Quote:
Originally Posted by mikesz
With the captcha AND the SPAM question MOD installed, I was STILL getting 4 to 5 bogus registration EVERY day. I finally added a script to my registration form that traps the bogus submissions and NUKES them before they can submit the junk. I have a record of the IP address and other stuff they used so my "badguy blacklist" is dynamic and pretty much up to date. In addition to the IP address, I wrote some filters that check for known badguy foot prints which enables me to determine a bogus registration by other means as well. I have added a honeypot to mix too (it takes out a fair number of them including badbots that ignore robots.txt). Since last November I have completely eliminated the daily flow of badguys from my site. Zero, not one! I have collected almost 10000 IP addresses of attempts to illicitly access my site. The email addresses they use are almost always forged from the data I have been able to collect over that time period.
Since upgrading to 3.7.0 I have not yet turned of MY system to see if the vB system does what it is suppose to do and am not sure if I will, given that I have some thing that absolutely works and like they say, "if it works, don't fix it" ... I may do some testing at some point to see if 3.7.0 catches the badguys but I don't have a priority for it now.
regards, mikesz
|
I think you should probably release that system as a modification, since there'd likely be a decent amount of interest in it. So it's basically an auto ban blacklist depending on certain factors of the user registering, like certain info being entered?
Oh, and if you ever use question and answer, I'd say to make the questions more complex than Maths and less general knowledge. Because as said, bots can solve maths. As can normal computers.