Multi-dotted email addresses

[Snowhog]

Many spammers use email addresses that contain multiple periods. These are almost always spammers registered as such on BotScout.com or stopforumspam.com.

Examples of those that have registered on our forurm (and that we banned). Domain after the @ removed for this posting:

d.ikl.itlo.n.gce.t@
di.kl.it.l.o.ngc.e.t@
pr.u.d.e.n.t.i.ak.jug@
pru.d.e.nt.i.a.k.ju.g@
me.garer.er.t@
d.i.klit.l.o.n.g.ce.t@
d.ikli.t.l.o.n.g.cet@
p.ru.d.en.tia.k.jug@
pr.u.d.e.nt.i.akjug@
p.rude.ntiakj.ug@
pru.de.n.t.ia.kjug@

Has anyone developed a MOD to recognize these multi-dotted email address provided at time of registration so that they can be deleted automatically?

[Andreas]

If they are listed @ stopforumspam.com, why don't you use their blocklists?

Apart from that, yes I've developed a tool which checks all registration attempts against various rules and denies them if there is a match.

But this was solely developed for internal use and will not be released, sorry.

[kh99]

Originally Posted by Snowhog

Has anyone developed a MOD to recognize these multi-dotted email address provided at time of registration so that they can be deleted automatically?

You could do something like this: create a new plugin using hook userdata_start and this code:

$this->validfields['email'][VF_CODE] = '
    $max_dots = 1;
    if ($retval = $dm->verify_useremail($data))
    {
        $parts = explode("@", $data);
        if (is_array($parts) && substr_count($parts[0], ".") > $max_dots)
        {
            $dm->error("bademail");
            $retval = false;
        }
    }
    return $retval;
';

It only checks the part before the '@', so set $max_dots to the number of dots you will allow (I think one dot in an email name probably isn't unusual, but that's up to you). Also, this uses the default 'bademail' phrase, but if you'd rather have a special error messages for "too many dots" you can create a phrase and use the varname in place of 'bademail'.

Originally Posted by Andreas

...But this was loely developed for internal use and will not be releases, sorry.

Oh well...thanks for letting us know.

[Snowhog]

Thank you. I've created the plugin and activated it. We'll see how effective it is. If we stop seeing new registrations with multi-dotted email address's, I'll be happy as a clam.

As to the plugin "uses the default 'bademail' phrase"; where is this phrase located? One of the hardest things about working with vBulletin is learning just where things are!

[kh99]

Go to Languages & Phrases > Search in Phrases, search for bademail and click the "Phrase Variable Name Only" radio button.

If you want to create a different message, go to Phrase Manager > Add New Phrase, and choose "Error Messages" for the phrase type. Whatever you choose for varname, that's what you'd want to put in place of bademail in the plugin code.

[Snowhog]

Thank you.

Okay, so I located Error Messages Phrases Containing 'bademail' per your instructions. When I click the Edit button, if I wanted to change the existing text (You entered an invalid email address.), would I click the Copy Default Text button, change the text to what I want, and click Save? Is it as simple as that?

[kh99]

Yes, that should do it.

[Snowhog]

Okay. Thank you for your assistance. Most appreciated.

--------------- Added [DATE]1338094434[/DATE] at [TIME]1338094434[/TIME] ---------------

After creating this plugin, I logged out and attempted to register using a multi-dotted email address. The plugin works! Registration was thwarted.

This is going to reduce the workload on our Administrators. Kudos and thank you for the plugin code.

[John Lester]

Kevin you rock! This is such an outstandingly simple way to prevent a ton of spammers Thank you.

[Disco_Stu]

Not all emails with more than one dot are spam. My primary email account is through Time Warner's Road Runner service and it has the format of "name@city.rr.com"