vb.org Archive - Anti-Spam Options - Spambot Stopper - Prevent Spambots from Registering

Page 3 of 5

Show 40 post(s) from this thread on one page

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vBulletin 3.8 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=235)

- - Anti-Spam Options - Spambot Stopper - Prevent Spambots from Registering (https://vborg.vbsupport.ru/showthread.php?t=294651)

kh99	05-13-2014 08:05 AM

Quote:

Originally Posted by RyanC (Post 2497540)

So I have this installed and it's working great on a very large forum.... However about five times a day I get an email from a user complaining of this error on registration attempt:

Any idea what could be causing this?

All I can say is that it doesn't look like anything from this mod. "whois" looks up domain names, so I would guess that maybe it's another mod that checks email domain or maybe the user's ip address. In any case, my mod doesn't include that file.

DamasGate

05-14-2014 12:46 AM

Installed

Impressed with the idea

Thank you

Prune Danish

12-18-2014 08:27 AM

I installed it. It's so nonintrusive that there was no reason not to.

It would be nice with a log -- just a simple text-file -- that records at least the IP and time stamps. Not only is such a log necessary if a legitimate user complains that he hasn't received a mail. I'm also unable to vote on your product if I don't know what it's doing. ;)

Another feature I miss -- but this is probably outside your scope -- is when a bot answers our human verification questions. It would be nice to know WHICH question the bot has successfully answered.

kh99	12-18-2014 09:55 AM

I understand. If you read the vb4 thread you saw that logging was mentioned a lot of times, but I never got around to adding it. I actually had a verison where all the data was collected for logging (including the answer to the hv question, if that option was turned on), but I just never got around to completing it. I haven't completely given up on the idea.

Prune Danish

12-19-2014 11:58 AM

Quote:

Originally Posted by kh99 (Post 2527887)

I understand. If you read the vb4 thread you saw that logging was mentioned a lot of times, but I never got around to adding it.

Thanks for answering.

No, I haven't looked at the vb4 thread. I was just referring to the top of the present page, where you write, "In the future, I'd like to add some simple logging and statistics". I tried registering at my site a few days ago (before installing Spambot Stopper) and for some reason I never got a confirmation mail, even though hundreds of spam accounts were being created at the same time.

If Spambot Stopper had been installed I would of course have blamed it.

Quote:

Originally Posted by kh99 (Post 2527887)

(including the answer to the hv question, if that option was turned on)

So it is possible?

That would be nice. We were hit by something like XRumer and several hundreds of accounts were added.

For years we have relied om questions/answers. When we were hit I switched to reCaptcha, which didn't slow them down in the slightest. Then I deleted the easiest questions (but not all) and added some new ones.

That solved the problem for now, but if Spambot Stopper could tell us which questions are being answered correctly -- before rejecting the bots -- we could stay one step ahead of the spammers.

kh99	12-19-2014 12:11 PM

Well, I'm not sure when or if I'll get around to updating this. Now that I think about it I don't think the vb3 version is even up to date with the vb4 version. But in case this helps, a while back I wanted to know the same thing. I was wondering if spammers were registering by making many guesses of the questions or if they somehow knew the answers. So I found the section of code that checked the answer, and I edited the file and put in code to write information to a log file. But I guess you have to be able to do at least basic php programming to do that.

I'm going to think about that. Maybe it's possible to make a simple mod for that that wouldn't require file edits.

Prune Danish

12-19-2014 07:34 PM

Quote:

Originally Posted by kh99 (Post 2528027)

So I found the section of code that checked the answer, and I edited the file and put in code to write information to a log file. But I guess you have to be able to do at least basic php programming to do that.

Great minds think alike. I did just that.

In the hook named "register_start / Check Elapsed Time" I added the following code after "$email = kh99_sbs_fix_string($vbulletin->GPC['email']);"

Code:

           $answer = $_REQUEST['humanverify']['input'];          

           $hash   = $_REQUEST['humanverify']['hash'];



           $questionx = $db->query_first("

                                SELECT answer

                                FROM " . TABLE_PREFIX . "humanverify

                                WHERE hash = '" . $db->escape_string($hash) . "'");

         

           $question_num = $questionx['answer'];



           $fd = fopen ($_SERVER["DOCUMENT_ROOT"]."/<some-path>/<some-file>", "a");

           if ($fd) {

                           $ipaddr = $_SERVER["REMOTE_ADDR"];

                           fwrite ($fd, date("r")." $ipaddr $username $email \n");

                           fwrite ($fd, "\t\t Question number $question_num: $answer  \n");

                           fclose ($fd);

                           }

Just alter "<some-path>" and "<some-file">" to proper names.

Thanks for the inspiration. I gave Spambot Stopper an "Excellent" vote. It's a good product and an excellent inspiration. :D

kh99	12-19-2014 07:53 PM

Thanks, glad you figured it out.

And just to be clear, I didn't mean to imply that you didn't know php programming, but of course not everyone does so I didn't want to assume that you'd be able to do it yourself.

Prune Danish

12-19-2014 08:00 PM

Quote:

Originally Posted by kh99 (Post 2528027)

I was wondering if spammers were registering by making many guesses of the questions or if they somehow knew the answers.

Wow. Within 10 minutes I have had 5 "visits" :eek: Each made 4 attempts but did not supply an answer.

Prune Danish

12-19-2014 08:02 PM

Quote:

Originally Posted by kh99 (Post 2528070)

And just to be clear, I didn't mean to imply that you didn't know php programming, but of course not everyone does so I didn't want to assume that you'd be able to do it yourself.

No, that's fine. I've coded some php, but this is the first time I've touched a hook. It did take several tries. :)

All times are GMT. The time now is 01:59 PM.

Page 3 of 5

Show 40 post(s) from this thread on one page

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01046 seconds Memory Usage 1,750KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)bbcode_code_printable (6)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (4)pagenav_pagelink (1)post_thanks_navbar_search (1)printthread (10)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: