I rarely get spammers, but now I have a big problem, maybe. A spammer has been able to slip past my moderating system and post his crap. Is there a known vulnerability in vbulletin that can be exploited right now?
I use a rigorous moderating system including verifying emails upon signup, a mandatory waiting period of 24 hours, and moderating the first several posts. I have a special usergroup for the newbies that all signups enter after verifying the email, and all posts of this group get moderated. After hitting a certain post count they automatically get promoted.
I have a spammer with no posts who has somehow bypassed the newbie usergroup and been promoted straight to the regular, unmoderated, group! Is it possible for a newbie by sheer volume of posts to flood the moderation que and get himself automatically promoted? Is there some vulnerability or exploit that lets these people in? By the gods if my newbs find a way to bypass the moderation que there will be hell on earth on my board.
My spammer is still getting hit by the waiting period it seems, but I can't fathom how he is getting promoted. I don't check often, but is there a way to check the logs and see if one of my mods has changed this users status, or view any other kind of history or record of when and where this user received his change in user category?
01-18-2008, 03:04 AM
Threaded Mode