Miscellaneous Hacks - Enhanced Image Captcha - Stop bots from signing up!

Title : Enhanced Image Captcha

Version : 2.2b

VB Versions : Currently working and tested on 3.8.4 (as of Dec 2014)

Coder : Andy Calderbank & Jason Williams

Purpose : Add extra Image Verification to the registration process, using an alternative system to the Captcha system.

The Enhanced Image Captcha system is a unique system using images versus text to stop spammers signing up to your forum. The script automatically detects images and uses the filename as the title, making adding new images extremely simple. To further improve security, the images are passed through a script which means that none of the images on the screen have file names - and cannot be associated to the question by title alone - and cannot be viewed by trying to access the images directly.

Please note, there is a .htaccess file within the images directory, to keep security tight, this must be kept, without it bots are able to scan the images and make a match, I understand not every server can utilist .htaccess but cannot get around this.

Important : This has been tested on 3.7 and 3.6.2 - as far as I know this should be backwards and forwards compatible.

My thanks go to all the guys who have helped with this, all the suggestions and feedback, all has been take on board and where necessary included in this new version - members in particular are : King Kovifor, Danny.VBT, Lynne and RCK.

Also thanks to ogameclub for the Turkish translated version.

I must thank Opserty too for their hard work in making me understand where I was going wrong!!

New features from original 1.11 release!!

Admin settable options:

• Number of images to display
• Path to image directory (so you can change if you prefer)
• Resize image between 50% - 150% of original image
• Number of images to display before a line break (see History)
• Enable/Disable

Demo : http://www.steadiforum.net/register.php

I hope this is help to the VBulletin community as I know this is a growing problem. I don't fancy the thought of trawling through hundreds of new members deleting stupid usernames and spam posts.

Installation :

1. Upload show.php to your forum root directory (or wherever register.php is).
2. Upload the images/verification directory, this can be moved to the forum root or have the verification name changed, but needs updating in the Enhanced Image Captcha AdminCP options.
3. Import Product - product-enhanced_image_captcha.xml
4. Make sure that you check that the Images Path is correct in AdminCP -> VBulletin Options -> Enhanced Image Captcha.
5. You can also select how many images and what size from the original you would prefer.

Upgrading:

1. Import Product - product-enhanced_image_captcha.xml - overwrite if necessary.
2. Set any options you need in AdminCP -> VBulletin Options -> Enhanced Image Captcha.

Upgrading from v1.xx :

1. Remove the images/verification directory and all images inside.
2. Uninstall the product - Enhanced Captcha Image Verification - important for phrase and template removal!
3. Upload show.php to your forum root directory (or wherever register.php is).
4. Upload the images/verification directory, this can be moved to the forum root or have the verification name changed, but needs updating in the Enhanced Image Captcha AdminCP options.
5. Import Product - product-enhanced_image_captcha.xml - overwrite if necessary.
6. Make sure that you check that the Images Path is correct in AdminCP -> VBulletin Options -> Enhanced Image Captcha.
7. You can also select how many images and what size from the original you would prefer.

Requirements : GD Libraries installed

File uploads : 53 (including images)
Files to Import : 1
New Templates : 2
New Phrases : 15
Uses Hooks : 1
New Queries : 0

History :
v2.0b

• Original Beta release

v2.1b

• Added Enable/Disable Option
• Also added Turkish Translated version
• Added new image page

v2.2b

• Bug Fix : Opera browsers, any number over around 8 images disappears over side of screen, added number of images before line break function to stop this happening

Don't forget you don't have to use the provided images - you can customise these to any you wish - I've used ones that are hopefully universal and everyone will recognise.

[James Desalus]

A strike system would make this mod PERFECT. I'm going to install this within the next few days.

Great work, Steadicamop.

[Chance4Today]

Thanks for this I have been getting hit hard on a fresh license from vbulletin and have only 7 actual members but have had over 30 bots already. I hope this helps....

[JVSP]

Originally Posted by James Desalus

A strike system would make this mod PERFECT. I'm going to install this within the next few days.

Great work, Steadicamop.

x2:up:

[jmellors]

To get the image pack 2 working do you just upload them and it does it automatically?

[Christophe_O]

Originally Posted by steadicamop

...I think I may up the total number of images to 20, just so it's an option anyone can use...

Well I am no expert but here is my thinking.

• I suggest to create 2-3 multiple-choice options instead of just one. I.e., the verification page might consist of 2 or 3 challenges to choose the correct image from a row of 7-10 images. The visitor could be asked to check a box beside the correct image, 2-3 times. Still simple for humans, and only requiring a download of 14 to 21 images, but offering 49 to 343 possible answers.
• Otherwise, I am concerned that this hack may not work if it becomes widely used. To be human friendly, we need to limit the images to 15 and also to allow 3 tries. This allows a high guessability ratio of about 20%. Even with 30 images, but only 1 question, it's still not ideal for blocking robots, and less human friendly. Currently 15 images can work fine because this is not widely used. But if this program becomes popular, it will also become worthwhile to program robots to get in by repeated guessing--going to the next forum on the list, then returning the next day, or etc--unless the variation is increased.
• Also, when I click a 'wrong' image ... then try to go 'back' with Firefox ... the images are not refreshed automatically. This will confuse some people, I think.
• Very promising hack! Has my vote for MOTM. Sorry I accidentally left my original comments in your old thread: Enhanced Image Captcha 1.11

[intricatic]

This is an absolutely fantastic modification. Thanks.

[joeeleven]

Warning: session_start() [function.session-start]: open_basedir restriction in effect. File(/var/tmp/) is not within the allowed path(s): (/usr/home/*****/:/usr/lib/php:/usr/local/lib/php:/tmp) in [path]/register.php(204) : eval()'d code on line 3

Fatal error: session_start() [<a href='function.session-start'>function.session-start</a>]: Failed to initialize storage module: files (path: ) in /usr/home/*****/public_html/register.php(204) : eval()'d code on line 3

this is on vbulleting 3.7.1
any help?
i need to stop those damn bots, more than 10 registrations a day

[steadicamop]

Hmmm odd ... will have to check into this, looks very unusual to me, will get back to you when I can figure it out.

[callumbush]

Hi Steadycamop,

Looks like a great mod! Are we near to non-beta? I might wait for that..

p.s. my dad is a Jimmy Jib operator, small world! I hear the steady cams are meant to be quite good

[steadicamop]

This is pretty much out of beta as it is now -- there aren't any more real changes I could make to make it another version up -- I will just take the Beta status off, I think it's working well and with no issues so far (except one above, which I'm addressing).

callumbush :: Steadicam, great fun, heavy as hell but love the look people give you running with it!!!