vBIndex shoutbox spam problem

[Club3G]

I run VBIndex at http://www.club3g.com, and am having a small issue with trolls filling up my shoutbox with spam and profanity. Users need to be activated to post messages, but the shoutbox is available for unconfirmed/unvalidated users, and there's zero flood control on it.

Last night I had one guy shout over 100 times in a matter of minutes, so disabled the shoutbox altogether.

Is there something out there that can require _activation_ for shouts, as well as flood control?

Thanks much.

[AN-net]

activation of shouts would be redundant since so many are posted in a day but flood control is not

find this in you vbindex php file:

PHP Code:

    $DB_site->query("    ## INSERT NEW SHOUT ##
                        INSERT INTO ".TABLE_PREFIX."vbindex_shoutbox
                        (shoutid, userid, shout, dateline)
                        VALUES
                        (NULL, '$bbuserinfo[userid]', '".addslashes(convert_url_to_bbcode($_POST['shout']))."',
                         '".TIMENOW."')"); 


change that to:

PHP Code:

    $flood= $DB_site->query_first("SELECT dateline FROM ".TABLE_PREFIX."vbindex_shoutbox WHERE userid=".$bbuserinfo['userid']." ORDER BY dateline DESC");
    if((TIMENOW - $flood['dateline'])<= XX)
    {
        eval(print_standard_error('vbi_shoutflood'));
    }
    else
    {
        $DB_site->query("    ## INSERT NEW SHOUT ##
                            INSERT INTO ".TABLE_PREFIX."vbindex_shoutbox
                            (shoutid, userid, shout, dateline)
                            VALUES
                            (NULL, '$bbuserinfo[userid]', '".addslashes(convert_url_to_bbcode($_POST['shout']))."',
                             '".TIMENOW."')");

            $url = "$_SERVER[PHP_SELF]?$session[sessionurl]";
            eval(print_standard_redirect('redirect_vbi_shoutadded'));
    } 


replace XX with the number of seconds between each shout

you will also have to add a new phrase to front end error messages group in admincp and name it vbi_shoutflood.

In that phrase you can say such things as "You must wait longer before shouting again."

also this hasn't been tested

[Club3G]

Hmm, didn't seem to work. And as soon as I turned it on, the idiot spammed it full immediately.

Thank you though =)

[AN-net]

just tested it and it doesnt work, it doesnt even use the redirect which is coded in there, i searched for maybe another insert query but none exists so this is very odd....

[Club3G]

^ A fix for this would be just spiffy. Our users are missing it, and I can't turn the thing back on without a flood of profanity.

[Club3G]

Bump

[Nomadite]

Wow, this is an old thread...

I'm starting to have the same prob in my forum whereby unregistered users are posting crap and porn/spam links and profanity in the Shoutbox. Is there any way to stop them from being able to access the Shoutbox (v 3.5Gold) if they are not registered users?

[Dismounted]

You said yourself, this is an old thread.....Why don't you post in the shoutbox's release thread?