vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 4.x Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=245)
-   -   Anti-Spam Options - Rename register.php by BOP5 (https://vborg.vbsupport.ru/showthread.php?t=297834)

john7911 02-22-2014 10:49 AM

thank you ;)

BirdOPrey5 02-22-2014 12:03 PM

Quote:

Originally Posted by jkcerda (Post 2482968)
having issues here


clicking on "link to Edit e-mail body & phrases"

default product is VB,
$vbphrase[activateaccount]


I see no way of "editing:" it, above text is grayed out.

I'm sorry when I say "Edit" on a phrase I mean create a Translation (to English is fine) - The "translation" always overrides the original text.

So for your language(s) click the "Copy Default Text" button and then make the changes and save.

jkcerda 02-22-2014 06:31 PM

Quote:

Originally Posted by BirdOPrey5 (Post 2483044)
I'm sorry when I say "Edit" on a phrase I mean create a Translation (to English is fine) - The "translation" always overrides the original text.

So for your language(s) click the "Copy Default Text" button and then make the changes and save.

ok, so copy the entire text into the translation box, make the changes & save?

BirdOPrey5 02-22-2014 06:42 PM

Exactly.

Please also "Mark as Installed."

jkcerda 02-22-2014 08:15 PM

Quote:

Originally Posted by BirdOPrey5 (Post 2483107)
Exactly.

Please also "Mark as Installed."

Will do. Last question. Does the default product stay at vBulletin. Or do I change it from the drop down ?

BirdOPrey5 02-22-2014 08:47 PM

Keep it vBulletin.

jkcerda 02-22-2014 10:47 PM

getting a DB error
Quote:

The Single String Archer database has encountered a problem.
Please try the following:
Load the page again by clicking the Refresh button in your web browser.
Open the www.singlestringarcher.com home page, then try to open another page.
Click the Back button to try another link.
The www.singlestringarcher.com forum technical staff have been notified of the error, though you may contact them if the problem persists.

We apologise for any inconvenience.
I did not get a "you have registered" message.
test users pop up in the "users awaiting e-mail confirmation".
I have not received e-mail for confirmation.

tried 2 different test users with different e-mails.

https://scontent-a-sjc.xx.fbcdn.net/...55260885_n.jpg

BirdOPrey5 02-22-2014 10:54 PM

This mod doesn't alter the database in anyway- it is likely a conflict with another mod.

I would need to see the text of the actual database error- it should be emailed to the tech address set in config.php or in your MySQL error log.

jkcerda 02-22-2014 10:57 PM

Quote:

Originally Posted by BirdOPrey5 (Post 2483127)
This mod doesn't alter the database in anyway- it is likely a conflict with another mod.

I would need to see the text of the actual database error- it should be emailed to the tech address set in config.php or in your MySQL error log.

I'll fish for it + & try again.

ok, regstered from my phone and it worked fine, not sure if things are cached on my PC or why things flew fine from the phone, going to try a different PC.

worked fine from different PC with a new user & e-mail.

SOME users are reporting errors.I'll update when I get the logs

kisanjong 03-04-2014 04:57 AM

Great Mod thanks BOP :), this should be a standard feature in vb!

ggrimes620 03-04-2014 10:15 PM

Awesome mod!

lazytown 03-20-2014 07:17 AM

First, thank you for posting this and trying to help. I installed this along with other suggestions from OZZY.

Renaming "register.php" is now fairly useless against the latest spam software. It was a good idea and probably once worked quite well,, but spam software (xrumer, etc) must now just be looking at the register link to figure out the URL, so the filename really doesn't matter anymore. I renamed register to completely random numbers/letters, two separate times, and all settings are correct. Within 30 minutes, the spambots are filling out forms on the new register filename. I know they are getting past the rename plugin trick because I'm getting PMs with them being blocked by a separate hostname spam plugin (which does help eliminate some spam).

I wonder if implementing a javascript generated version of the link to register.php (or whatever we rename it to) would block them again for a while, until they figure a way around that as well. That is what some websites use to reduce email harvesters.

addamroy 05-23-2014 12:29 AM

how do I keep stumbling on YOUR mods.

Anyway, couple inquiries for you.

What happens if I have already made some manual template edits changing register.php to something else? For example the register link in the top right corner, I changed where that links to, also changed the URL in the 'no permission' phrases, etc things of that nature.

What I did was took the registration form from your OTHER mod, really fast registration, and put it into a new custom vbulletin page. So naturally I went through a few of the templates/phrases and added my own URL.

My concern is whether or not installing this mod will effect all of the adjustments. I figure I might as well rename register.php to prevent the last bit of spammish traffic that might be going directly to that URL to register, rather than clicking the register button itself, of coarse.

john7911 05-23-2014 07:47 AM

Great Mod thanks BOP :)

BirdOPrey5 05-23-2014 06:36 PM

Quote:

Originally Posted by addamroy (Post 2499044)
how do I keep stumbling on YOUR mods.

Anyway, couple inquiries for you.

What happens if I have already made some manual template edits changing register.php to something else? For example the register link in the top right corner, I changed where that links to, also changed the URL in the 'no permission' phrases, etc things of that nature.

What I did was took the registration form from your OTHER mod, really fast registration, and put it into a new custom vbulletin page. So naturally I went through a few of the templates/phrases and added my own URL.

My concern is whether or not installing this mod will effect all of the adjustments. I figure I might as well rename register.php to prevent the last bit of spammish traffic that might be going directly to that URL to register, rather than clicking the register button itself, of coarse.

Any template instances/links to register.php should be automatically changed by this mod to the new value. If you created a custom php file then you may need to manually edit the php file with the new register.php name however really fast registration was coded to work with this mod out of the box.

gregmlb 05-27-2014 01:40 AM

This mod works great - except when a potential registrant is browsing using ForumRunner. If he or she hits the "Register" button through ForumRunner, then a 404 Page Not Found error pops up (because register.php no longer exists).

How can this be fixed so mobile users can successfully register after installation of this mod?

BirdOPrey5 05-27-2014 12:50 PM

Quote:

Originally Posted by gregmlb (Post 2499548)
This mod works great - except when a potential registrant is browsing using ForumRunner. If he or she hits the "Register" button through ForumRunner, then a 404 Page Not Found error pops up (because register.php no longer exists).

How can this be fixed so mobile users can successfully register after installation of this mod?

Interesting... thanks for letting me know. I'll work on some kind of ForumRunner fix. My initial thought is a copy of register.php but modified so it only works for users in ForumRunner.

CaptainAwesome 05-29-2014 03:11 AM

When i click through the "Link to Edit Email Body Phrases", it takes me to the Email Body Text Page. When i click on edit, it takes me through to a page for the "activeaccount" but i'm unable to edit anything.

How do i edit the activateaccount and activateaccount_change parts?

lillylissy 05-30-2014 02:36 PM

Thank you BirdOPrey5 for this modification!

For PhotoPost-Users a code adjustment is necessary:

Line 380 of vb3.php located in the forums subdirectory of their product:

PHP Code:

$regtext " &middot; <a href=\"{$Globals['vbulletin']}/register.php?action=signup\">{$Globals['pp_lang']['register']}</a>"


madness85 05-31-2014 06:17 AM

the tab email activation codes in admincp at the top of a users profile page or in quick user links still takes me to register.php please help :)

BirdOPrey5 05-31-2014 05:02 PM

Quote:

Originally Posted by CaptainAwesome (Post 2499886)
When i click through the "Link to Edit Email Body Phrases", it takes me to the Email Body Text Page. When i click on edit, it takes me through to a page for the "activeaccount" but i'm unable to edit anything.

How do i edit the activateaccount and activateaccount_change parts?

You don'r really edit a phrase- you provide a translation. So even if your site is English, press the button to copy the original text to the translation box, then make the changes in the translation, and save. A translation always override the default phrase if it exists for that language.

Quote:

Originally Posted by madness85 (Post 2500209)
the tab email activation codes in admincp at the top of a users profile page or in quick user links still takes me to register.php please help :)

I just double checked, this should be working as long as the Admin CP plugin part of the mod is active, and it would be by default. All I can think of is perhaps some other mod running on an Admin CP hook is causing a conflict.

You can always send the emails by going to the URL directly-

Code:

http://www.domain.com/forum_dir/registerXXX.php?do=requestemail
Where you obviously replace the values unique to your site. registerXXX.php should be replaced with the custom value you set for your site.

chris.t 06-20-2014 10:46 PM

Trying to install Mod (Novice I might add). in VB4.2.2

I got through #1....

I have a manage products and a plugin manager....don't see "Mod Settings" so where do I go? and once I get there(wherever there is) what do I do to complete step #2?

and is step #3 just changing the name of the file, using like filezilla?

thanks for any help,,,chris

Basic Instructions
1) Import XML File
2) Go to mod settings in Admin CP
3) Rename your register.php file via FTP or some other means- make it a unique value but only use basic letters, numbers, underscores, or hyphens. Something like "joeregister999.php"
4) In the mod settings, set the value of register.php to the new file name you chose.
5) If you require email verification during registration follow the next setting in the Admin CP and edit the phrases listed (activateaccount and activateaccount_chnage phrases in Email Body)
6) Finally, if you use Facebook Connect on your forum make the manual file edit of class_bootstrap.php as instructed.

chris.t 06-21-2014 12:30 AM

found it......does it matter that everyone can see what you renamed the register.php file to?

thanks

chris

chris.t 06-21-2014 12:36 AM

I got this all set up and turned my site back on......spammers registering started immediately....3 or 4 a minute.....does this MOD do any good?

chris

ForceHSS 06-21-2014 01:09 AM

Quote:

Originally Posted by chris.t (Post 2502871)
I got this all set up and turned my site back on......spammers registering started immediately....3 or 4 a minute.....does this MOD do any good?

chris

this does not stop spammers it never worked for me

Max Taxable 06-21-2014 02:01 AM

Quote:

Originally Posted by ForceHSS (Post 2502875)
this does not stop spammers it never worked for me

It IS one of our recommended anti-spam Mods that is safe to skip, really.

ForceHSS 06-21-2014 03:35 AM

Quote:

Originally Posted by Max Taxable (Post 2502877)
It IS one of our recommended anti-spam Mods that is safe to skip, really.

It does not work as a stand alone but just renaming the register.php will not stop a bot if the link is put on the page for guests to see even if it is hidden bots will find it in time. When i added this sometime ago i hidden the register link with in 24 hrs bots found the new renamed one and try to spam it. So now I have other things put in place and dont get any bots even trying anymore

smirkley 06-21-2014 10:25 AM

If you are buiulding a honeypot, this mod works very well.

madness85 06-21-2014 03:05 PM

Quote:

Originally Posted by ForceHSS (Post 2502884)
It does not work as a stand alone but just renaming the register.php will not stop a bot if the link is put on the page for guests to see even if it is hidden bots will find it in time. When i added this sometime ago i hidden the register link with in 24 hrs bots found the new renamed one and try to spam it. So now I have other things put in place and dont get any bots even trying anymore

Would you like to share?

Max Taxable 06-21-2014 03:30 PM

Quote:

Originally Posted by ForceHSS (Post 2502884)
It does not work as a stand alone but just renaming the register.php will not stop a bot if the link is put on the page for guests to see even if it is hidden bots will find it in time. When i added this sometime ago i hidden the register link with in 24 hrs bots found the new renamed one and try to spam it. So now I have other things put in place and dont get any bots even trying anymore

I too came to doubt its effectiveness and have removed it from our list of recommended anti-spam modifications.

CAG CheechDogg 06-22-2014 07:26 AM

I have not had any problems with spam at all since I installed this ... actually not one single spam account at all! And it has been since the day he released this mod that I have not had any spam or bots hitting my new register.php file ...

BirdOPrey5 06-22-2014 09:25 AM

There is no one perfect anti-spam mod... The main purpose of this mod was to help people who were having bots specifically target register.php.

Some people have found it effective in general spam prevention, some have not- it is up to you if the few minutes of installing and setting it up is worth it to you. Maybe it's only stopping 5% or 10% of spammers- what I do know is that there are at least *some* spam bots out there that are hard coded to look for register.php can can't continue if it doesn't find one.

Others may have always simply looked for a "register" link on the forum and in that case this does not help.

Tip:- For those claiming total ineffectiveness make sure you don't have a register.php file in your forum directory. Some people have upgraded their VB versions or re-uploaded a fresh copy of the VB files and of course if you do that register.php will come back if you don't rename it again. You'll have both the custom name and the original name on the server and the bots will find the original name and be able to use it. The original register.php must not exist after you rename it.

Max Taxable 06-22-2014 03:34 PM

Quote:

Originally Posted by CAG CheechDogg (Post 2503008)
I have not had any problems with spam at all since I installed this ... actually not one single spam account at all! And it has been since the day he released this mod that I have not had any spam or bots hitting my new register.php file ...

Alot of the problem with it, from people I have actually helped with it, is related to their own attention to detail (lack of) in installing this.

However even in the perfectly done install world, like at OzzModz, we still get the spam attempts. Which are stopped by, other Mods.

There's no silver bullet, it takes several bullets to inhibit spam.

U-Fig 07-15-2014 07:40 PM

Hello,
this is a great product andf i have had it installed for a while now, however, I found a teensy issue with it in regards to manually sending activation codes from the users profile page in the adminpanel, the button saying 'Email Activation Codes' that is on top of the profile page for a user awaiting email conformation still leads to register.php instead of the new value.
sorry if this was already answered and i missed that, thanks. otherwise a great mod.

BigAl205 08-24-2014 07:51 AM

This mod works great, but it's best if you come up with a name that doesn't have the word "register" or "join" in it because bots are searching your site for those keywords, and "register123" would still be found. It would be best to name it something that isn't even a real word, such as "reboster" or the like. The end user might see it in the URL during the registration process, but it will still function the same.

I also recently created an IP logger and named it "register.php", that way if any bot tries to visit the standard registration page, its IP gets logged into a text file so I can block them later. Just over a matter of 2 days I've already caught some China-bot IPs in my little web trying to register.

addamroy 11-06-2014 10:53 AM

The "email activation codes" option does not work with this mod enabled.

Specifically, if you try to 'email activation codes' via a user's profile, it redirects to the standard register.php page which becomes a 404.

Can you fix this please?

BirdOPrey5 11-08-2014 10:45 AM

Hello,

It should work, if not something else is interfering. I'm afraid it can't be fixed- I had to use a lot of tricks to get that to work at all.

What you could do as a work around is make a copy of register.php, put it where it is supposed to be, but in your .htaccess file deny anyone from loading the page except for your ip address.

Create (or add to) an .htaccess file:

Code:

    <Files register.php>
        Order deny,allow
        Deny from all
        Allow from 127.0.0.1
    </Files>

Replace the red IP address with your own IP address.

Obviously the above is for Apache servers only. If on IIS or something else you'll need to figure out how to translate that to your own server, I'm sorry I have no idea how.

too_cool_3 12-16-2014 08:12 PM

Quote:

Originally Posted by heyzeus909 (Post 2472898)
Sorry if this is a repeat, but the Tapatalk stuff earlier in the thread confused me - which is easy to do. I just wanted to confirm that it's probably a good idea for owners of Tapatalk enabled forums to take go to AdminCP > Settings > Options > Tapatalk Options > Register page url: *change_to_renamed*.php

Thank you for your work.

This might be good info to include in the first post =)

I just installed this mod (thanks BoP5!) and renamed my register.php to something without the word register in it and within a couple minutes bots are still hammering my register.php, I have about 3-5 on that page at all times. Is there anything else I can do to stop them from getting through?

CAG CheechDogg 12-16-2014 08:18 PM

Block those IPs using htaccess ...

ozzy47 12-16-2014 09:15 PM

Did you follow all the instructions and change everything?


All times are GMT. The time now is 12:40 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01793 seconds
  • Memory Usage 1,854KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (2)bbcode_code_printable
  • (1)bbcode_php_printable
  • (16)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (3)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (40)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete