Miscellaneous Hacks - Stop the Registration Bots

Control your vBulletin forum registration process and stop the registration bots.

This mod will check the the time it takes for a vBulletin registration form to be submitted. If the form is submitted faster then humanly possible, the registration will be denied and the admin contact will be emailed about the event. The time is settable

We will start the registration on the forum rules page in two ways. First we will add a custom hidden field with a hash. Second we will insert a randomly named hidden field with a random value. This should make it a bit difficult to program a bot since the field names on all sites will be different as well as the values.

We will use a second set of random hidden fields on the form page as well to add to the confusion.

Time stamps to check the time spent on registration submission are stored in a DB table and private.

A registration will have to come through the Rules page and the form. Every Site will be different.

Installation is very easy.

There are two templates to edit.
One database table is added.
Three hooks are utilized.
Includes uninstall code.
Adds to vBulletin options.
Set time frame option.
Includes Phrases.
Sends Mail to Admin.
No files to upload.
XML product install.
Instructions attached in zip.

Demo usage and view source at http://www.riderinfo.com/

Compatibility
This hack is known to work on vBulletin 3.6.11 PL1 and will likely work back a few versions in the 3.6.x vBulletin series. Of course it works on 3.7.x as posted too.

HISTORY
1.2.2
added admin email on/off setting
moved hook code to files to reduce overhead.
1.2.1
Added Enable/Disable setting.
Fixed coppa includes file probem
Added file upload instructions to readme file.
1.2.0
Added JS timer to registration button.
Added enable/diable for email.
Removed ACP settings for random fields on rules and reg form pages and automated.
Reworded Pharses in ACP.
Recoded rules form and reg form edits.
Renamed variables for better code following.
Added more DB fields per user reg for tracking random automation.
New Hook on start_registration for functions.
Added new functions file. includes/stb_functions.php.
1.0.3
Changed input user name on rules form to random named hidden field with hash value.
Removed \n chars from email phrases.
All changes to registration are transparent to the folks registering.
Renamed DB username field to hash.
New hook on register_signup.
1.0.2
Added new Pre Reg Name hidden field to register form edits and ACP.
Added code to deal transparently with user deciding to change name after pre submitting it.
1.0.1
Fixed typo, changed 36000 to 3600 in product file.
1.0.0
Original Release.

[Spank]

Seems to work ok for me on 3.8

[briang959]

This is a GREAT mod! Thanks!

Like other users, I would like to see the IP address of the denied registration for the same reason. If too many from a certain area/country are coming in, I can ban the whole lot.

Installed on 3.7.4 PL1 at http://forum.whatismyip.com

Brian

[MichaelApproved]

Can this be setup to put the user in a different group if he is suspected? I'd like to create a group for suspect registrations and not allow them to post until mod checks the account.

[flup]

hopefully this helps, really annoying these bots..

[noppid]

Sorry I have not replied, I have not gotten a notice of posts until today.

I have upgraded to 3.8.1 and will do some tests and see if these complaints need addressing. As far as I can tell, this sill works. But we will have a look.

Originally Posted by MichaelApproved

Can this be setup to put the user in a different group if he is suspected? I'd like to create a group for suspect registrations and not allow them to post until mod checks the account.

That's a pretty great idea. Let them in, but throw them in moderation perhaps. We can look into that.


EDIT: We just tested on 3.8.1 and had no issues. If you have issues, please give us details. Thanks

[|Jordan|]

Can you add the ability for this mod to ban the IP address of the bot trying to register?

[Mr-Moo]

Currently installed on Vbulletin 3.6.5 and testing. I have 3 other anti-spam options which do not work, hopefully this one will do the trick.

Current Installs:
NoSpam! question during registration
Advanced Captcha image verification
Bot database

// Update //

Tested it out and I have received 23 notifications of failed registrations all under 5 seconds. This is working like a charm! I have this running with email verification and the above anti-spam items.

Thank you again! *Marked Installed*

[putergirl]

downloaded

[Ohiosweetheart]

This is working fine on my 3.8.1 forums. Just wanted to let you know.

Greg, do you plan to add an option for the admin to received the emails or not. Many of my clients are asking for this.

[noppid]

Hi Peggy,

Thanks for the note. I had actually done this and forgot to post it. So, I moved the hook code to files to reduce overhead too while I had it open checking out what we could do with your suggestion.

So, I'll post 1.2.2 right now for ya'll.