vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 4.x Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=245)
-   -   Anti-Spam Options - [GlowHost] Spam-O-Matic - Spam Firewall stops forum spam (https://vborg.vbsupport.ru/showthread.php?t=248042)

Zarxrax 11-12-2017 10:31 AM

In the past couple of months I have seen a big increase in spam posts, and the automoderation in this addon doesnt seem to be working like I expect it should. For instance, I have it set to automoderate posts with more than 1 link, but I frequently see posts get through with more than 1 link. I also have "live stream" and "live streaming" listed in my bad words, but almost every spam posts contains these words. Only maybe 10% of spam posts actually end up in moderation.

Any ideas what could be wrong?

In Omnibus 11-12-2017 11:19 AM

Quote:

Originally Posted by Zarxrax (Post 2591045)
In the past couple of months I have seen a big increase in spam posts, and the automoderation in this addon doesnt seem to be working like I expect it should. For instance, I have it set to automoderate posts with more than 1 link, but I frequently see posts get through with more than 1 link. I also have "live stream" and "live streaming" listed in my bad words, but almost every spam posts contains these words. Only maybe 10% of spam posts actually end up in moderation.

Any ideas what could be wrong?

This product hasn't been updated in over four years and it has major security holes. It should probably be removed from the downloads section and quarantined. That's what is wrong.

Zarxrax 11-12-2017 11:38 AM

Quote:

Originally Posted by In Omnibus (Post 2591046)
This product hasn't been updated in over four years and it has major security holes. It should probably be removed from the downloads section and quarantined. That's what is wrong.

What would you recommend that I do for spam protection then? It's a real problem on my board and akismet doesnt catch it.

In Omnibus 11-12-2017 12:24 PM

Quote:

Originally Posted by Zarxrax (Post 2591047)
What would you recommend that I do for spam protection then? It's a real problem on my board and akismet doesnt catch it.

StopForumSpam will catch a good deal of it if set up to check both IP addresses and e-mail addresses. Unfortunately, it won't catch everything.

The new Recaptcha will catch virtually all spambots but human spammers can still bypass it.

I find the most effective spam tool is still using the Question And Answer function. If you ask questions that only real people with a genuine interest in your forum can answer, and that don't have "yes" or "no" or "true" or "false" type answers it will stop most of the spam most of the time.

If, for example, you are a math forum, and you ask "How many pieces of pii are in a circle?" only a math nerd would even understand the question. It's not something answerable by a bot or most human spammers.

handruin 11-12-2017 12:27 PM

I had the same issue but I can help you fix this. The issue is that the code only looks for "http" urls and not "https", among others when acting on the auto moderation.

Download this plugin and extract the files on your drive. Open the file named "product-glowhostspamomatic.xml" with a text editor.

Search for all instances of this line; I believe there are two of them.

Code:

$link_count = substr_count(strtolower($this->fetch_field('pagetext', 'post')), 'http:');
Replace that line so that it looks like this:

Code:

$url_pattern = '#[-a-zA-Z0-9@:%_\+.~\#?&//=]{2,256}\.[a-z]{2,4}\b(\/[-a-zA-Z0-9@:%_\+.~\#?&//=]*)?#si';
$link_count = preg_match_all($url_pattern, strtolower($this->fetch_field('pagetext', 'post')));
$link_count += substr_count($this->fetch_field('pagetext', 'post'), '@');

This change will catch all variations of URLs being posted in your forum, not just if they start with http or https so this does a much better job of catching spam.

Under Admin > Manage Products > Add/Import Product:
Once you've made the changes, you can install the plugin again but make sure to select the radio button to "Allow Overwrite".

Zarxrax 11-12-2017 12:43 PM

Quote:

Originally Posted by In Omnibus (Post 2591049)
StopForumSpam will catch a good deal of it if set up to check both IP addresses and e-mail addresses. Unfortunately, it won't catch everything.

The new Recaptcha will catch virtually all spambots but human spammers can still bypass it.

I find the most effective spam tool is still using the Question And Answer function. If you ask questions that only real people with a genuine interest in your forum can answer, and that don't have "yes" or "no" or "true" or "false" type answers it will stop most of the spam most of the time.

If, for example, you are a math forum, and you ask "How many pieces of pii are in a circle?" only a math nerd would even understand the question. It's not something answerable by a bot or most human spammers.

LOL, the stopforumspam website links to this plugin as the way to implement it on vbulletin 4.
I also have Question and Answers set up on registration that can not be solved by a bot, but that isn't helping lately. I would imagine that any good bot software would keep a database of questions and answers so they only have to be answered once, anyways.

Zarxrax 11-12-2017 12:47 PM

Quote:

Originally Posted by handruin (Post 2591050)
I had the same issue but I can help you fix this. The issue is that the code only looks for "http" urls and not "https", among others when acting on the auto moderation.

Download this plugin and extract the files on your drive. Open the file named "product-glowhostspamomatic.xml" with a text editor.

Search for all instances of this line; I believe there are two of them.

Code:

$link_count = substr_count(strtolower($this->fetch_field('pagetext', 'post')), 'http:');
Replace that line so that it looks like this:

Code:

$url_pattern = '#[-a-zA-Z0-9@:%_\+.~\#?&//=]{2,256}\.[a-z]{2,4}\b(\/[-a-zA-Z0-9@:%_\+.~\#?&//=]*)?#si';
$link_count = preg_match_all($url_pattern, strtolower($this->fetch_field('pagetext', 'post')));
$link_count += substr_count($this->fetch_field('pagetext', 'post'), '@');

This change will catch all variations of URLs being posted in your forum, not just if they start with http or https so this does a much better job of catching spam.

Under Admin > Manage Products > Add/Import Product:
Once you've made the changes, you can install the plugin again but make sure to select the radio button to "Allow Overwrite".

Thanks, I think that might actually be the problem. I'm going to look into the possibility of turning off this plugin altogether if I can find another solution, but if not, I will make these edits.

postcd 12-11-2017 06:03 PM

Skip this message, my problem. Solved

Hello, i am getting following error many times, and i am getting it only regarding this vB module, and from multiple vB forums hosted on same server of mine:

Quote:

Invalid SQL:
INSERT INTO glowhostspamomatic_log(`date`, `ip`, `email`, `username`, `message`, `is_blocked`, `user_hash`) VALUES (now(), "85.174.*.*", "*@yandex.ru", "*", "Spam-O-Matic Tagged email - *@yandex.ru Unable to connect to StopForumSpam.com. This is probably due to some temporary problems on their website: Unable to check. User passed to vBulletin registration system per your settings at \'StopForumSpam: Query Connection Errors\'", "0", "**long*string*here");;

MySQL Error : MySQL server has gone away
Error Number : 2006
Request Date : Monday, December 11th 2017 @ 10:41:15 AM
Error Date : Monday, December 11th 2017 @ 10:42:26 AM
Script : http://mysitehere.com/register.php?do=addmember
Referrer : https://mysitehere.com/register.php?do=addmember
IP Address : 85.174.*.*
Username : *usernamehere*
Classname : vB_Database
MySQL Version :
MySQL server also gone away everytime i try to report spammer using this vB module (Glowhost spam-o-matic)

It do not appear like stopforumspam banned my server IP:
Quote:

curl http://api.stopforumspam.org/api?username=spammer&json^C
[1]+ Done curl http://api.stopforumspam.org/api?username=spammer
root@host1 [/]# curl "http://api.stopforumspam.org/api?username=spammer&json"
{"success":1,"username":{"frequency":0,"appears":0 }}r
I can login my SFS account, no problem.
UPDATE: i found these timeouts happening only from time to time. And during one timeout i tried to run this command on my hosting server: wget -O /dev/null stopforumspam.com and it timeout and shown SFS IPs and i searched logs for these IPs and also firewall and found these SFS IPs was banned on my firewall because somehow ended up in abuseipdb and stopforum spam blocklist, it could be also my fault.

Skip this message, my problem. Solved

BasilFawlty 02-09-2018 02:23 PM

Are there any plans to update this mod to work with Version 5.X of vBulletin? (I did a search of this thread but came up empty).

GlowHost.com 02-09-2018 04:49 PM

There are no plans for vBulletin 5. The code base is too different and it would have to be written from scratch it looks like.


All times are GMT. The time now is 06:15 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.04729 seconds
  • Memory Usage 1,763KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (4)bbcode_code_printable
  • (7)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (3)pagenav_pagelinkrel
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete