vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 3.8 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=235)
-   -   Miscellaneous Hacks - Enhanced Captcha Image Verification - stop bots from signing up!! (https://vborg.vbsupport.ru/showthread.php?t=132482)

lukemax 12-06-2006 03:50 AM

I uploaded an Image Verification directory to the images folder, do I rename it to verification?
Also, where do I upload the xml file from the Admincp?

lukemax 12-06-2006 05:54 PM

This is my first mod. I see a verification directory, does that go into the images folder? Also, I don't get where to import the xml file and what it does?
Thanks

steadicamop 12-06-2006 05:58 PM

The verification directory needs to go in the /images directory - just make sure that when you click in the verification directory that the image filenames are the next thing you see.

The product XML is installed through the AdminCP -> Plugins & Products -> Manage Products then scroll down and click on [Add/Import Product] select the XML file in there and it will automatically install.

HTH

Jason

lukemax 12-07-2006 03:15 AM

Wow, thats magic in my book.
Is there a way I can turn it off and only turn it on when I start to get spammed?
(Like from the AdminCP?)

phpdevrus 12-07-2006 06:07 AM

nice looks good and cant wait to see the next version.

i thought you should come up with a few other verification tests then randomly show one and if incorrect randomly show another. since the tests will be different it wont be so easy to bypass unless it is a real person signing up.

:-)

lazytown 12-08-2006 12:12 AM

Other users are correct -- this can easily be defeated if it gets popular enough. The problem is an easy 1/4 chance to get it right, and the bot could just try again and again as suggested. Even using different IPs/etc. I loved this idea, but unfortunately I have to go with the other method (asking questions) which is more time-consuming to make, but are unique to each forum and require real user input (that has infinite possibilities).

It will help people until there is a crack, so thanks for doing it.

-vissa

delmarva 12-10-2006 09:57 PM

Very nice... Is there any way to change the pictures and the text to somehow match the site you are using it on? For example, I am hosting a fishing forum. Could the folks who register see a certain type of fish, and choose the right one? This might be more interesting and not so childish to these old fogies who sign up. Thanks for you patience.

steadicamop 12-11-2006 02:58 PM

Quote:

Originally Posted by delmarva (Post 1135992)
Very nice... Is there any way to change the pictures and the text to somehow match the site you are using it on? For example, I am hosting a fishing forum. Could the folks who register see a certain type of fish, and choose the right one? This might be more interesting and not so childish to these old fogies who sign up. Thanks for you patience.

Yeah this is easy - just remove all the images that come with the package and use your own (it looks neater if you use same size images), and name them something descriptive as the script takes the filename for the answer (ie .... Fish.jpg becomes Fish) - it has the extension stripped.

Jason

delmarva 12-11-2006 03:14 PM

Very cool. Thanks!

momlwt 12-14-2006 05:01 PM

Having same problem with images not showing. GD is installed and path is going to the right place.

On Windows server vB 3.6.4 I would really like to use this but had to disable for now. Any help would be appriciated.

vbreal 12-14-2006 10:10 PM

i like

yesfans 12-15-2006 12:23 AM

INSTALLED, works fine on 3.6.0

Bluetiereign 12-15-2006 12:51 PM

How about instead of chosing just one image - you had to chose 2 or 3 of them correctly in the random order they were presented ?

I gave up and have resorted to just approving members manually. The people programming these bots are using some very recognizable footprints when registering (and leaving some board specific questions unanswered ) - so they stand out like a sore thumb when registering. They have now resorted to spamming our 'contact us' link.

joeysdad 12-15-2006 02:48 PM

Just add all bots not on this to the .htaccess file, this will keep them out. Make sure you place it in your root dir.

Quote:

RewriteEngine On
RewriteCond %{HTTP_USER_AGENT} ^CherryPicker [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^Extreme\ Picture\ Finder [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^HTTrack [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^JoBo [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^JOC\ Web\ Spider [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^MSIECrawler [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^ninja [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^Offline\ Explorer [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^SiteCopy [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^SiteSnagger [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^SiteSucker [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^teleport [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^WebBandit [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^WebCopier [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^Webdup [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^WebReaper [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^WebSnake [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^WebStripper [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^WebMiner [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^x-Tractor [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^WebZIP [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^Xaldon\ WebSpider [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^mister\ pix [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^PICgrabber [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^psbot [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^Mozilla/2.0\ \(compatible;\ NEWT\ ActiveX;\ Win32\) [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^WebCollector [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^WebPix [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^EmailCollector [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^EmailMagnet [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^EmailReaper [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^EmailWolf [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^ExtractorPro [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^NICErsPRO [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^EmailSiphon [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^WebEMailExtractor [NC,OR]
RewriteCond %{REMOTE_ADDR} ^63.148.99.2(2[4-9]|[3-4][0-9]|5[0-5])$ [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^NPBot [NC,OR]
RewriteCond %{REMOTE_ADDR} ^12.148.196.(12[8-9]|1[3-9][0-9]|2[0-4][0-9]|25[0-5])$ [NC,OR]
RewriteCond %{REMOTE_ADDR} ^12.148.209.(19[2-9]|2[0-4][0-9]|25[0-5])$ [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^TurnitinBot [NC,OR]
RewriteCond %{REMOTE_ADDR} ^64.140.49.6([6-9])$ [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^ClariaBot [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^Diamond [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^[a-z]+$ [NC]
RewriteRule ^.* - [F,L]

Keyser S?ze 12-21-2006 05:17 AM

im not new to hacks, i wish this had an install.txt but i think ive done everything right, i have GD libraries installed and i set the right permissions on the files, yet still images dont show they are just dead Xs

im also using the hack that u have to have a minimum of posts on certain words or it is set to moderation, that hack has seem to stopped bots

Silverstangs 12-21-2006 02:50 PM

Wow I like this hack I wish there was one for 3.0.0... I guess I'm gonna need to upgrade a few dozen forums...

**I need more $$$ to fund that thou.. maybe one forum at a time..

crazymeezer 12-23-2006 08:59 AM

This is wonderful, has stopped all spam sign ups dead. Thanks so much!

CrashfAB 01-04-2007 01:42 PM

Will have to give this a try...

grizwald 01-05-2007 04:42 AM

thanks for this, it is working great on my website:

http://moi-alizee.us/forums/register.php

masterme 01-06-2007 01:35 PM

Nice one, specialy because my visitors are not able to see the letters/numbers in the standard way.

SteveMoody 01-11-2007 10:30 AM

I've just installed this on my website now. Only a low traffic site but i seem to have been getting 4-5 bots signing up for every 1 member over the last couple of weeks

seg 01-16-2007 06:57 PM

Nice mod ... not sure if anyone brought this up, but if the SPAM bot visits register.php?clicked=2 then they pass by the image test. Wouldn't it be better to replace the Image Verification on the main registration page with this verification, similar to how KittenAuth works? Just wanted to point out a weakness.

seg 01-16-2007 07:00 PM

Actually I tested that url again after restarting my browser and this time I was blocked. Thanks!

Quote:

Originally Posted by seg (Post 1160834)
Nice mod ... not sure if anyone brought this up, but if the SPAM bot visits register.php?clicked=2 then they pass by the image test. Wouldn't it be better to replace the Image Verification on the main registration page with this verification, similar to how KittenAuth works? Just wanted to point out a weakness.


Nathan2006 01-17-2007 05:19 AM

Thanks Jason

This is great! :)

Install

Keyser S?ze 01-17-2007 07:20 AM

are there any plans to update this so it supports imagemagic?

great mod

steadicamop 01-19-2007 08:26 PM

Quote:

Originally Posted by Keyser S?ze (Post 1161249)
are there any plans to update this so it supports imagemagic?

great mod

I'm not too clued up on ImageMagic - will see what I can come up with.

Jason

oberheimhaven 01-20-2007 01:53 AM

Warning: dir(images/verification/) [function.dir]: failed to open dir: No such file or directory in /register.php(202) : eval()'d code on line 6

Fatal error: Call to a member function on a non-object in /home/.hiam/niceman/musiciansquarters.com/forums/register.php(202) : eval()'d code on line 7

ANY SUGGESTIONS

gersforum@gmail 01-20-2007 01:54 AM

Works a treat - well done!

steadicamop 01-20-2007 08:00 PM

Quote:

Originally Posted by oberheimhaven (Post 1163181)
Warning: dir(images/verification/) [function.dir]: failed to open dir: No such file or directory in /register.php(202) : eval()'d code on line 6

Fatal error: Call to a member function on a non-object in /home/.hiam/niceman/musiciansquarters.com/forums/register.php(202) : eval()'d code on line 7


ANY SUGGESTIONS

This should solve it - your forums directory is in a subdirectory from the domain (which mine isn't) - if you go to the AdminCP -> Plugins & Products -> Plugin Manager -> Extra user verification and click Edit.

In there you will see this code:

Code:

$d = dir('images/verification/');
This is from the forum root - so you will need to add your /forums directory, so it should look like this:

Code:

$d = dir('forums/images/verification/');
That should hopefully solve the issue - this is a general rule - if your forum is in a subdirectory, this would need to be changed.

Let me know if this works.

Jason

oberheimhaven 01-21-2007 04:45 PM

NOPE
Warning: dir(forums/images/verification/) [function.dir]: failed to open dir: No such file or directory in /register.php(202) : eval()'d code on line 6

Fatal error: Call to a member function on a non-object in /home/.hiam/niceman/musiciansquarters.com/forums/register.php(202) : eval()'d code on line 7

oberheimhaven 01-21-2007 04:49 PM

I put the folder everywhere lol I can think of change in admin like you told me and still this comes up any suggestions looks like Im still not putting the folder in right place sorry to be a pain!!! Hey I reg from cmps is that the problem where would I put??? I will keep trying thanks and sorry for being stupid ;p

Sean S 01-21-2007 04:58 PM

very nice, I like it, thank you.

Could be educational too for english, hehe.

steadicamop 01-21-2007 05:30 PM

Quote:

Originally Posted by oberheimhaven (Post 1164402)
I put the folder everywhere lol I can think of change in admin like you told me and still this comes up any suggestions looks like Im still not putting the folder in right place sorry to be a pain!!! Hey I reg from cmps is that the problem where would I put??? I will keep trying thanks and sorry for being stupid ;p

You need to place the images/verification folder in the same directory as register.php - if you have a forum subdirectory, then make sure it goes from there - if you still have problems PM me your forum details and I'll take a look and see what I can do.

Jase

Rushyman 01-26-2007 11:12 AM

Awesome addition. I really could do with it also being in the contact us page. Is there a way to add that?

steadicamop 01-26-2007 07:01 PM

Hmmm interesting thought - should be fairly simple to do,. might be an add on or release as a fresh addition

steadicamop 01-27-2007 05:37 PM

Quote:

Originally Posted by Rushyman (Post 1167686)
Awesome addition. I really could do with it also being in the contact us page. Is there a way to add that?

Check this : https://vborg.vbsupport.ru/showthrea...hreadid=137669

basskiller 01-27-2007 06:02 PM

great hack. I have been hit by these suckers for awhile now. Xrumor as well as a few others..

Thanks!!!

NFLfbJunkie 01-28-2007 04:57 PM

Someone posted on post #94 to modify the .htaccess file to stop spam bots. Is this a solution? If so, do I use the current .htaccess file that is in my forum's root directory to paste the information?

steadicamop 02-02-2007 07:37 PM

Quote:

Originally Posted by Junkie (Post 1169131)
Someone posted on post #94 to modify the .htaccess file to stop spam bots. Is this a solution? If so, do I use the current .htaccess file that is in my forum's root directory to paste the information?

I can't say whether this will work or not - give it a try, you have nothing to lose.

Prince 02-03-2007 01:13 AM

I just installed it on 3.6.3 and it works fine.


All times are GMT. The time now is 04:53 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01544 seconds
  • Memory Usage 1,827KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (2)bbcode_code_printable
  • (8)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (40)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete