Prevent php regex, someone using private.php maybe using they bot spammer script
 

Hi guys,

about few days a go, my members got a lot enough spam private messages from few spammer members, its looks like there is a bot spam script outthere, to search members username and send spam private messages, maybe using php regex

is there a way to prevent private.php page by accessing from other server, so only real user that can accessing the page? maybe like prevent hotlinking image

Nb.
I already set member can only send 5 pm at once. But they can still sending constant pm. I get simillar pm from forums.digitalpoint.com few times before, even my account dont have post yet there

Its not about the pm's settings, but how to prevent this private.php page, and other page that can accessed and abused by script from other server maybe using regex

please share your knowledge guys

Just set the throttle to one PM per hour for your new member usergroup. And add a function for members to report PMs. Then you will discover spammers quickly.
Regarding the use of bad bots / scripts: look into vb Bad Behavior to block those.

like in first post, Its not about the pm's settings, they can set the bot to send only x pm's perhour too if we change it, and create new members/new ip address even we already ban it

the best example is in webmaster central forum, forums.digitalpoint.com, if you are the member there, sometime you will get pm's like this from spammers

it is better if there are way to block private.php page used by cross linking, only allowed real user

please share if anyone know how to make private.php page more secure

Maybe you could do one of:

- Add human verification to PMs
- Add an extra text field or checkbox to the PM form then check for it before sending a PM
- Rename private.php to something else (you'd also need to find everywhere private.php is used in the code and templates and change those too).

But of course all of those would require some programming, and possible editing of vb files.