Anti-Spam Options - Is Bot: Registration Time Check

This mod calculates the time it takes to go between these two pages:

• /forum/register.php?do=register
• /forum/register.php?do=addmember

The point is to try and prevent bots from registering at your forum when the time between the two pages is humanly impossible, assuming that humans actually take the time to complete the registration page.

Should a user be blocked from registering at your forum, an email will be sent to your vB webmasteremail address and the user will see the vB noregister phrase message, so no screenshot is necessary.

[TheMilkCarton]

Well, this mod seems pretty dead, and I doubt the dev would add this to the actual product, but I thought it was important to show the IP.

Change register_addmember_process to:

PHP Code:

$vbulletin->input->clean_array_gpc('p', array(
    'isbot_time1' => TYPE_UINT
));

if ($vbulletin->GPC['username'] && $vbulletin->GPC['email'])
{
    $isbot_time1 = $vbulletin->GPC['isbot_time1'];
    $isbot_time2 = TIMENOW;
    $isbot_timediff = intval($isbot_time2 - $isbot_time1);

    if ($isbot_timediff <= 15) // difference in seconds
    {
        $isbot_username = htmlspecialchars_uni($vbulletin->GPC['username']);
        $isbot_email = htmlspecialchars_uni($vbulletin->GPC['email']);

        $isbot_subject = $vbphrase['isbot_user_blocked_from_registering'];
        $isbot_message = $vbphrase['isbot_the_following_name_email_blocked']
            . ': ' . $isbot_username . ' - ' . $isbot_email
            . ' (' . $isbot_timediff . ' ' . $vbphrase['isbot_seconds_transpired'] . ')';
        $isbot_message .= "\n\r\n\rAttempt was made from: ". IPADDRESS ."";

        vbmail($vbulletin->options['webmasteremail'], $isbot_subject, $isbot_message, true);

        eval(standard_error(fetch_error('noregister')));
    }
} 


I think it helps decide whether or not I should just give in and ban a certain IP range.. my forum isn't exactly international so it really doesn't matter to me. I also think the IP in combination with the other things in the email will help you decide if it's a bot or if it's legit, since the problem I described in the post above can possibly lead to a lot of false positives.

[GrendelKhan{TSU]

wow sounds like just what I need!! thanks (don't know how I missed this!)

[BadgerDog]

There are three (3) register templates with the phrase:

<input type="hidden" name="url" value="$url" />

Which is the correct one to add th new text line after?

Thanks ...

Regards,
Badger

Edit: Ignore question. As a test, I added it to the template called "register" only and it must have worked, as after about an hour, I got this:

The following user name with email address was blocked by the Is Bot mod: mubssnono - jastyfestap@mail.ru (2 seconds transpired)

I have the setting at 5 seconds. Is that about right based upon what I've been reading here?

[mystic10]

how do i edit..when i click on on the xml it shows all the codes but i cant edit them

[mystic10]

where do i exactly put this sorry not sure where to put please guide:

Change register_addmember_process to:

PHP Code:
$vbulletin->input->clean_array_gpc('p', array(
'isbot_time1' => TYPE_UINT
));

if ($vbulletin->GPC['username'] && $vbulletin->GPC['email'])
{
$isbot_time1 = $vbulletin->GPC['isbot_time1'];
$isbot_time2 = TIMENOW;
$isbot_timediff = intval($isbot_time2 - $isbot_time1);

if ($isbot_timediff <= 15) // difference in seconds
{
$isbot_username = htmlspecialchars_uni($vbulletin->GPC['username']);
$isbot_email = htmlspecialchars_uni($vbulletin->GPC['email']);

$isbot_subject = $vbphrase['isbot_user_blocked_from_registering'];
$isbot_message = $vbphrase['isbot_the_following_name_email_blocked']
. ': ' . $isbot_username . ' - ' . $isbot_email
. ' (' . $isbot_timediff . ' ' . $vbphrase['isbot_seconds_transpired'] . ')';
$isbot_message .= "\n\r\n\rAttempt was made from: ". IPADDRESS ."";

vbmail($vbulletin->options['webmasteremail'], $isbot_subject, $isbot_message, true);

eval(standard_error(fetch_error('noregister')));
}
}

[BadgerDog]

Originally Posted by TheMilkCarton

Well, this mod seems pretty dead, and I doubt the dev would add this to the actual product, but I thought it was important to show the IP.

Change register_addmember_process to:

Thanks ... :up:

I made that change completely replacing existing plugin code with yours....

Regards,
Badger

[TheMilkCarton]

Mystic, You edit the plugin after it's been installed. Go to the Plugin Manager.

Badger, 5 seconds is extremely low. I constantly have bots taking up to 14 seconds (I have it set at 15), and my other hacks catch the rest that take over 15 seconds.

[BadgerDog]

Originally Posted by TheMilkCarton

Mystic, You edit the plugin after it's been installed. Go to the Plugin Manager.

Badger, 5 seconds is extremely low. I constantly have bots taking up to 14 seconds (I have it set at 15), and my other hacks catch the rest that take over 15 seconds.

Roger that ... :up:

I'll raise it to 15 seconds....

BTW, what other hacks to you use to catch the rest?

Thanks ..

Regards,
Badger

[mystic10]

thanks milkcarton very kind of you to reply

[Lionel]

Originally Posted by webgod

if there's enough interest, I could modify it so the IP is added to the Ban IP list

That would be great to auto ban both IP and email address. Because they keep on trying over and over. I've got mine set at 5 seconds. The way those bots seem to work, they try first, then they retry with a delay. If they get banned the first time, then all would be good.