Hopefully I increased the security of this hack. It now selects a random character instead of asking the user to enter the first character.
Here is a snippet of code I added.
PHP Code:
if(empty($vbulletin->options['harmor_bot_protection_hash']))
{
$vbulletin->options['harmor_bot_protection_hash'] = "gwetg7gaswegty7sawfrtq2w6t";
}
$word = $ahbot['username']{$ah_rand - 1};
$hash = md5(md5($word).$vbulletin->options['harmor_bot_protection_hash']);
The screenshot has been updated as well.
Attachment 63065