vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 3.8 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=235)
-   -   Miscellaneous Hacks - Enhanced Captcha Image Verification - stop bots from signing up!! (https://vborg.vbsupport.ru/showthread.php?t=132482)

steadicamop 12-01-2006 06:33 PM

The most obvious problem is with the structure - if you check the thread above it shows how to check and correct if it's not right - if all else fails I can check your forum and see if I can figure it out from that.

The only real reasons for the images not showing are GD libraries aren't installed and the /verification directory isn't in the correct place.

Let me know and we can go from there.

Cheers

Jason

soniceffect 12-01-2006 08:09 PM

ok ... the reason for the 2 different images not showing on here .. (ie the one with red x and one just with writing) is by the looks of it depenedant on whether firefox or explorer is used ..... explorer shows the crosses, and firefox doesnt..

Anyways, checked the gd in the php.ini and is same as your example .... also right clicked on red cross and clicked properties, and it does show the correct path to show.php so guessing it has to be something there... Is a windows server dunno if that makes a difference.... Any other ideas?

Jeordie015 12-02-2006 03:02 AM

I was using vB 3.6.0 and it worked fine. I just upgraded to 3.6.4 and it doesn't work. It just goes to the rules page when you click Register.

SportsZone 12-02-2006 06:34 AM

Quote:

Originally Posted by Jeordie015
I just upgraded to 3.6.4 and it doesn't work. It just goes to the rules page when you click Register.

Same here. I got the images once, but now they don't reappear. I cleared my cookies and it worked again.

edit

to get around the image verification page, all you have to do is go to register, click back when on the image verification page, then then go to re-register, and you don't get the verification page again :/

PamelaE 12-02-2006 09:20 AM

Quote:

Originally Posted by steadicamop (Post 1125948)
All I will say is give it a try - you've nothing to lose by trying. So far I have had NO spam bots sign up on my forum, I'm very tempted to disable it to see how many I get in 24 hours, then enable it and see how many more I get in a further 24 hours.

I don't see how a peice of software can read what an image is - yes it can understand text but how would it know that it's a picture of an aeroplane, or a car, or a person, or a banana .....

Thanks steadicamop,

I implemented this solution and did not receive any spam until today. so that was about 4 or 5 days without spam when we were getting loads. So it did work but now they are getting through again.

How is that possible ? Im no techie but these people who make these bots need to get decent jobs because they must be a rather intelligent bunch.

steadicamop 12-02-2006 09:22 AM

It is likely they are just getting lucky with "clicks" they are finding the right combination, plus they may also know about this thread and have combatted how it works - I'm going to try and get on to the strike system to see if it's possible to make it more secure.

I'm PM'ing people with problems to try and help solve these issues.

Cheers

Jason

PamelaE 12-02-2006 11:39 AM

Thanks.

Im wondering if making the number of images displayed change an extra layer of security or perhaps it makes no difference to how the bots work. So like sometimes its 5 images.

But regardless of the fact they have made it through now , it has 100% cut down on the number we were getting and the latest was not porn. :)

steadicamop 12-02-2006 02:17 PM

If you'd like to use more than 5 I can knock up a quick hack to change this - it's something I'm working into version 2 as well, an option to select how many images you can show.

aceofspades 12-04-2006 04:08 PM

Guys don't you see, the bots arnt guessing the right image, its humans signing up and then passing the details onto the computer bots who do all the posting work.

There is nothing you can do about that other than delete their posts.

Simetrical 12-06-2006 01:57 AM

This is no defense against anything programmed to defeat it. All it would have to do is keep on clicking image #1 until it happened to be right. So basically this only works for things that aren't programmed to defeat it, and given that, you may as well just add an extra clickthrough page to confuse the bot just as effectively but with less inconvenience to human registrants and web admins alike.


All times are GMT. The time now is 03:57 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01628 seconds
  • Memory Usage 1,740KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (2)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (1)pagenav_pagelinkrel
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete