vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 3.8 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=235)
-   -   Miscellaneous Hacks - Enhanced Captcha Image Verification - stop bots from signing up!! (https://vborg.vbsupport.ru/showthread.php?t=132482)

yoyoyoyo 09-15-2007 01:16 PM

I am using 3.6.8, and just now installed this, and am getting these errors:

Quote:

Warning: session_start() [function.session-start]: open(/var/sessions/sess_576412532ddd0f178c3d3f7b7934d7a0, O_RDWR) failed: No such file or directory (2) in /register.php(202) : eval()'d code on line 1

Warning: session_start() [function.session-start]: Cannot send session cookie - headers already sent by (output started at /home/mysite/public_html/forum/includes/class_core.php:3117) in /register.php(202) : eval()'d code on line 1

Warning: session_start() [function.session-start]: Cannot send session cache limiter - headers already sent (output started at /home/mysite/public_html/forum/includes/class_core.php:3117) in /register.php(202) : eval()'d code on line 1

smoknz28 09-15-2007 02:16 PM

Steadicamop, great hack! I appreciate the fact that coders, like yourself, share your countless hours of coding....so Thank You!!

Next, I want to commend you on a hack that I believe is a much better approach then the standard code in place by vb. I recently installed your hack on vb 3.6.8 with only one issue. I didn't catch on to the fact that you had subdirectories to get to the verification images. I would only recommend that you not have so many sub dirs to get to the images. I had initially uploaded the directory with all the sub dirs for the images and got errors upon trying out the hack from registration. Yes your installation instructions were on track, but many of us knuckle-heads, like myself, don't do so well with reading. We get so damn anxious to get the hacks installed that we don't pay close enough attention at times to instructions. Definitely our fault...but I think you can save yourself some heartache from us knuckle-heads asking you questions on the images or it not working due to the above.

Again, great hack and I'm loving it brother!

I also posted about your hack in the vbulletin.com forums: http://www.vbulletin.com/forum/showt...33#post1420833

Thank you to all you coders for sharing your countless hours of code! ;)

Oh, and I did install this on a heavily moded version of vb 3.6.8 and is working great.

Thanks Steadicamop. :D

stryderunknown 09-27-2007 02:07 PM

I haven't installed the addon, however that's because I'm in the process of look at writing one myself. However I do see a slight flaw in how your addon works (without getting into the reverse engineering of how it works).

The problem is 'finite possibilities', if a Bot were to choose to click(well... emulate a click) the first image every time eventually it would get the right image because of the randomisation process.

It could be beneficial to log the number of attempts (I'd guess in the db session table) and perhaps blacklist those that reach a certain threshold. Some might suggest generating random numbers for your show.php?# , however again a bot would be able to read it.

One way would to be add the addition of say 4-binary digits via the GD library to the bottom of each image, the user can then be asked to type the binary reference as well as click an image. (And the reference doesn't have to be from the same image as they click).

This increases the complexity and lessens the chances that both will fall on the first image (in fact you could alter the randomisation method to not allow them to fall on the same image)

I would hack that version myself, however I've got another one up my sleeve ;)

Other than that keep up the good work (as well as all those that aid people coding/designing)

steadicamop 09-28-2007 06:40 PM

Quote:

Originally Posted by yoyoyoyo (Post 1339472)
better yet, simply change it to
PHP Code:

$vboptions[bburl]/images/verification/show.php 

BTW -where are the settings in the ACP for this hack?

I did a LOT of testing with the [bburl] option but it doesn't work correctly - unless I was using it the wrong way, but I could never find a way of pulling the forum url out correctly from the vboptions system - if this is incorrect I will look at changing it, but this is why it is still hardcoded.

There aren't any options in the AdminCP for this, I haven't been able to proceed with the Flash version so may look into an update with an option for how many images to use and enable/disable, just something simple.

HTH

Jason

steadicamop 09-28-2007 06:42 PM

Quote:

Originally Posted by smoknz28 (Post 1339499)
Steadicamop, great hack! I appreciate the fact that coders, like yourself, share your countless hours of coding....so Thank You!!

Next, I want to commend you on a hack that I believe is a much better approach then the standard code in place by vb. I recently installed your hack on vb 3.6.8 with only one issue. I didn't catch on to the fact that you had subdirectories to get to the verification images. I would only recommend that you not have so many sub dirs to get to the images. I had initially uploaded the directory with all the sub dirs for the images and got errors upon trying out the hack from registration. Yes your installation instructions were on track, but many of us knuckle-heads, like myself, don't do so well with reading. We get so damn anxious to get the hacks installed that we don't pay close enough attention at times to instructions. Definitely our fault...but I think you can save yourself some heartache from us knuckle-heads asking you questions on the images or it not working due to the above.

Again, great hack and I'm loving it brother!

I also posted about your hack in the vbulletin.com forums: http://www.vbulletin.com/forum/showt...33#post1420833

Thank you to all you coders for sharing your countless hours of code! ;)

Oh, and I did install this on a heavily moded version of vb 3.6.8 and is working great.

Thanks Steadicamop. :D

Thanks for your kind words - I was just sick of Spam sign ups, so with my limited PHP knowldedge my bro in law and I sat down to code this - it is fairly simple too, but seems to be very useful to other members.

I'm looking into an update in the not too distant future, some extra features.

Thanks again,

Jason

steadicamop 09-28-2007 06:45 PM

Quote:

Originally Posted by stryderunknown (Post 1348238)
I haven't installed the addon, however that's because I'm in the process of look at writing one myself. However I do see a slight flaw in how your addon works (without getting into the reverse engineering of how it works).

The problem is 'finite possibilities', if a Bot were to choose to click(well... emulate a click) the first image every time eventually it would get the right image because of the randomisation process.

It could be beneficial to log the number of attempts (I'd guess in the db session table) and perhaps blacklist those that reach a certain threshold. Some might suggest generating random numbers for your show.php?# , however again a bot would be able to read it.

One way would to be add the addition of say 4-binary digits via the GD library to the bottom of each image, the user can then be asked to type the binary reference as well as click an image. (And the reference doesn't have to be from the same image as they click).

This increases the complexity and lessens the chances that both will fall on the first image (in fact you could alter the randomisation method to not allow them to fall on the same image)

I would hack that version myself, however I've got another one up my sleeve ;)

Other than that keep up the good work (as well as all those that aid people coding/designing)

I don't want to step on your toes with this one if you have something in mind, but the digits on the image sounds like a neat idea - it is something that should be fairly easily added, would it be ok with you if I looking into adding this idea into this product - and of course with full credit to yourself.

steadicamop 09-29-2007 04:35 PM

Can we confirm this is definately working on 3.6.8? I will change the version on the page to reflect that it's compatible ... I'm still lagging behind on 3.6.2 :(

Mystery Man 09-30-2007 05:27 PM

works flawlessly on 3.6.8
tested with both firefox and ie
marked as installed
thx hopefully this will kill the bot activity

Alibass 09-30-2007 05:33 PM

I am running this hack on 3.6.8 and your other hack for Contact Us also. Both are working flawlessly. I have both set to display 6 images.

Regards

steadicamop 10-01-2007 04:57 AM

I've updated to reflect that it's compatible - which I'm very glad about for when I upgrade!

I have another idea in the mix at the moment for making it even more secure - it's based on an idea from this thread.

There may be a new version in the next few weeks....

Jason

Alibass 10-01-2007 03:49 PM

Great news Jason and thanks! :D

stryderunknown 10-02-2007 04:33 PM

Quote:

Originally Posted by steadicamop (Post 1349129)
I don't want to step on your toes with this one if you have something in mind, but the digits on the image sounds like a neat idea - it is something that should be fairly easily added, would it be ok with you if I looking into adding this idea into this product - and of course with full credit to yourself.

It's no problem that's why I put the ideas forwards.

My project is a little different and there is a likelihood that I'm going to have to learn some of the interfacing that your project already has to implement it and it's somewhat different to what I mentioned for yours. So I guess you can call it an intellectual trade (I won't be ripping code though, just learning from it).

Juvefan 11-01-2007 03:51 PM

Quote:

Originally Posted by extreme-mobile (Post 1251616)
i dont get any images showing just the words vbsecurereg or somethig any idea?

same problem

Juvefan 11-02-2007 03:16 PM

Quote:

Originally Posted by Juvefan (Post 1373524)
same problem

please help me

steadicamop 11-02-2007 07:54 PM

You need to make sure the image files are in the correct directory - should be /images/verification - right click on one of the images (that isn't showing) and check that the location matches where the files are - if not let me know your site details and I will have a look...

Jason

Juvefan 11-03-2007 03:49 PM

The location of the files is correct..
What details do you need?
The url of the forum is www.juvefans.org

steadicamop 11-03-2007 09:08 PM

You have GD installed in PHP? (This will be down to your hosting company, you can check if it's installed in the AdminCP - Maintanence -> View PHP Info).

If you can enable the product for a short while so I can see what is happening - that would be appreciated.

Jason

mystic10 11-04-2007 04:16 PM

i did have any show.php file please attach it

mystic10 11-04-2007 04:18 PM

oops sorry i do have the show.php installed but still not working its give function error

steadicamop 11-04-2007 08:14 PM

If it gives a function error, I suspect you don't have GD installed - please check into that and let me know - if it's not installed, this won't work.

Jason

TaBaTaN 11-05-2007 01:33 AM

nice job, thank you.

whitetigergrowl 11-07-2007 03:18 AM

Quote:

Originally Posted by yoyoyoyo (Post 1339477)
I am using 3.6.8, and just now installed this, and am getting these errors:

Warning: session_start() [function.session-start]: open(/var/sessions/sess_576412532ddd0f178c3d3f7b7934d7a0, O_RDWR) failed: No such file or directory (2) in /register.php(202) : eval()'d code on line 1

Warning: session_start() [function.session-start]: Cannot send session cookie - headers already sent by (output started at /home/mysite/public_html/forum/includes/class_core.php:3117) in /register.php(202) : eval()'d code on line 1

Warning: session_start() [function.session-start]: Cannot send session cache limiter - headers already sent (output started at /home/mysite/public_html/forum/includes/class_core.php:3117) in /register.php(202) : eval()'d code on line 1

I am experiencing these problems as well. GD IS installed and working. I am using the latest PHP and SQL versions.

steadicamop 11-07-2007 04:55 AM

I am just heading out of the door to work - when I get home tonight I will check how the directory structure is handled, it's been a while since I've looked at the code so can't remember off the top of my head but I'm pretty sure this is something to do with that.

Jason

whitetigergrowl 11-10-2007 02:17 AM

Any word on this getting those few problems fixed?

steadicamop 11-10-2007 07:56 PM

I feel this may be a subdirectory issue - check this post and see if that helps ... if not, I'm not sure - definately further investigation and I will do my best to get this resolved one way or another :)

tjdrico 11-11-2007 11:48 AM

Good stuff, steadicampop. Installed and set to 8 images. Hopefully this will mean I don't need to moderate all new registrations any more.

kirsty 11-12-2007 04:29 PM

Going to give this a try as I get a lot of bots :(

basskiller 11-13-2007 09:57 PM

I have this up running on one forum. but just tried to install this on another
and RED X
and this is what is showing when I right click on the Xhttp://www.offshorebodybuilding.com/board/images/verification/show.php

the images are in the right folder
http://www.offshorebodybuilding.com/...ion/PacMan.jpg

I've tried just about everything
GD is enabled
I've tried reconfiguring the htaccess / Extra user verification in the plugin manager like stated in another previous post
also the image_verification template to reflect 'board/images/verification....' instead of 'images/verification....'

mtrac 11-14-2007 04:43 PM

Installed and running fine on 3.6.8 PL2. Thanks for this hack -- I think it will let me put my time to more productive use.

agorman 11-14-2007 11:00 PM

Installed in with the latest patch 3.6.8 and it works great (hopefully).
Do I still need to run the captcha image thingie at registration (such a frustrating process for some people). - I have already added a question and answer as part of registration, so will these surfice?

Brilliant though. Thanks

steadicamop 11-15-2007 06:14 PM

Quote:

Originally Posted by basskiller (Post 1382039)
I have this up running on one forum. but just tried to install this on another
and RED X
and this is what is showing when I right click on the Xhttp://www.offshorebodybuilding.com/board/images/verification/show.php

the images are in the right folder
http://www.offshorebodybuilding.com/...ion/PacMan.jpg

I've tried just about everything
GD is enabled
I've tried reconfiguring the htaccess / Extra user verification in the plugin manager like stated in another previous post
also the image_verification template to reflect 'board/images/verification....' instead of 'images/verification....'

That is very strange, in view of the fact you already have it installed on another forum - I really don't know what to suggest as you've gone through the basic fault detection, and it should be working fine ... PM me if you want me to investigate further.

Jason

steadicamop 11-15-2007 06:16 PM

Quote:

Originally Posted by agorman (Post 1382680)
Installed in with the latest patch 3.6.8 and it works great (hopefully).
Do I still need to run the captcha image thingie at registration (such a frustrating process for some people). - I have already added a question and answer as part of registration, so will these surfice?

Brilliant though. Thanks

That is entirely your choice, if by chance a bot managed to get past this, it would be a lot easier for them to complete the sign up with captcha disabled, but in all honesty, the bots were designed to beat captcha anyway so I don't think it would make much different either way.

The one thing I will say is, since this has been release and I've had it installed I have have NO spam sign ups whatsoever, so it must be working in the right direction.

HTH

Jason

Sinkhole3 12-15-2007 12:18 PM

We were getting about 200 junk sign-ups per month, making it very difficult to find the real sign-ups. It's been well over a month since I installed this add-on and we haven't gotten a single junk sign-up since. Thanks for such a clever and effective modification!!!

SilentSleeper 12-23-2007 09:50 PM

Ok, I am running vBulletin Version 3.6.8 most recent and seems to be working overall great. The only thing that I have found is that when a users clicks on the wrong image and is sent to the message " I'm sorry, you have selected the wrong image, please go back and try again. " and then hits the back link it will give them new image choices to click, but the word underneath them does not match all the time. Any idea's to make sure that the "hint" word will match the images all the time?

dsmoke 12-26-2007 01:56 PM

has anyone gotten this working on 3.5.4? thanks!

basilrath 12-26-2007 03:26 PM

Quote:

when a users clicks on the wrong image
Lets face it someone who clicks the wrong image is ermmmmmmmmmm

basilrath 12-30-2007 03:44 PM

the system works fine on vbadvanced and six images ........yes ok

i was getting at least 15 a day now for now its ceased !

basilrath 01-05-2008 01:25 AM

still works no prblem however if the site is openend "within" another site ie like an i frame etc it wont show the images which i agree is not going to happen often but does nevertheless............can be rectified by an easy explanation to guests registering via

Languages and Phrase>Search in Phrases>

type in.......Please click the image above that is

Then change or copy this in

<font color="red"><b>If the images do not show open the site in your browser</font><br /><br />

Please click the image above that is<br />

This will explain (in red) and make the whole text obviously bold and better to see.

Sorry if this is a pain Steadicamop............

steadicamop 01-06-2008 08:44 AM

I've been out of the loop for a month or so - will sit down later on and go back through the posts and see what needs my attention - I will remake the product file for basilrath's suggestion and attach it to my post.

Jason

MichaelJohnston 01-31-2008 05:49 AM

Is there a way to set this up to work for unregistered posters as well?


All times are GMT. The time now is 10:37 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01666 seconds
  • Memory Usage 1,849KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)bbcode_php_printable
  • (11)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (40)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete