vb.org Archive - Suspicious username registering

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- Community Lounge (https://vborg.vbsupport.ru/forumdisplay.php?f=13)

- - Suspicious username registering - spammers? (https://vborg.vbsupport.ru/showthread.php?t=63811)

Meza	04-13-2004 12:46 PM

Suspicious username registering - spammers?

I've spotted a series of usernames registering on my forums that follow a similar pattern, and they all have email addresses at the domain emailaccount.com
the usernames look like the following:
! ! 1gagarin
! ! 2babka
! ! b0nd @ @
! ! roger ! !
! @rtist
! eprst !

Any ideas what this could be? I've banned them all straight away (have 'moderate new users' ON)
Wondered if it was just someone pissing about or if it was an automated spamming script attacking us or something?

Xenon

04-13-2004 12:54 PM

These users try to get on top of your memberlists, to make cheap advertising on your site...

I suggest to disallow such usernames from the start on.

On vb.org such usernames are blocked :)

Meza	04-13-2004 01:11 PM

Thanks for the heads up - I've checked and every one of them had a link to a porn site in their profile, very clever!

How do I stop 'such' usernames from registering?

Xenon

04-13-2004 01:15 PM

it's a little code hack.

the easy way is something like that in the username check section of register.php:

PHP Code:


		
			
    // vb.org check for a valid username (has to start with 0-9 or a-z or A-Z

    if (!(($_POST['username']{0} >= '0' AND $_POST['username']{0} <= '9')

        OR ($_POST['username']{0} >= 'a' AND $_POST['username']{0} <= 'z')

        OR ($_POST['username']{0} >= 'A' AND $_POST['username']{0} <= 'Z')))

    {

        $errors[20] = "Invalid Username";

    }

Meza	04-13-2004 01:22 PM

genius! is that VB2 or VB3 code? I'm a 2'er

Xenon

04-13-2004 01:26 PM

that's vb3, bt it shouldn't be hard to transfere that to vb2 as well :)

Meza	04-13-2004 01:33 PM

I changed it to:

PHP Code:


		
			
    if (!(($username{0} >= '0' AND $username{0} <= '9') 

        OR ($username{0} >= 'a' AND $username{0} <= 'z') 

        OR ($username{0} >= 'A' AND $username{0} <= 'Z'))) 

    { 

        eval("standarderror(\"".gettemplate("error_invalidusername")."\");"); 

    }

and it seems to work a treat
thank you

genmud

04-13-2004 02:04 PM

I was getting the same problems... I didn't really care that they were registering because they weren't spamming the forums, but It did kind of look bad because my forum is really tiny that there were like 62 members and 250 posts... lol

anywho... the registrants e-mails were all coming from a site called fromru.com or something. I just added that to my ban list :P

filburt1

04-13-2004 04:57 PM

On my board, I just blocked usernames with exclaimation marks and such. I never had a problem with it before, but to be safe...

All times are GMT. The time now is 10:26 AM.

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01070 seconds Memory Usage 1,731KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (2)bbcode_php_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)post_thanks_navbar_search (1)printthread (9)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: