Is it me alone or more people are offended by spamming bots ?
Is there anything that can be done ?
I see there is obfuscated code at registration ...
I don't remember whether there must be a reply to registration mail or not before enabling account, if not - maybe it would be good to enable/implement it.
Also I'd propose to automatically regularly sweep user database to disable inactive accounts (any disabled account won't be allowed to write to board until it makes re-registration) ...
etc ...
(sorry for rudeness, I am quite upset, because from some time ago I have an impression there is more spam on this board than regular, useful posts ...)
spam
Moderator: cy387_lk
Hi domingo,
it needs now a bit more effort to spam here than before. Still some work left over, luckily for me this forum is not so well known. Also the open memberlist allows to get a better ranking with the link to some websites, so i need to patch the code a bit.
Anyhow, nice to see you are still being here!
it needs now a bit more effort to spam here than before. Still some work left over, luckily for me this forum is not so well known. Also the open memberlist allows to get a better ranking with the link to some websites, so i need to patch the code a bit.
Anyhow, nice to see you are still being here!
-
cy387_lk
- Vau Ambassador
- Posts: 236
- Joined: Mon Jan 21, 2002 2:01 am
- Location: Mexico City, Land of Drunk Mariachis
- Contact:
Hehe, yeah, it's kind of lonely and creepy here lately xD...
I've been notified of several new fake users as well.
Sukayo, does this forum have image validation number in the registration form, or you've shut it down? If not I've got one of my own in php, quite difficult to detect. The procedure is simple: you generate the image with a code, and the code hash is saved in session from where you get it later when all the data is validated.
If the problem is not in the validation image, we could enhance security with some other stuff I suppose using forum database for ex. or any other thingy.
Maybe it's would be better to turn on manual confirmation. It's not like this forum has thousands of new members every day anyway, and these bots are easy to detect just by looking at generated names.
Do you know how bots passed the registration btw?
I've been notified of several new fake users as well.
Sukayo, does this forum have image validation number in the registration form, or you've shut it down? If not I've got one of my own in php, quite difficult to detect. The procedure is simple: you generate the image with a code, and the code hash is saved in session from where you get it later when all the data is validated.
If the problem is not in the validation image, we could enhance security with some other stuff I suppose using forum database for ex. or any other thingy.
Maybe it's would be better to turn on manual confirmation. It's not like this forum has thousands of new members every day anyway, and these bots are easy to detect just by looking at generated names.
Do you know how bots passed the registration btw?
Do I like science fiction? Sure! But only a bad one!...
("Tales of Pirx The Pilot" after Stanislaw Lem)
("Tales of Pirx The Pilot" after Stanislaw Lem)
Yes, a image is generated, and the pw is send via mail. So the image needs to be recognized by the boot and the mail adress needs to be valid.
For the forum code are existing patches to increase the security, i will sometimes add the patch which allows only registerd and logged in users to see the memberlist.
I checked other forums, it looks like a lot of them have today troubles with spam.
For the forum code are existing patches to increase the security, i will sometimes add the patch which allows only registerd and logged in users to see the memberlist.
I checked other forums, it looks like a lot of them have today troubles with spam.
Who is online
Users browsing this forum: No registered users and 2 guests