vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 3.6 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=194)
-   -   Administrative and Maintenance Tools - vbStopForumSpam - known spammer lookup for new registrations (https://vborg.vbsupport.ru/showthread.php?t=176481)

Sym0n 08-31-2008 08:29 PM

Spotted a bot trying to sign up a couple of times now. It's not getting through but the message in the log is

Quote:

Result on field email - bnm444+20080831@gmail.com [REMOTEERR] Unverfied and rejected by policy
Not sure if that's a bug due to the "+" in the email address or not. But thought I'd flag it up for you anyway.

Thanks again for your work with this. It's saving me so much time.

Sy

skippybosco 09-01-2008 03:08 AM

For August 2008, Out of the 3580 registrations on my site for the 31 day period

~4%/150 were caught by SFS Email check
~17%/640 were caught by SFS UserID check
~36%/1300 were caught by SFS IP check
~41%/1490 valid registrations

1) Spammers caught by Email check are back in my normal range (not sure why it spiked to 10% last month)
2) Valid registration sticking at 41% for two months in a row now. Would like to see it higher, but much better than the 20-25% I was seeing For the first half of the year.

pedigree 09-01-2008 09:10 AM

Quote:

Originally Posted by Sym0n (Post 1611433)
Spotted a bot trying to sign up a couple of times now. It's not getting through but the message in the log is

Not sure if that's a bug due to the "+" in the email address or not. But thought I'd flag it up for you anyway.

Thanks again for your work with this. It's saving me so much time.

Ive had a look at the results that the remote site gives when using a plus addressed email. It response with "invalid email address" and as the result isnt in the XML-ish that its expected, the mod assumes that it got an error, which it did in a way. Ive reported it to the remote site for investigation as email addresses can have (RFC says) a-z 0-9 % - + _ .

I wonder if its a method identified by spammers or just luck, either way, if I dont get a response from the remote site about this, Ill add code to handle "remotely reported invalid email addresses" properly.

pedigree 09-01-2008 09:12 AM

1490 valid registrations, Im lucky if I get that in hits per month :)

Skippy, did you notice the PM to the 0.7 beta site?

Delphiprogrammi 09-01-2008 12:33 PM

hi,

You can add in your description that it works on vb 3.7.3 just fine.It just catched two spammers trying to register

Sym0n 09-01-2008 03:07 PM

Quote:

Originally Posted by pedigree (Post 1611843)
Ive had a look at the results that the remote site gives when using a plus addressed email. It response with "invalid email address" and as the result isnt in the XML-ish that its expected, the mod assumes that it got an error, which it did in a way. Ive reported it to the remote site for investigation as email addresses can have (RFC says) a-z 0-9 % - + _ .

I wonder if its a method identified by spammers or just luck, either way, if I dont get a response from the remote site about this, Ill add code to handle "remotely reported invalid email addresses" properly.

Awesome. Thanks for the quick reply.

Sy

Alfa1 09-01-2008 10:23 PM

Quote:

Originally Posted by skippybosco (Post 1611675)
For August 2008, Out of the 3580 registrations on my site for the 31 day period

~4%/150 were caught by SFS Email check
~17%/640 were caught by SFS UserID check
~36%/1300 were caught by SFS IP check
~41%/1490 valid registrations

Where can i see this?

pedigree 09-02-2008 09:50 AM

Alfa1 i think skippy drew up those numbers from logs as there isnt a reporting tool in 0.61

Alfa1 09-03-2008 11:50 PM

Ah. I see. Thanks.

abrecher 09-19-2008 05:51 AM

I seriously have no idea what I'd do without this mod! Thank you so much again for releasing it. We block approximately 15-25 spammers from signing up daily with it.

acorndomains.co 09-22-2008 08:01 PM

was working for me in 3.7.3 but started getting out of memory errors taking the whole board down, any ideas?

My PHP memory limit is 64MB

Delphiprogrammi 09-22-2008 08:05 PM

Quote:

Originally Posted by acorndomains.co (Post 1627985)
was working for me in 3.7.3 but started getting out of memory errors taking the whole board down, any ideas?

My PHP memory limit is 64MB

if you have a busy board (eg lots of people that are trying to register) it might cause things like this no idea what you can do about that except increasing the limit

pedigree 09-23-2008 11:31 AM

the mod itself shouldnt be using that much memory. How many people are you seeing each day? That are trying to register? What PHP version are you running and on what OS/version?

acorndomains.co 09-23-2008 11:42 AM

Web Server Apache v2.2.9
PHP 5.2.6
PHP Memory Limit 64.00 MB
MySQL Version 5.0.45

100 users average at any one time

When I turn the plug-in off, the server memory load drops 30%

I am getting a lot of spam blocks, maybe that's it.

U.K.Visuals 09-23-2008 09:02 PM

could someone tell me where i can find the function to report Spammers to the SFS Database? i think this two images i uploaded with this mod are for this function? right?

Delphiprogrammi 09-23-2008 09:13 PM

Quote:

Originally Posted by U.K.Visuals (Post 1628859)
could someone tell me where i can find the function to report Spammers to the SFS Database? i think this two images i uploaded with this mod are for this function? right?

yeah good question i've looked for it myself turned on the usergroup permissions but can't find it ... I just added my own form to the admincp that adds the spammers to SFS database throug cURL or a socket connection if cURL is not availible

pedigree 09-24-2008 11:39 AM

As mentioned in the thread before, that functionality was in the XML postbit but not actually included in the code, I kind of jumped the gun a bit sorry. I was hoping that an API was forthcoming from sfs.com but it hasnt been. The site admin of sfs has gone awol for a while as hes busy so Ill see if I can add the API code to the site. In the meantime, Ive got code there to add it and parse back the HTML to see if it was successful or not.

0.7 will include the ability to submit data to the website.

To acorndomains - the plugin should only really load when the page is doing a registration. Ill revisit the 0.6 code and look to see if its recompiling the code when it shouldnt need to - if it is then Ill try to modify the plugin to avoid loading the function code when its not required. Are you using any php accelerators at all?

abrecher 09-25-2008 02:51 PM

Any ETA on next version ? This mod is a life and time saver for me. So far today it's stopped over 30 spam signups.

pedigree 09-26-2008 01:44 PM

0.7 is almost done but is missing a lot of the GUI changes, the complete stats engine and has no bug/error handling at the moment. Ive adding those on a weekly basis when I get time from work, which isnt that often these days.

edward hamilton 09-27-2008 04:52 PM

Quote:

Instructions are included in the instructions.txt file - PLEASE read it first.
From above, is this file the installation.txt file or am I missing something?

pedigree 09-27-2008 05:43 PM

one or the other depending on the version

edward hamilton 09-27-2008 07:58 PM

First I'd like to thank you for taking the time to do this while you've obviously been busy at home.

I installed this mod easily this morning. Here is an excerpt from the log.
Quote:

horoscopey 2008-09-27 10:40:29 horoscopey@ebaysweep.com 71.239.75.95 Result on field ip - 71.239.75.95 [REMOTEERR] Unverfied but allowed by policy
horoscopey 2008-09-27 10:40:29 horoscopey@ebaysweep.com 71.239.75.95 Result on field email - horoscopey@ebaysweep.com [REMOTEERR] Unverfied but allowed by policy
horoscopey 2008-09-27 10:40:29 horoscopey@ebaysweep.com 71.239.75.95 Allowed registration

I have email and username set to enabled, but left ip disabled in the admincp vsStopForumSpam settings.

Since horoscopey is the spam lists, can anyone tell me what I might be doing wrong?

Delphiprogrammi 09-27-2008 09:30 PM

Quote:

Originally Posted by edward hamilton (Post 1631837)
First I'd like to thank you for taking the time to do this while you've obviously been busy at home.

I installed this mod easily this morning. Here is an excerpt from the log.


I have email and username set to enabled, but left ip disabled in the admincp vsStopForumSpam settings.

Since horoscopey is the spam lists, can anyone tell me what I might be doing wrong?

if you see "[REMOTEERR]" the stopforumspam service is down (or something has gone wrong while checking) in this case you need to set the option to block registeration on remote connection errors.

IC3D 09-28-2008 12:06 AM

Hello.

First off, the idea of this mod is absolutely amazing. Great work.

I'm having some issues running it on version 3.7.3 Patch Level 1.

The install went smooth as butter...hooks were placed...and etc. etc.

When I went to try and 'sign up' as a new user using one of the names off that site...I got the following:

Quote:

Warning: Unknown(includes/functions_vbsfs.php): failed to open stream: No such file or directory in [path]/register.php(385) : eval()'d code on line 3

Fatal error: (null)(): Failed opening required 'includes/functions_vbsfs.php' (include_path='.:/usr/local/lib/php:/usr/local/lib/php/PEAR:/usr/local/share/pear') in /hsphere/local/home/ic3dnet/forums.ic3donline.com/register.php(385) : eval()'d code on line 3
I am just starting out in VB...so kind of not sure what to do now. Can someone please help me? Thank you...I greatly appreciate it. I'll remove the product in the mean time.

Delphiprogrammi 09-28-2008 04:06 AM

Quote:

Originally Posted by IC3D (Post 1631930)
Hello.

First off, the idea of this mod is absolutely amazing. Great work.

I'm having some issues running it on version 3.7.3 Patch Level 1.

The install went smooth as butter...hooks were placed...and etc. etc.

When I went to try and 'sign up' as a new user using one of the names off that site...I got the following:



I am just starting out in VB...so kind of not sure what to do now. Can someone please help me? Thank you...I greatly appreciate it. I'll remove the product in the mean time.

your functions_vbsfs.php is missing you need to upload this file from the zip to your vBulletin /includes directory and this error will be gone

pedigree 09-28-2008 07:23 AM

heh, thanks for

a. The feedback
b. Delphi for the helping hand. This is what happens when you take your kids out to the beach :) - you miss these postings

When installing vBulletin mods, there is usually an "upload" folder. There are the files that you have to upload to the (usually) root of your forum (dont upload the upload folder itself, just its contents).

While lots of modders do try to keep PHP contained within the XML product plugin, its not always possible to do so, hence the extra files.

Madmunki 10-01-2008 04:03 PM

Well done. The last day or so I have been hit really hard by forum spammer, posting some pretty explicit sexual content. I been looking at this mod the last few days, and decided to give it a try, as I GOT to do something about this damn spam! It's been a few hours now, and it has blocked & logged over 10 registrations. By looking at the log, these its apparent that these are spammers, and not legit users (e.g username of FeMaleAnimeP0Rn, etc).

Thanks a lot for this mod!

vics 10-01-2008 05:04 PM

Must be a sensitive liberal!
LOL

Quote:

Originally Posted by StepOnFrog (Post 1587127)
WOW !!! That was an unnecessarily defensive reply to my post, for which mine was just helping one user be aware of the IP dynamics of t'internet.

------- Please skip past this thread if you don't like long posts -------

Pedigree, where in my post do you think I've attacked your creation?

Apologies to any users, including yourself, Pedigree, should you believe this post is 'Threadwaste/Postwaste', but surely some of you will have got to a point with users misunderstanding the context, or entirety of the posts you make - this is one of those very moments; I am really *sick* to the back teeth of posts not being read correctly, and then someone taking their hat off at some poor user about it.

I really do not see why you have come to be so defensive from what I have written, and so, I feel I should make myself much more clearly understood...



In fact, I do not *try* to *tell* you anything about flawed systems at other locations, and I certainly do not, at any point, comment on the level of quality your MOD provides.
I haven't complained about collateral damage. I haven't complained about any of my members not being able to register due to IP blocking. I did, however, directly inform a single user that IP blocking can be a problem for board registrations, other users will read the same post and understand the same. With regards the Conact Us page, should you happen to read any of the many quality articles that other experienced Bulletin Board Admins have written (not just vB), you may come to realise that when an internet user searches, and happens to come across a website, if the information they are seeking is not within the first several clicks, they are more likely to move onto another website; Contact Us, is no guarantee that you will keep a customer in your shop, so to speak. (this is not a criticism to your post, btw).
Now, that part of your post was, IMO, the only constructive part, in response to my post. Although, looking through your MOD listing description, at no point do you mention any switching of IP blocking facility, or any facilities, as I come to read the description again; only after looking at the second attached screenshot, do I spot a selection box showing ENABLE, and then one must logically assume there is a DISBLE selection too, though, unfortunately, this fact of logic may not be readily obvious to some (honestly, there are users that just don't know, we've all come across them, and we help them).
And, this does seem quite an over-defensive response to something I haven't written; your use of "*I* can" is what pushed me to write this lengthy tome. It appears, judging from your sentence, that you believe I have somehow attempted to stop you from preventing spammers..? Sorry, I fail to see where I have restricted your use of your MOD.
I haven't said that I don't like the idea of blocking 'some poor innocent person'. And, why should I code a MOD? I had come to this MOD thread to examine your MOD, to check whether it was the product for me. I did suggest an addition, not only to your MOD, but to any MOD that attempts to prevent spamming registrations by using the points I had listed so many times before, and herein.
You really have misunderstood the suggestions I have made....
You know, as well as I, that vB sets a cookie on your system (or spambot system) each and every visit to your vB board. So, if you record the cookie with each registration, then if that registration fails and another attempt is made with the same username/email, and the cookie is different the second time round, then your vB software will know that the registration MAY be a spambot. For this suggestion to work, you must assume that people are not THICK, and that they will try registering again within the same cookie session, should their first attempt 'balls up', somehow. Ergo, humans register and reregister in the same cookie session, whereas spambots go away and come back later to try again.

Exactly! So, why be so defensive?
It's nice to know some people care, and know perfectly well what they're on about...! :D

But, aside from clearing any misunderstandings, I would really like to hear your views on the suggestions I've provided, ie. the failed spambot registrations due to the image verification process.

I hope this has made things much clearer. However, please do not hesitate to contact me with regards any of the above.

Yours,

;-D


unicorn2433 10-01-2008 06:27 PM

nevermind ... found my answer

pedigree 10-01-2008 07:52 PM

you have to love liberals, makes the world a funnier place :)

unicorn - Im glad

Madmunki - thanks :) Its always good to hear positive feedback, unlike liberals

unicorn2433 10-01-2008 07:53 PM

Installed. Thank you

Step 6 in instructions. I only see Front end FAQ/Help and Front End Redirect messages. I dont see front end error messages there.
Am I missing something?

Piper0005 10-01-2008 09:12 PM

Thank you! My board was being hit hard by spammers today and this is stopping them. Prevented 6 from registering since I've installed it. :)

unicorn2433 10-01-2008 10:21 PM

it rocks! Been working for me too!

I have another question. How come some say allowed user to register but I can find no trace of that user?

CyprusTM 10-02-2008 03:14 AM

great just installed a few minutes ago. had about 50 registrations today all from russia. already this script stoped 41 all with email from mail.ru or gmail.com

thank you for this mod.

skippybosco 10-02-2008 04:43 AM

September board statistics are in:

9580 Total Registration attempts

18%/1700 were SFS blocked Emails
24%/2340 were SFS blocked UserName
31%/3000 were SFS blocked IPs
26%/2540 were valid registrations

Sadly valid registrations dropped significantly from last month. I had kind of hoped the spammers had given up and moved on.

IP continues to be the largest blocked reason followed by email addy and then username.

Sym0n 10-02-2008 06:34 AM

Quote:

Originally Posted by unicorn2433 (Post 1635096)
How come some say allowed user to register but I can find no trace of that user?

From what I understand the script works by checking against the SFS database for the details you have defined (username, email, IP, all three or selection of all). If there is no trace on SFS for those details then it allows the registration to proceed to the next stage, the actual vB registration itself.

If the user is showing in your logs as being allowed to register but then there is no userid link (basically the username isn't underlined) then the user didn't complete the registration process. If that was a spammer then you've nothing to worry about as they never actually registered and all you'd need to do, if you are certain that it is a spammer that's not on SFS, is add the details from the log to the database.

Hope that make some sort of sense lol.

Sy

pedigree 10-02-2008 07:44 AM

unicorn, sym0n said exactly the issue. Ill check out the phrase location but if you search for "spam" in phrases, youll find it

DS MrSinister 10-02-2008 12:20 PM

great mod sir. so far so good.. only let one register so far... well i think it might be one. lmao.

Thanks

RedeemedWarrior 10-02-2008 12:23 PM

awesome product :D

stopped over 2500 spammers since i added it in august :D

Lateuk 10-02-2008 12:38 PM

Loving this plugin. Well done!

Am i right in the following:

- The images that are uploaded are for future versions, and there is no way to use version 0.61 to report spam?
- If i see a lot of the same user in the log a few seconds after each other (where they have been Allowed registration) then this is because they are more than likely typing an incorrect captch etc?

Cant wait for the next version.
Thanks


All times are GMT. The time now is 07:46 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.02213 seconds
  • Memory Usage 1,852KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (13)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (1)pagenav_pagelinkrel
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (40)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete