Go Back   vb.org Archive > vBulletin 4 Discussion > vB4 General Discussions
FAQ Community Calendar Today's Posts Search

Reply
 
Thread Tools Display Modes
  #1  
Old 04-23-2011, 11:11 AM
Dene2 Dene2 is offline
 
Join Date: Dec 2007
Posts: 10
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default Strange posts appearing

Hi guys we have some cyrilic posts and other spam posts coming up in last few days even tho guests are now allowed to post, I am using the lates verson of vb but they still get through, any ideas how to stop this ?
Reply With Quote
  #2  
Old 04-23-2011, 03:03 PM
janaf janaf is offline
 
Join Date: Dec 2009
Posts: 169
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

What security against this do you have in place?

Use Q and A if you do not already have it enabled:

- ACP - Settings - Options - Human verification Options
then
- ACP - Settings - Human Verification Manager

I'd not recommend reCaptcha as there are well known (by spammers) ways to get through it.

You can also use promotion:
- New members only have write access to one forum, hidden from others
- If they behave, then you can promote them to a group with full rights
Admins / moderators can monitor the hidden forum and ban spammers before they do any harm. The promotion can be done automatically.

But first, what have you already done?
Reply With Quote
  #3  
Old 04-23-2011, 07:51 PM
Dene2 Dene2 is offline
 
Join Date: Dec 2007
Posts: 10
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

I have post and threads hidden from guests , guest cant post, Q& A verification in place and still they get through and have posted as a guest so something isnt right somewhere
Reply With Quote
  #4  
Old 04-24-2011, 12:51 AM
Videx's Avatar
Videx Videx is offline
 
Join Date: Feb 2007
Posts: 3,085
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

You didn't even tell us what version of vb you're running. Update to the very latest first - VB doesn't release these security updates for their own amusement.
Reply With Quote
  #5  
Old 04-24-2011, 07:23 AM
janaf janaf is offline
 
Join Date: Dec 2009
Posts: 169
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

There is the possibility they are manually / properly registerd and no technical system can prevent that, if regestering is allowed. Then there is not much to do then but to ban them when they start postig .

Or if it is a forum with limited number of new members and a specific community, then have everyone introduce themselves writing some specifics related to your forum, in a hidden forum that only admins / moderators see. Then promote or ban them depending on how they write their introduction. Most manual spammers will not bother with this step.
Reply With Quote
  #6  
Old 04-26-2011, 10:59 AM
Dene2 Dene2 is offline
 
Join Date: Dec 2007
Posts: 10
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

I said the Latest version available in original post which I am assuming is the : 4.1.3 which I have, I have all forums set so that guests cannot post!! I also have the question and answer for registration, so it has nothing to do with members registering and then posts as these ppl are posting as a GUEST this is the issue and somehow they are getting in and doing it.

--------------- Added [DATE]1303819247[/DATE] at [TIME]1303819247[/TIME] ---------------

Quote:
Originally Posted by Videx View Post
You didn't even tell us what version of vb you're running. Update to the very latest first - VB doesn't release these security updates for their own amusement.
Yes I did i said the latest version all upto date!
Reply With Quote
  #7  
Old 04-26-2011, 01:04 PM
WEBDosser's Avatar
WEBDosser WEBDosser is offline
 
Join Date: Oct 2001
Location: @ MyPC
Posts: 824
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

how many others have access to admincp/modcp
Reply With Quote
  #8  
Old 04-26-2011, 01:07 PM
Dene2 Dene2 is offline
 
Join Date: Dec 2007
Posts: 10
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

just myself and two guys who works for me both trusted and I have checked all permissions, the posts that appear are sometimes in cyrillic language or code or just basic gobledygook, and they are normally within a thread and non related to the actual thread title, its concerning in case they post links to virus or adult orientated sites and could be a new exploit, hope someone can help maybe even an admin or something??
Reply With Quote
  #9  
Old 04-26-2011, 01:11 PM
WEBDosser's Avatar
WEBDosser WEBDosser is offline
 
Join Date: Oct 2001
Location: @ MyPC
Posts: 824
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

have you looked at the IP of the poster? try banning it.
Reply With Quote
  #10  
Old 04-26-2011, 01:59 PM
Videx's Avatar
Videx Videx is offline
 
Join Date: Feb 2007
Posts: 3,085
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Right, you said "latest version", but not which latest version. I just wanted to make sure you weren't running 4.02 and thinking that was the 'latest'.

I'd like to try posting as a Guest myself. I mean, can you post as a guest? In all forums?
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 02:05 AM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.06483 seconds
  • Memory Usage 2,252KB
  • Queries Executed 11 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (1)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (1)pagenav_pagelink
  • (10)post_thanks_box
  • (10)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (10)post_thanks_postbit_info
  • (10)postbit
  • (10)postbit_onlinestatus
  • (10)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • pagenav_page
  • pagenav_complete
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete