Administrative and Maintenance Tools - Stop the Registration Bots

Stop the Registration Bots for vBulletin 4.2.0 PL3 and up.

This mod will check the the time it takes for a vBulletin registration form to be submitted. If the form is submitted faster then humanly possible, the registration will be denied and the admin contact can be emailed about the event.

First we will add a custom hidden field with a hash. Second we will insert a randomly named hidden field with a random value. This should make it a bit difficult to program a bot since the field names on all sites will be different as well as the values.

Time stamps to check the time spent on registration submission are stored in a DB table and private.

Installation is very easy.
Template edits.
Files to upload.
Product xml file to import.

Backup your database before any install or upgrade.

To upgrade from 2.x to 4.0.2, remove the existing Stop the Registration Bots product in the ACP and then follow the installation file instructions.


History

4.0.2
Added 10 minute delete interval
Fixed bug in part 3
updated table query
removed old hook code from product.

4.0.1
modify phrase vars
modified install instructions for 4.2.0 pl3 templates.

4.0.0
modified to work with vB 4.x.

2.0.2
Edited file includes/stb_reg_process.php
Added IP and Proxy IP to email notification.

2.0.1
Added tabindex="1" to input box template edit.
Fixed onsubmit code in input box template edit.

2.0.0
Conversion from vB 3.x version to vB 4.x
Reduced template edits to one.
Edited all arrays to include single quotes.
Removed ACP Setting StopBotReg_rulespage_hash
Removed Rules page instructions. All one page now.
Removed file includes/stb_reg_signup.php
Removed hook register_signup
Edited includes/cron/strb_cron_job.php Removed Rules page query.
Removed `rf_name` and `rf_value` fields from DB table.
Moved register_form_start hook code to register_form_complete hook
New Phrases
stop_reg_bot_please_wait
stop_reg_bot_seconds_more
stop_reg_bot_seconds_remaining
Removed phrase stop_reg_bot_enter_prereg_name
Removed phrase setting_StopBotReg_rulespage_hash_title
Removed phrase setting_StopBotReg_rulespage_hash_desc

[noppid]

Originally Posted by noppid

BTW, the template edit code for the register template, while it works, is wrong. In 4.0.1 it will be...

<input type="submit" class="button" name="timeremaining" value="{vb:rawphrase complete_registration} in {vb:raw vboptions.StopBotRegMinTime}" tabindex="1" accesskey="s" onsubmit="submit_form()" />

Anyone with 4.0.0 will need to redo the register template edit on upgrade. You can fix it now if you wish to.

The modification download has been updated to 2.0.1. This is an update the the instructions. As stated, anyone with 4.0.0 only needs to redo the register template edit to apply this update. You should import the product file to reflect the 2.0.1 version number.

[linuxututs]

whats a good time frame for the "Minimum Time for Registration Submission" guy's ?

The default 15 seconds ? or be better to make it a little more ?

Thanks,

[noppid]

Most people can't fill out the form in 30 or even 45 seconds. But it's a judgment call.

[linuxututs]

That's what I was thinking to Mate.

Maybe some bots are smarter than others ( I'll make mine 45 I think )

thank,

[solboy]

This actually works. Thanks.

[Hammertime]

Thanks for this.

Great mod, essential imo.

Nominated.

[LCN2007]

Ill check it out

Thanks Noppid

[LuisManson]

i really like this!
any chances to include the IP of the rejected form poster?

[noppid]

Originally Posted by LuisManson

i really like this!
any chances to include the IP of the rejected form poster?

Sure. We can try and send whatever is possible from the globals.

EDIT: vB Supplies two constants that we can use like this...

IP: 67.x.x.11 Proxy IP (if any): 67.x.x.11

[fluidswork]

Thats a good idea i think ....

this will atleast stop some spam in the forums ......