Go Back   vb.org Archive > Community Discussions > Modification Requests/Questions (Unpaid)
  #1  
Old 03-20-2009, 04:57 PM
rrr rrr is offline
 
Join Date: Oct 2004
Location: California
Posts: 132
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default forum image spam - similar to email image spam

I'm noticing a trend of a new kind of forum spam where real users signup for multiple forums and make "real sounding" posts.

At the end of their posts, they include a tiny 1x1 pixel image from a random image hosting service using the [img] tag so that you can't even see it or notice it within the post.

I did some google searching and noticed the same small image posted on dozens of differerent forums.

Our guess is somewhere down the line, this person will change the image from a "harmless" 1x1 pixel to some type of advertising/obscene/obnoxious image like those seen in email image spam.

My question: is there a way to combat this as a forum admin? Block the use of the img tag for certain usergroups? Another solution?

There's this mod that blocks members from posting images and links if they have fewer than 15 posts, but I don't want to block new members from posting their link in our intro area, so that mod would be too far reaching.

There's also this mod from Cyb that adds advanced permissions, but it also lumps links and images together, instead of just blocking the embedded [img] tag.

Does anyone know of a mod that *just* will block the [img] tag for members of a certain usergroup or a certain amount of posts?
Reply With Quote
  #2  
Old 03-23-2009, 03:30 PM
rrr rrr is offline
 
Join Date: Oct 2004
Location: California
Posts: 132
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

anybody have any suggestions?
Reply With Quote
  #3  
Old 03-24-2009, 09:09 AM
J105C J105C is offline
 
Join Date: Mar 2008
Posts: 120
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Well if you know the image link you can simply use the Replacement Variable Manager to change the image URL.

AdminCP>Styles & Templates>Replacement Variable Manager

Then select, 'add new replacement variable' next to each active skin and copy the ENTIRE or PART of the 1px image URL and paste it into the section, 'Search for Text' then enter a new image URL into the section, 'Replace with Text'.

That should fix ALL the 1px images from ever showing. If there are TONS of different trailing image file names I would create a new replacement variable for the base domain name to result in a red X.
Reply With Quote
  #4  
Old 04-21-2009, 03:35 AM
Jafo232 Jafo232 is offline
 
Join Date: May 2004
Posts: 1,122
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Problem here is, they are using multiple domains, in fact, I am a bit surprised an attacker would have this many. I am seeing this beginning to crop up.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 02:22 AM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2024, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.03905 seconds
  • Memory Usage 2,180KB
  • Queries Executed 13 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (4)post_thanks_box
  • (4)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (4)post_thanks_postbit_info
  • (4)postbit
  • (4)postbit_onlinestatus
  • (4)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_postinfo_query
  • fetch_postinfo
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete