vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 3.6 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=194)
-   -   Administrative and Maintenance Tools - vbStopForumSpam - known spammer lookup for new registrations (https://vborg.vbsupport.ru/showthread.php?t=176481)

pedigree 10-02-2008 12:43 PM

Lateuk - thanks and

1 - Thats right. Im working on the code on both ends as Im now a developer on stopforumspam.com
2 - Exactly or theyre resubmitting the same data / existing email , username details etc

Note to those that reported errors with + in email addresses. Ive just fixed that bug on stopforumspam.com so no more having to wrong about those at the moment

CyprusTM 10-02-2008 05:21 PM

lots of spammers are still getting through and post really nasty images.

pedigree 10-02-2008 06:04 PM

cyprustm - start adding them to the database here, ban the domains that their emails are coming in from... this mod will help but its not a fix all. Setup new accounts so that new users cant post without being moderated and try a combination of some of the other spam mods, limit sigs for new users, disable attachments and disable links for users < 10 posts for example

CyprusTM 10-02-2008 07:46 PM

pedigree sorry, i did not mean to sound like criticizing this mod, which is realy great stoped abut 500 registrations all spammers in just a day. its just that some got through and posted realy nasty pics.

ps how to i set restrictions so that users with less than 10 posts cannot post images/links etc?

Madmark 10-02-2008 08:02 PM

Been getting hit really hard in the last 2 days. This mod seems to work well so far - 5 spammers blocked with in first 7 minutes. Hope it will handle the 10 to 15 that are registering.

This beats the hell out of sitting in front of the computer deleting accounts.

Delphiprogrammi 10-02-2008 08:20 PM

Quote:

Originally Posted by CyprusTM (Post 1635929)
pedigree sorry, i did not mean to sound like criticizing this mod, which is realy great stoped abut 500 registrations all spammers in just a day. its just that some got through and posted realy nasty pics.


ps how to i set restrictions so that users with less than 10 posts cannot post images/links etc?

https://vborg.vbsupport.ru/showthread.php?t=96018 for 3.5 will forbid users with less then 15 posts to post urls maybe it stil works

pedigree 10-03-2008 06:44 AM

I knew you werent critising the mod :)

Try this mod as well.

https://vborg.vbsupport.ru/showthread.php?t=177704

Piper0005 10-03-2008 01:41 PM

Thanks again for this - in just over a day it has stopped 180+ spammers from registering. :)

pedigree 10-03-2008 04:02 PM

wow, 180.... thats great news

Would you guys mind if, disabled by default, there was an option in the next version of the mod that would report these stats to the stopforumspam.com webserver, completely anonymous of course.... Just so that we can all get an idea of just how many spammers Im starting to p*ss off?

Piper0005 10-03-2008 05:18 PM

Nope, I wouldn't mind that at all.

Delphiprogrammi 10-03-2008 05:22 PM

Quote:

Originally Posted by pedigree (Post 1636559)
wow, 180.... thats great news

Would you guys mind if, disabled by default, there was an option in the next version of the mod that would report these stats to the stopforumspam.com webserver, completely anonymous of course.... Just so that we can all get an idea of just how many spammers Im starting to p*ss off?

No i wouldn't mind either the more we p***ss of the greater our pleasure :)

segwayon 10-03-2008 06:10 PM

Quote:

Originally Posted by crocodile (Post 1590150)
hey,
I installed the mod but can't find the log. There is no such log under Statistics & Logs. am I doing install it wrong? thanks

I had to close the AdminCP and re-login to see the additional log appear. Must be a caching issue with vB.

segwayon 10-03-2008 06:15 PM

Most excellent. Thank you, pedigree.

pedigree 10-03-2008 06:33 PM

Quote:

Originally Posted by segwayon (Post 1636653)
I had to close the AdminCP and re-login to see the additional log appear. Must be a caching issue with vB.

When you install the mod, it doesnt refresh the menu in the left frame. A page reload should do the trick there

Chy 10-04-2008 12:50 PM

I really love this but can't seem to sort out two things.
Running 3.7.1 flawless installation
Can not see the logs however in Statistics and Logs>"There's no vbstopforum log" here. ( yes, both refreshed and logged out and back in)
Also not seeing the vbstopforum in Usergroup settings.

Suggestions? I'll see if I have a same issue on my other forums in the meantime.

pedigree 10-04-2008 01:37 PM

... vbstopforum in Usergroup settings. - like i said in a couple of posts back, its not used anyway

admincp/vbstopforumspam.php - thats the log file, you should be able to hit it directly.

Chy 10-04-2008 02:12 PM

OH duh I'm an idiot... just realized what I DIDN't do...

a. have my caffeine before doing this
b. literally uploaded the Upload file to the forums and NOT into their respective sub directories in the FORUM directory...my very badness. LOL

BUT.. your reply helped me find my error once I saw the file path so thanks.

Working perfectly now... just love this had you a donation button I'd have donated ;) Thanks much.

pedigree 10-04-2008 06:41 PM

ive had other requests to add a dontation button but I really want to nail down all the things that I wanted before I did add it. Maybe Ill add it and see if any donations hit 5 figures :)

gpc10347 10-05-2008 01:21 PM

Quote:

Originally Posted by pedigree (Post 1636559)
wow, 180.... thats great news

Would you guys mind if, disabled by default, there was an option in the next version of the mod that would report these stats to the stopforumspam.com webserver, completely anonymous of course.... Just so that we can all get an idea of just how many spammers Im starting to p*ss off?


Gets my vote for Mod Of The Millenium... Great Job..
Over 300 stopped at the front door and a few that mde it past that, were halted as I moderate all user request.

I'd love to see dynamic submission of the offenders and, judging from the logs - I'm begining to wonder if perhaps I should block all gmail accounts - Seems thats the server of choice for spammers!

DS MrSinister 10-05-2008 01:43 PM

by any chance do you have Enhanced ACP Navigation mod installed?

gpc10347 10-05-2008 02:11 PM

Quote:

Originally Posted by DS MrSinister (Post 1637826)
by any chance do you have Enhanced ACP Navigation mod installed?

(if that's for me, sorry - I've not seen that one!)

gpc10347 10-05-2008 02:14 PM

'tis I again.. Very pleased with this mod as today seems to be SpamDay and it's performing as advertised...

One small feature request if that's even possbile: Here's the last entries from the log: Sorry for the repetitiveness...

kegdenwers 2008-10-05 10:37:11 kegdenwers@gmail.com 90.150.117.41 Allowed registration
kegdenwers 2008-10-05 10:37:01 kegdenwers@gmail.com 90.150.117.41 Allowed registration
kegdenwers 2008-10-05 10:36:50 kegdenwers@gmail.com 90.150.117.41 Allowed registration

kegdenwers 2008-10-05 10:35:45 kegdenwers@gmail.com 90.150.117.41 Allowed registration
kegdenwers 2008-10-05 10:35:22 kegdenwers@gmail.com 90.150.117.41 Allowed registration
kegdenwers 2008-10-05 10:35:11 kegdenwers@gmail.com 90.150.117.41 Allowed registration
kegdenwers 2008-10-05 10:35:01 kegdenwers@gmail.com 90.150.117.41 Allowed registration
kegdenwers 2008-10-05 10:33:11 kegdenwers@gmail.com 90.150.117.41 Allowed registration
kegdenwers 2008-10-05 10:32:46 kegdenwers@gmail.com 90.150.117.41 Allowed registration
kegdenwers 2008-10-05 10:32:22 kegdenwers@gmail.com 90.150.117.41 Allowed registration
kegdenwers 2008-10-05 10:31:40 kegdenwers@gmail.com 90.150.117.41 Allowed registration
kegdenwers 2008-10-05 10:31:21 kegdenwers@gmail.com 90.150.117.41 Allowed registration


Obviously the time is significant as no-one could possibly enter the info that quickly. Is there a possibility that an upcoming version of this tool could eliminate these idiots too?


Thanks again for a great mod

pedigree 10-05-2008 07:20 PM

Quote:

Originally Posted by gpc10347 (Post 1637851)
'tis I again.. Very pleased with this mod as today seems to be SpamDay and it's performing as advertised...

One small feature request if that's even possbile: Here's the last entries from the log: Sorry for the repetitiveness...
Thanks again for a great mod

Firstly, youre welcome

Secondly, there is already a mod that does this but I cant (as Ive had a bottle of wine) remember it. ahh, try IsBot

https://vborg.vbsupport.ru/showthread.php?t=135094

AdrianH 10-06-2008 04:06 AM

Quote:

Originally Posted by pedigree (Post 1638055)
Firstly, youre welcome

Secondly, there is already a mod that does this but I cant (as Ive had a bottle of wine) remember it. ahh, try IsBot

https://vborg.vbsupport.ru/showthread.php?t=135094

The mod he needs is https://vborg.vbsupport.ru/showthread.php?t=183917 (Stop the Registration bots) it is excellent at dealing with bots/spammer progs.

Combined with your superb vbStopForumSpam spammers are going to find life much harder.:up:

ngx 10-06-2008 06:22 AM

Utterly Awesome.

I installed it after a serious rise in spam sign ups - we were deleting 20+ a day and moved to moderating users to stop the posts. No sooner had I installed this and one of them decided to test it out. Caught. A test sign up by me also showed it didnt slow down the sign up at all, which was bonus.

Thanks bunches.

Wired1 10-06-2008 06:38 AM

Quote:

Originally Posted by gpc10347 (Post 1637851)
'tis I again.. Very pleased with this mod as today seems to be SpamDay and it's performing as advertised...
Obviously the time is significant as no-one could possibly enter the info that quickly. Is there a possibility that an upcoming version of this tool could eliminate these idiots too?


Thanks again for a great mod

That's not someone filling out the whole form. That's someone re-entering the password, or hitting back or something. They'll make an entry in the log anytime that page loads for ANY reason.

gpc10347 10-06-2008 12:36 PM

Thanks again for the best mod ever...

I installed IsMod after seeing the first note and I'm now up to 479 entries in the log... 2 of these are real users and the rest are repeats or mostly spammers. Since installation of IsMod in tandem, the repeat entries seem to have slowed... (one)

I like the options I see in Stop the Registration bots.

In my wish list, these would all be vBulletin native options but since that isn't the case, it's be pretty slick of they were combined into a single application.. Botstoppers?

No matter what, Installed and Nominated.

hobsdv 10-06-2008 05:29 PM

installed and nominated

ngx 10-07-2008 04:20 AM

Okies, Something weird has happened and I am not sure what it is..

I have a vague idea and I just want some confirmation. There were three allowed registrations but only one account. And *dozens* of entries in the system for all three. The one that did get through - the second bot - got the next UID in line so it shows that bot one failed somehow.

Now I did a test sign up as noted above, but stuffed up captcha once - and there was two entries on the list. Is this a major botched captcha code problem for the bot/underpaid human who actually just does it for the free porn? I actually didnt think it was doing anything before but I guess it is now! Would it log those attempts, even if something is wrong?

First Bot - Second Bot (Showing Link) - Third Bot

If thats true then I guess I am glad its working too, but looks like I am leaving the forum on moderated. *sigh* Thanks for looking!

Evaporate 10-07-2008 07:59 AM

Going to install this and isbot tonight . In the past 2 weeks I'm now getting 20-30 spammer bots a day sining up. 80% are gmail and the rest are .ru or .cn.

I found the stopforum spam link on google and was using it to stop the spammers (though most are quite obviously just random words jumbled together. )

Google should seek to remove the spammers as they are giving gmail a bad name imo.

Anyway after doing this manual process for a week or so I've given up and via the magic ofVbulletin.org search found this.


I will install tonight and look forward to reclaiming my time back. I've always had to manually accept users after they have verified there email so this has saved me from most of the forum spam.

Thanks for the mod anyway. As someone said Mod of the Millenium! :)

pedigree 10-07-2008 09:37 AM

ngx - youre dead right. What has happened is that the bot is getting to the "allowed registration" phase as its not been caught by the ip/email/username tests. At this point, its passing control back to vbulletin to process the captcha (etc). This looks like the bot has got the captcha wrong and has tried again and again and again before finally getting it right.

What I will look at is the location of the hooks Im using or a better description so that "allowed registration" only gets logged when vbulletin has done its tests or change it to read "passed vbstopforumspam tests, passing to vbulletin". The intervals being one second would point at it being a bot, not someone botching it. I guess I could look at adding code to the log (if vbulletin doesnt already, would have to check) botch captchas with the user input and what the text was, too see just how far off they are.

Sign up for an API key at stopforumspam.com and submit those spammers details.

Evaporate - thanks. Ive added gmail to my forums banned domain list. Had a couple of people complain but I dont care, they can use something else. Trust google? Hell no. You might want to block mailinator.com as well.

River_rush 10-07-2008 11:21 AM

amazing hack, used the site for manual lookups but this is EXCELLENT, installed on www.escortrscosworth.com & http://anotherfordforum.com/, its already stopped a couple of spammers signing up last night. nominated for motm both sites are running it on vBulletin? Version 3.7.3 with no probs

Evaporate 10-07-2008 08:22 PM

I've installed this now on www.planetmgc.com and it seems to allow good ip address anyway.

Already seen a dramatic drop in spammer registrations. I've also blocked a couple of spammer bots that were chewing up CPU cycles including Yanga World Search bot (check it out on google). It's used by russians to spam harvest .

I've also just banned the entire Russian Federation IP range (find-ip-address.org) and entered this into .httaccees so that no Russian servers can even get to my site.

No one from Russia is likely to join my site to be honest anyway so it's a no brainer.

There are a couple of other tricks and hacks mentioned which I may use later on. But for now I'm a happy chap. Thanks Pedigree.

Going from 20-30 spam registrations per day, I've seen no new spam registrations yet.

mnymaker 10-08-2008 12:10 PM

I was getting a bunch of bot registrations all of sudden. I guess the bots finally found my forum site ( www.talkaboutissues.org ). I installed your hack and BAM I haven't had a bot registration for the last 2 to 3 days. This is a very nice and effective mod.

Check out my site and register if you like my forum concept. Thanks!!!

lazyllama 10-08-2008 03:31 PM

Installed this on Monday night at 10pm. By 2pm on Wednesday it had blocked 255 spammers.

Thanks so much for this mod, it's made moderating the registrations a much less time-consuming task.

douffle 10-12-2008 06:51 PM

I installed this mod on two of my forums and each time a spammer tries to register I get a database error. This is the case for both forums. The error is as follows:

Database error in vBulletin 3.7.3:

Invalid SQL:
SELECT DATEDIFF(NOW(), '2008-10-10 12:55:48') AS DAYS;;

MySQL Error : You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near '(NOW(), '2008-10-10 12:55:48') AS DAYS' at line 1
Error Number : 1064
Request Date : Sunday, October 12th 2008 @ 01:46:10 PM
Error Date : Sunday, October 12th 2008 @ 01:46:13 PM
Script : http://www.webmastersden.net/register.php?do=addmember
Referrer : http://www.webmastersden.net/register.php?
IP Address : 92.241.169.185
Username : Violettaext
Classname : vB_Database
MySQL Version :

Anyone else get these error notices?
Anyone have any suggestions on how to resolve it?
I'm still using MySQL 4 on one forum and MySQL 5 on the other.

Thanks

pedigree 10-13-2008 06:49 AM

Hmm, this is a strange now. I do all my development on 5 but I installed 4.1.22 and the query is indeed a valid one. Try this, open includes\functions_vbsfs.php, go to line 71 and change

$sql = "SELECT DATEDIFF(NOW(), '" . $lastseen . "') AS DAYS;";

to

$sql = "SELECT DATEDIFF(NOW(), '" . $lastseen . "') AS DAYS";

Notice the ; removed from before the last "

Can you PM me your exact version of mySQL, PHP and Apache that youre using on the forum that gives you this error, your server locale (US, Japan, French etc) so that I can look at it a bit more

I tried to register on your forum but your NoSpam questions/answers are wrong. 8+8-3 = 13 but not according to your forum :)

DR AUTONAMUS 10-13-2008 07:51 AM

What would be good is a search feature like a cron job on initial install to just search trough already registered users and clean them out if there is any or log them for easy deletion

pedigree 10-13-2008 09:30 AM

Dr Autonamus - something that Ive already thought about that I was going to include in 0.8. ive tried to avoid the feature spread for 0.7 but Ill give write that on my whiteboard now. This is would painfully slow unless using downloaded lists which would be very quick indeed.

douffle 10-13-2008 04:54 PM

Quote:

Originally Posted by pedigree (Post 1643893)
Hmm, this is a strange now. I do all my development on 5 but I installed 4.1.22 and the query is indeed a valid one. Try this, open includes\functions_vbsfs.php, go to line 71 and change

$sql = "SELECT DATEDIFF(NOW(), '" . $lastseen . "') AS DAYS;";

to

$sql = "SELECT DATEDIFF(NOW(), '" . $lastseen . "') AS DAYS";

Notice the ; removed from before the last "

Can you PM me your exact version of mySQL, PHP and Apache that youre using on the forum that gives you this error, your server locale (US, Japan, French etc) so that I can look at it a bit more

I tried to register on your forum but your NoSpam questions/answers are wrong. 8+8-3 = 13 but not according to your forum :)



Hi,

There was a typo in the answer setting which has been corrected.
The problem exists on both of my sites, the one using MySQL4 and the one using MySQL5.

The first site, (vbulletinstuff.com), is using MySQL 5.0.45 and PHP 5.2.6.
The server is located in Hong Kong.

The other site, (webmastersden.net) is using MySQL 4.0.27 and PHP 5.2.6.
The server for this site is located in the U.S.A. I can switch it to MySQL 5 but I just haven't gotten around to doing it yet.

I will change the code as you suggest and get back to you with the results.

Thanks.


All times are GMT. The time now is 07:43 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.02188 seconds
  • Memory Usage 1,850KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (10)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (1)pagenav_pagelinkrel
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (40)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete