It was installed correctly, I have the vB 4 P Suite, I do have VBSEO installed.
I made the new reg path a few different things but no joy, just redirected to the home page every time...

Works perfectly in Vb 4.2.1 + Vbseo
Compliments!

Short of disabling every single mod besides this one, no not really.

If all mods disabled but this- see if it works. If ti does, re-enable mods 1 by 1 until it stops working.

Well the reason you get sent to the forum homepage is because you have VBSEO. VBSEO does that for any missing page.

Your symptoms therefore are simply that of an incorrect file name. There is no logical reason if you specify xxx.php and have a file called xxx.php it shouldn't work.

Remember file names ARE case sensitive on most servers.

If you go to the URL of the new file directly, does that work? Like http://site.com/xxx.php ? If that works the file name exists and is correct. If it doesn't work the file is not correct or not uploaded to the correct location.

Installed and working on 4.2.1. Voted for MOTM and would highly recommend this mod.

You might want to put a reminder in big bold letters to remember to rename register.php when/if someone upgrades vB. If they forget to do that after an upgrade, they will have problems.

Guys, i change register.php everywhere. but look https://vborg.vbsupport.ru/external/2013/07/33.png
when i click register on main page, nothing change. when i click a have blank screen.

In your Admin CP -> Plugin Manager, Do you have any other modifications that have a plugin on the hook replacement_vars?

If so, temporarily disable those mods and see if anything changes?

We had to install this earlier this week due to having DDOS's all weekend. Since installation, the attacks have stopped and our server hasn't had any issues.

If I understand step 5 correctly, you just want us to open up activateaccount and activateaccount_change and change register.php in 3 places in each file, for a total of 6 edits? Correct?

Thanks :)

Correct

Search your phrases for "register.php" as I found a few other locations to edit aside from the two phrases listed and one is a notice as well. This helped a URLJet client, his register.php page was being hammered and I've been recommending this to others with a similar issue regarding register.php activity.

Tips:
- If you're simply being hammered by spam then another anti-spam mod might be your best bet.
- If your register.php page is being what almost seems like ddos'd (denial of service) with so much activity that its causing issues this mod should help.

Nice idea Joe :D.

register.php shows up in a number of phrases but it is only the email body phrases that need manual updating, the other phrases all get replaced at runtime as needed.

Thanks for this. I installed it a couple of days ago and it worked fine.

You know, this mod is working well on two fronts for me.

1 - A way of preventing "register.php" from being used by bots.

2 - A real good honeypot when combined with the other mod, "really fast registration", and turning off registration at the vb oem level.

Saweet!

Thanks. Please click the "Mark as Installed" in the first post when you get a chance. :)

Holé Molé ! ...Marked as installed and thank you for this great mod if I haven't said so before. Love it!

great mod, installed!
Now I have to test it for a few days to see if it stops spam, but I'm sure it do it very well!

thnak's!

Ever since this hack has been installed I've noticed that new registrations come through WITHOUT birth dates.

Is there a way to correct this?

I can't replicate the issue, I just did a test registration on my forum and the birth date is showing in the profile fine.

Are you sure it is this mod and and not my "Really Fast Registration" mod you are talking about?

I don't use Really Fast Registration.

BTW, I can't replicate it either, meaning, whenever I try to register I come across the birth date section and can't get past it. I've also tried registering on my phone, same thing. Yet everyone else seems to breeze right through the birth date section :(

I've just noticed that every registration since this has no birth date showing. I'm trying to track down why this is. At first I thought it was some sort of backdoor registration (like the vB install folder issue) but I don't have a install folder so that couldn't be it. There's one other thing that it might be, but if anyone else notices that you have new registrations that have no birth date (ACP > Users) please post here.

I use this mod, as well as RFR.

But I use it differently. My new members dont have the birthday field filled, as RFR doesnt require it at all. But I have regular registration shut off, with Rename of register.php. I use the rename to eliminate some of the predestined bot traffic to the register page, and by shutting off regular vb registration, the renamed register page just becomes a honeypot error page.

Not one spammer since doing it this way, and an increase of registrations by real people.
(may not last long, but then again, what does anymore lol)

I too would be interested if anyone else is seeing birthdays not come through.

love this mod... thanks

Thanks, please click on the 'mark as installed' box.

https://vborg.vbsupport.ru/external/2013/09/18.jpg

I installed this and like...Does this work with spam o matic too?

I have both installed and it seems to be OK. The only other hack that you need to be aware of is the advanced registration hack, because the invites address also needs to be changed. Found that out yesterday :D

This is amazing. I was getting hammered with registrations.

Saw this today..

http://www.vbulletin.com/forum/forum...d-to-send-spam

If you don't have access to vB.com, basically it is a post that suggests the register.php is being used as an exploit.

"My Hosting says vbulletin register.php can be injected to send spam".

Changed the name using this mod...

Thanks again....

I think that as unverified, and one persons report.

I think its an open relay on his server, but I could be wrong.

edit to add: I am wrong about the relay, host verified. But I am not yet suspect of the register.php module.

Safer than sorry..

I think the mod was developed for a purpose..

Was looking at our plug in section today and noticed that this one was turned off. I don't remember doing it. Is it turned off by default? Can someone see if there's is turned off also? Thanks.

It is indeed set to inactive in the original files. :) I would not enable it unless BOP says to do so.

Thanks for the response Ozzy :up:

Not a problem. :)

It was developed for the purpose of renaming register.php. :D I am unaware of any exploit in register.php and even if there was, this would not fix it, just rename it.

Yep, Joe, got it.....

I too use the mod for the purpose of renaming the register.php...
It does what it says on the tin! :cool:

It is me who has a ticket regarding the host passing on logs to be investigated by vb and so far we haven't heard anything back.

Anyways let me clarify for this mod that the attack happened before installing this mod so it has nothing to do with "Rename register.php by BOP5".

This mod was installed afterwards and it is simple to install and works as its suppose to so don't worry about the mod as again it was installed AFTER the attack on register.php :)

This was easy to install and works great! I also use Spam o Matic which works great also, but I was getting tons of threads I was having to review for moderation. Ever since I have changed the name of register.php, I have not had a single spammer bot register. MOTM nominated!

Thanks!

I use the above mentioned also...and Spam hammer, I have had nothing at all register. no users, no bots, nothing....

I guess I should create more content?

Spam hammer does discard a lot of crap... It works...
Spam o Matic has proved that it works also..

BOP5 mods also do exactly what they are designed to do...

These folks protect and enhance...

I love this mod , believe me when I say that everyone should use this now ! ...thank you BOP5 !

I have to say that the idea is simple in itself and at the same time, quite brilliant..
It should hold them off for a while..:up: