ThinkBlog

philosophy :: psychology :: theology :: technology

06 February 2006

phpBB Spam Registrations

23:03:50 :: [technology &c., general] :: 274 words

My apologies to you who have recently endured the deluge of spam registrations on ThinkForums.org; I had for a time set the Admin email confirmation instead of the User confirmation, but this didn’t prevent users from signing up, only becoming active. Spam bots, though, don’t make any posts, because the membership list has the spam URLs linked already.

So when I decided to play bouncer, I was ready to do anything. When I noticed that I had 100 users, twenty-four of whom were recent sign-ups with names unrepeatable in polite conversation, I was ready to organize DDoS attacks against all of their IPs—but figured there was probably a less illegal way of handling these intruders.

I’ve been looking for a Captcha MOD for phpBB, so that when new users signed up, they would have to input the alphanumeric contents of a little graphic that machines, presumably, can’t guess. That’s all well and good, but I was frustrated to find that there didn’t seem to be any Captcha MODs for phpBB. What could be the deal? I was on the verge of shutting down the forums till further notice when a phpBB Support Forum search yielded the little golden result: if you can’t see the Captcha option on the Admin menu, your theme is too old to support it and you need to use subSilver. Well, thankyouverymuch. That worked!

So we should see far fewer heinous intrusions of the kind involving XXX and drug-based references in the URLs. Thanks to you who have recently signed up; and thanks to you who will soon sign up but who don’t even know this site exists yet! ;)

3 Responses to “phpBB Spam Registrations”

  1.  Mike Says:

    I found this entry when I was having the same problem and it provided the answer I was looking for. I just copied the code below from the updated subsilver profile_add_body.tpl template to my outdated one and it worked. I assume you’ve already updated the php and mysql.

    {L_CONFIRM_CODE_IMPAIRED}{CONFIRM_IMG}

    {L_CONFIRM_CODE}: * {L_CONFIRM_CODE_EXPLAIN}

  2.  Mike Says:

    Guess I can’tpost the html. Anyway, the code is very easy to spot right under the password input row.

  3.  Bombo Says:

    The visual confirmation is easily bypassed. There are other anti-mods you can try, keep searching the phpbb.com forums.

  4.  Michael Says:

    Thanks for the tips! Much appreciated from both of you, I’ll look into it further (planning a major overhaul of ThinkForums.org soon anyway…).

phpBB Spam Registrations

23:03:50 :: [technology &c., general] :: 274 words

My apologies to you who have recently endured the deluge of spam registrations on ThinkForums.org; I had for a time set the Admin email confirmation instead of the User confirmation, but this didn’t prevent users from signing up, only becoming active. Spam bots, though, don’t make any posts, because the membership list has the spam URLs linked already.

So when I decided to play bouncer, I was ready to do anything. When I noticed that I had 100 users, twenty-four of whom were recent sign-ups with names unrepeatable in polite conversation, I was ready to organize DDoS attacks against all of their IPs—but figured there was probably a less illegal way of handling these intruders.

I’ve been looking for a Captcha MOD for phpBB, so that when new users signed up, they would have to input the alphanumeric contents of a little graphic that machines, presumably, can’t guess. That’s all well and good, but I was frustrated to find that there didn’t seem to be any Captcha MODs for phpBB. What could be the deal? I was on the verge of shutting down the forums till further notice when a phpBB Support Forum search yielded the little golden result: if you can’t see the Captcha option on the Admin menu, your theme is too old to support it and you need to use subSilver. Well, thankyouverymuch. That worked!

So we should see far fewer heinous intrusions of the kind involving XXX and drug-based references in the URLs. Thanks to you who have recently signed up; and thanks to you who will soon sign up but who don’t even know this site exists yet! ;)

3 Responses to “phpBB Spam Registrations”

  1.  Mike Says:

    I found this entry when I was having the same problem and it provided the answer I was looking for. I just copied the code below from the updated subsilver profile_add_body.tpl template to my outdated one and it worked. I assume you’ve already updated the php and mysql.

    {L_CONFIRM_CODE_IMPAIRED}{CONFIRM_IMG}

    {L_CONFIRM_CODE}: * {L_CONFIRM_CODE_EXPLAIN}

  2.  Mike Says:

    Guess I can’tpost the html. Anyway, the code is very easy to spot right under the password input row.

  3.  Bombo Says:

    The visual confirmation is easily bypassed. There are other anti-mods you can try, keep searching the phpbb.com forums.

  4.  Michael Says:

    Thanks for the tips! Much appreciated from both of you, I’ll look into it further (planning a major overhaul of ThinkForums.org soon anyway…).


[powered by WordPress.]

For the discussion of current and historical trends in the liberal arts, information technology, and religious thought. "Of all human pursuits, the pursuit of wisdom is the more perfect, the more sublime, the more useful, and the more agreeable."

Think.

navigation

categories

search

archives

February 2006
S M T W T F S
« Jan   Mar »
 1234
567891011
12131415161718
19202122232425
262728  

meta

ThinkBlog.org has been on the web since August 2003, with 292,449 words in 846 posts.

It is presently 17:49:37 on 06 Sep 2008, server side. All content except where otherwise noted Copyright © 2000-2006 Michael Phillips.

detail of Plato and Aristotle from 'The School at Athens' by Raphael

affiliations

Get Firefox! News for Nerds. Stuff that Matters.



Blogarama - The Blog Directory
Listed on Blogwise Listed on BlogShares

Blog Home

Login

41 queries. 3.861 seconds