file in every vBulletin installation - why do you think the problem is with this mod?

Not got that on mine, file is clean, you should look around for other possible exploits, mods etc which may have inserted the code.

Not from the mod.

For the next version of Spam-O-Matic I'd like to be able to edit the error message that registrants see if they are prevented from registering. Currently, the message is non-specific, just saying that they are a spammer and this is resulting in many emails. I'd like to give a little more information to help them recover without resorting to email.

It would be great if the message could be edited in settings so I could say something like "try a different username..."

I realise I could edit the XML file but it's a bit of a pain reloading that just to change the message.

Thanks

This mod, like many, uses "phrases"- you can easily edit them via your Admin CP -> Phrase Manager. The one you're looking for I believe is called glowhostspamomatic_reject, otherwise you can "search in phrases" to find it.

Brilliant. Thank you very much.

I just installed this on a clean install of 4.1.3 and it messes up the footer.
Basically the footer disappears.

Is anyone else having this problem?

after upgrading to 4.1.3 i get this error

I don't know for sure how or what happened. I'm NOT a coder. I'm just letting you know what happened to me and what to look for. It might just be a coincidence. Just before I put in the mod A known spamer got in. That is why I put in the mod. They were in for only 5 minutes before I saw them and baned them. Now that I have upgraded to 4.1.3 I have reinstalled the mod but I keep a sharp eye on the file listed above to see if it changes. So far so good.

They might have used the exploit that 4.1.2 had. Here is the spamers information. Be on the look out for them.

: kmalinowska@bx8.pl
Birthday : April 13, 1961
Referrer: N/A
IP Address: 69.197.186.218

Location : Ethiopia
Year. : 3rd
Make. : WokskidaWeima
Gender : Female

I un installed the mod then did my upgrade. Then reinstalled it. No problems with it. But I only have 3 mods installed. I try to keep it light just for upgrade reasons.

I just installed this last night to my recently upgraded 4.1.3 board. Everything looked fine and then a member tried to post and got this message;

Warning: require_once(includes/functions_ghsom.php) [function.require-once]: failed to open stream: No such file or directory in [path]/includes/functions_newpost.php(443) : eval()'d code on line 5

Fatal error: require_once() [function.require]: Failed opening required 'includes/functions_ghsom.php' (include_path='.:/usr/lib/php:/usr/local/lib/php') in /includes/functions_newpost.php(443) : eval()'d code on line 5

I turned off this plugin and now members can post. I am new to running a board like this, so any help would be greatly appreciated.

@ EDCPunk - See this post: https://vborg.vbsupport.ru/showpost....&postcount=792

Awesome. Thank you for the heads up. I will try that and see if it works. :D

OK. The .php file is in the Includes folder. Any other suggestions? Thanks.

OK, it is fixed. The file was not in the right "includes" folder on the server. Thank you for the help with this.

Just wondering. The below lines appear at the bottom of our main forum page, the represent the entire 5 days Spam-O-Matic has been online on our updated forum.

15 Spammers Denied Registration
66 Spammy Posts Automatically Moderated

Two questions:

1. Prior to Glowhost we used vbStopForumSpam with results of around 250 spammers per day rejected. Why does there seem to be such a big difference with only 15 rejected/denied registration in 5 days?
2. The 66 Spammy Posts Automatically Moderated... Where on earth do they go when moderated? we can't find them anywhere and I have mods who are going stir crazy because they can't find then to delete.

My guess was they are being automatically reported then banned but we don't know who, what, where or when they were banned.

Maybe we're missing something. All I can say is I'm getting a bit of a laugh from it as it's messing with the brains of a couple of my moderators.

Cheers - Neil :D

PS Excellent mod, I love it. Saves a heap of time and gives me great enjoyment watching mods and admins chasing their tails trying to figure out where the moderated posts have gone.

Look in your ACP on the first page. there you will see on the right side at the top. messages needing moderation. Just click that and you can see all of them.

Thanks for the reply camoit.

Moderating them isn't a problem, we know where moderated threads/posts reside and how to moderate them been doing it for over 12 years. The problem is that the numbers mentioned of 66 don't show anywhere and have never appeared in Moderation that any of my moderators or administrators have seen. They seem to be phantoms, untouchables, unfindables. Gone without a hint they ever existed.

Cheers - Neil :)

OK so no one seems to want to satisfactorily answer the two questions in my previous post. Let's try another.

This is part of a post I made at vBulletin.com (full post HERE) So far no response to that one either.

I currently have an instances where one new member (spammer from China) has been able to register his username twice within 1 minute. He then proceeded to do 3 spam posts and then went on to changed his email address in second registration.

First registration was deleted as spam and reported to Stop Forum Spam after he had posted.

The second registration was then banned by moderator.... However it did not show as banned in his profile, but did in Banned Users list, whilst the first registration does not show up in the Banned Users list at all.

Today this person appears to have registered again. Different username, same IP address different email address.

Still shouldn't have got through Spam-O-Matic his ip is 220.179.121.198 and can be found in a search at SFS. There must be a glitch somewhere to allow this to happen.

We do have Name Check disabled in Spam-O-Matic for obvious reasons, as we had in VBStopForumSpam prior. Still I would think it shouldn't let a banned IP through though.

Cheers - Neil

There's a timeout setting. If your site cannot contact the StopForumSpam site for a certain period you either allow registration or deny it. In this case it seems that this may have been the cause of your spammer getting through with a tagged IP. I can't be certain without reading the stats, but that is the most likely culprit.

Hey all.

We've been getting some new spammers registering - no worries, their IP/email/username doesn't appear in the database.

Now they're not posting threads/posts, but are adding user notes to their own profile with links to spam sites. (gambling, etc). These notes are getting moderated into a queue, but I cannot find an option to report them via the Spam-O-Matic links.

To date we're just banning or deleting the users which are doing this - but any help so we can assist in improving the database would be welcome.

Thanks!
Martin

G'day Phaedrus - Thanks for the reply. Please don't get me wrong and I'm not trying to be rude, but that really does sound a bit suspect to me. :rolleyes: I'll admit it is possible if there's a timeout setting. But that's not very reassuring when one is relying on a fix that doesn't appear to work as it should.

But maybe this timeout setting is the reason why only 15 Spammers Denied Registration for an entire 5 day period when prior to that there were approx 250 per day, (that's1,250 for the same time period) or maybe the spammers have just stopped trying. Certainly haven't on my other forum where we are still running at around 250-300 per day being denied access using vbStopForumSpam and we have never had a problem with anyone ever getting back in with the same IP after banning them via SFS.

I fear there may be a serious problem or at least a better explanation than a timeout, especially with the dramatic drop on denied registrations.

Still looking for an answer to Question 2 above in the original post.

Cheers - Neil :D

I have legit users that are being denied registration using a hotmail account. How come? How can I allow them to register?

1) Because the orginal mod did not count correctly. This has been answered in this thread many times. SOM counts only the users who manage to get past vBulletin's built in registration form. The original mod checked the users before they tried to register on the built in vB form.

There is no reason to waste resources and connections to SFS by checking every bot that may not even get past the built-in vB validation.

2) They end up in the moderated posts as every other moderated thread would. If you are not seeing them then there is an unreported bug or you have another mod which is playing games, or your vB install is corrupt.

You can change the setting to disallow registration.

Thank you for that. Greatly appreciated and makes sense. However.....

I have banned all moderators and administrators from moderating threads/posts etc to make sure no one is sneaking in and approving, deleting anything from the Moderated thread/post section. Since that time there have been according to the notice on the forum home page 75 Spammy Posts Automatically Moderated (9 more than when I posted originally) but only 2 have gone into the Moderation section leaving 7 more mysteries that have never been seen by us and they join the rest that are lost somewhere.

I have been able to find the moderated posts in the GlowHost - Spam-O-Matic Log Viewer but haven't been able to moderate them as the bulk of them just don't show anywhere other than in that viewer and the links go to an empty Moderation box.

Also on the forum homepage the only stats from SOM are:

Spam-O-Matic StatisticsSpam-O-Matic Statistics

23 Spammers Denied Registration

75 Spammy Posts Automatically Moderated (to date we've only found around 12 of them

We were running v4.1.2 and have updated to v4.1.3 but nothing has changed. vB instalation is not corrupt.

Other mods installed and running are:
Skimlinks Plugin 2.0.7
Tab And Link Manager 4 4.2.0
vBulletin Blog 4.1.3
vBulletin CMS 4.1.3
vBSEO 3.5.2

Cheers - Neil :D

Does anyone else have this problem?

I can't duplicate it on our boards. I don't run any of the mods you have nor blog or CMS.

I would venture to say that maybe vBSEO 3.5.2, or Skimlinks Plugin 2.0.7, are what might be causing some of it.

Guys I get email every day now from people who can't register. I'll have to uninstall if I can't figure this out. Please help.

The one thing I can maybe help with a little.

Taking name recognition off may help, as there are many many people with the same username around the world and just because one is reported, doesn't tar them all with the same brush. We have something like 20 odd Robbo's registered on one of our forums alone, all with variations of the name but you can bet they nearly all tried plain old Robbo to begin with.

Hope this is of some help.

Will disable everything for a few days and see what happens then slowly reintroduce them one at a time over a week or so and see what happens.

Cheers - Neil :D