Anti-Spam Options - Spambot Stopper - Prevent Spambots from Registering

What is it?
----------------------------
This mod rejects registrations where the form is filled out in less than a minimum time. You can configure one of the following actions to be taken when an automated registration is detected:

- Show a "No Permissions" page
- Display the "Successful Registration" message but without creating an account
- Redirect the user to any URL you choose
- Reload the registration page with an error message of your choosing

You can also provide a list of email addresses to be notified each time a registration is blocked.

Added for version 1.1.1: Time delay enforcer, maximum time option, time limits to cut down on email notifications, posting to a thread.

In the future, I'd like to add some simple logging and statistics, and a summary type of email notification (because people seem to quickly get tired of the single emails).

Note: I coded this myself from scratch, but I would like to acknowledge a couple of previous mods that used this same idea, by users Calorie and noppid, and maybe others. In any case, I believe this one adds some features that the others don't have.

Other advantages: no ads or links, no abuse of update notifications, no disappearing features, no threats to delete the mod (it will never be deleted, at least by me). Also, translations are allowed.

Installation:
----------------------------
1) If you have "Is Bot", "Stop the Registration Bots", "Spammers Suck!", or another mod that works on registration time, note any admincp settings for that mod then uninstall it.

2) Import the product XML file from the Product Manager.

3) Go to Settings > Options > Spambot Stopper Options and configure the desired settings.

4) IMPORTANT: try to register a new user to make sure that there are no problems with humans registering. If you want, you can also temporarily set the minimum time to a higher value (like 60 seconds) and test to see if the spammer rejection is working.



History:
----------------------------
1.1.1 (Feb 16, 2013)

• Added timer for enforcing minimum time
• Added maximum registration time limit
• Added time limits for email notifications
• Added posting notificatiosn to a thread

1.0.1 (Feb 01, 2013)

• Fixed bug
• Added check for fake timestamps

1.0 (Jan 31, 2013)

• Initial Release

[Bluemax712]

Any ideas on how to "automatically" block an IP - if it just repeatedly hammers the login page?
ie: 100's of times per min

Occasionally get ones which don't get past this mod
but they do cause MySql server to complain about too many connections being used up.

PS : I realize can block them afterwards through .htaccess - but looking for an automated way
Thanks

[ForceHSS]

Originally Posted by apsrfvb4

Any ideas on how to "automatically" block an IP - if it just repeatedly hammers the login page?
ie: 100's of times per min

Occasionally get ones which don't get past this mod
but they do cause MySql server to complain about too many connections being used up.

PS : I realize can block them afterwards through .htaccess - but looking for an automated way
Thanks

you could add this and add his user agent
https://vborg.vbsupport.ru/showthread.php?t=268208

[Bluemax712]

Originally Posted by ForceHSS

you could add this and add his user agent
https://vborg.vbsupport.ru/showthread.php?t=268208

Thanks ForceHSS

I was also just checking out this thread: Pre Firewall : Anti-DDos With Sytem Block
https://vborg.vbsupport.ru/showthrea...highlight=DDOS

This sounds interesting - if only I had root access
http://systembash.com/content/how-to...h-mod_evasive/

[kh99]

To be honest I don't know offhand what mod you could use for that. In theory it would be pretty easy to write code to check for a given ip failing a certain number of times and banning it, but since I haven't done it I'm not sure how well it would work in practice. Actually now that I think about it, I believe Lionel (a member who posted early on in this thread) said that he just bans any ip that fails the time check even once. I don't remember if he's adding it to the existing vb ip ban list or doing his own check.

[Bluemax712]

Originally Posted by kh99

I believe Lionel (a member who posted early on in this thread) said that he just bans any ip that fails the time check even once. I don't remember if he's adding it to the existing vb ip ban list or doing his own check.

lol - that's a lil' too harsh for me - it's just the out-of-control ones I'm looking to block from repeatedly banging on the door

ps- I'll be moving my server to a VPS soon - then maybe I'll try adding that Apache mod_evasive module - it sounds awesome

[vbresults]

Originally Posted by apsrfvb4

lol - that's a lil' too harsh for me - it's just the out-of-control ones I'm looking to block from repeatedly banging on the door

ps- I'll be moving my server to a VPS soon - then maybe I'll try adding that Apache mod_evasive module - it sounds awesome

mod_evasive is known to cause problems in vB.

[Bluemax712]

Originally Posted by vbresults

mod_evasive is known to cause problems in vB.

Thanks for the warning - unfortunately I didn't end up getting the VPS either

[vbresults]

Originally Posted by apsrfvb4

Thanks for the warning - unfortunately I didn't end up getting the VPS either

Sure; how come?

[Bluemax712]

Originally Posted by vbresults

Sure; how come?

sadly my tree de dinero died

[Dave234]

Hello,
I would like to install this, but how do I do it? I downloaded the zip file, and I see the XML file called "product-kh99_spambot_stopper_1.1.1", but where do I drag that to?

In my filezilla, after I connect to my website, I see a folder with a "/", then beneath that is "admincp". Do I drag it to the "admincp" folder?

Please help me, as I am a complete novice to this stuff. I have a feeling it is the "admincp" folder...

I don't want to do anything until I'm sure, though, as I'm scared to mess anything up and I don't know how to back the thing up.