Link to the mod (https://custom.simplemachines.org/index.php?mod=1812)
Anti Bot: Unrecognizable Form v1.1
| Compatible With: | SMF 1.1.X - SMF 2 Beta & RC1 |
| Created By: | .LORD. (http://www.simplemachines.org/community/index.php?action=profile;u=192278) |
| Version: | 1.1 |
| Initial Release: | 2nd May 2009 |
| |
| Languages: | All |
This MOD make a fake Form and make unrecognizable (for bots) the real Form.
The bots will use the "fake Form" and the humans the "real Form".
Your users will not notice the difference, and the bots receive a error message for sidetrack.
How to test this MOD?
1.- Open the form to register a new user (not send).
2.- Installing the MOD.
3.- Send the form opened in the step 1. (and see the "error message")
4.- Now send a form opened after installing the MOD. (and register without problem)
Why? The bots will continue using the "old form", the form SMF's by default.
Extra: How it works?
Post 1 (http://www.simplemachines.org/community/index.php?topic=309200.msg2051709#msg2051709)
Post 2 (http://www.simplemachines.org/community/index.php?topic=309200.msg2065077#msg2065077)
Post 3 (http://www.simplemachines.org/community/index.php?topic=309200.msg2084906#msg2084906)
Quote from: Karl BensonIt is a cat and mouse game between forum software and bot-creators to secure forums against spam bots.
Using generic/centralised anti-spam measures makes it viable for bot-creators to try to get past them.
If every forum employs completely different anti-bot measures it makes it almost impossible to create bots for mass-automated registration.
1.1 - 29th May 2009
o Now the register page isn't cacheabled. It is useful against "Send Form" and "Go Back"
o Fix a bug in Register.template and password visible. Thanks DistantJ for report
1.0 - 2nd May 2009
o Initial release
o Adds Mutation in the Form Register
Very nice .LORD.!
This is interesting! Installing on my forum as we speak.
Doesn't work for me. After doing a test registration, it produces an error "Registration is disabled" or something like that.
Good concept .LORD.
It would be really good if there is an screenshot.
cool mod, thanks
Lemme see if I got this.
Open a registration form, fill it out, but don't submit it yet.
Install the mod.
Click submit for the registration begun in step 1. There will be an error.
Register a new account as usual and everything is now invisible.
A couple things first.
JBlaze has no hesitation about this and I know he knows what he's doing (not that you don't) so that's a plus.
However, I can't help asking, how are future registrations determined to be either fake or real? Also is this testing deal some sort of "activation" or something? I'm not grilling you, it's just that my over active mind gets the best of me sometimes when I don't understand something.
Quote from: JBlaze™ on May 08, 2009, 11:49:45 PM
Very nice .LORD.!
This is interesting! Installing on my forum as we speak.
Thanks for comment :D
Quote from: brelwit on May 09, 2009, 12:54:17 AM
Doesn't work for me. After doing a test registration, it produces an error "Registration is disabled" or something like that.
This error is showed (for sidetrack) if you even use the "old form.
If you reload a new page to register shouldn't leave that message.
Quote from: A.SK on May 09, 2009, 02:58:52 PM
Good concept .LORD.
It would be really good if there is an screenshot.
Ok, but... screenshot of code XHTML XD
The MOD visually there is no difference. The change is in the XHTML.
The bots are still using the "normal XHTML" of the register template, but now this template is mutating randomly.
Quote from: blondeamon on May 09, 2009, 05:23:31 PM
cool mod, thanks
Thanks for comment :D
Quote from: Tiribulus on May 09, 2009, 05:59:15 PM
Lemme see if I got this.
Open a registration form, fill it out, but don't submit it yet.
Install the mod.
Click submit for the registration begun in step 1. There will be an error.
Register a new account as usual and everything is now invisible.
A couple things first.
JBlaze has no hesitation about this and I know he knows what he's doing (not that you don't) so that's a plus.
However, I can't help asking, how are future registrations determined to be either fake or real? Also is this testing deal some sort of "activation" or something? I'm not grilling you, it's just that my over active mind gets the best of me sometimes when I don't understand something.
Excuse me if I have not understood.
The MOD makes this. But first we must understand how bots operate.
The users do click on the link Register. Fill the boxes and then click on the button Register.
The bots don't make that. The bots sent the variables with his registration.
What variables? What are the names of the variables?
The Spammers will study who to break the software. In the case of a forum (in this case SMF), the registers variable is always the same name (user, email, passwrd1, passwrd2). So no problem in sending these variables filled with his information.
This MOD makeup, random mutations in the register template form, and (eg) the changes to (a3423ads234234asdasd, sdf34a56234234asdasd, blah, blah).
Spammers don't know this, then they will send the variables (user, email, passwrd1, passwrd2) as always.
Moreover, if their registration fails, the spammers they can see the error message. Then make a page re study, and will modify their bot. The "message of error/distraction" will think the spammers the registration failed because your forum have the register disable.
Sorry for my bad English. :)
Are there options for this in the admin?
Quote from: .LORD. on May 09, 2009, 07:40:52 PM
Excuse me if I have not understood.
The MOD makes this. But first we must understand how bots operate.
The users do click on the link Register. Fill the boxes and then click on the button Register.
The bots don't make that. The bots sent the variables with his registration.
What variables? What are the names of the variables?
The Spammers will study who to break the software. In the case of a forum (in this case SMF), the registers variable is always the same name (user, email, passwrd1, passwrd2). So no problem in sending these variables filled with his information.
This MOD makeup, random mutations in the register template form, and (eg) the changes to (a3423ads234234asdasd, sdf34a56234234asdasd, blah, blah).
Spammers don't know this, then they will send the variables (user, email, passwrd1, passwrd2) as always.
Moreover, if their registration fails, the spammers they can see the error message. Then make a page re study, and will modify their bot. The "message of error/distraction" will think the spammers the registration failed because your forum have the register disable.
Sorry for my bad English. :)
That is a perfectly splendid explanation and answers my questions. I did not know any of that and it's very interesting. Spambots bypass the form and try to inject the registration variables directly. So this mod makes it so whenever that operation takes place it returns the error, but when the regular registration form is used by a real new user it just works like normal. If I understood correctly. Very very good indeed!
Don't be sorry about your English buddy. You're doin better than I ever would with Spanish :)
EDIT: I had to manually edit the register.php file, but this looks like it's working for me just like you say.
Luckily I have a few machines on a KVM switch so I started a registration on a different computer and after installing/editing it returned the "registrations are disabled" error. A new registration after that worked perfectly. Pretty SPIFFY there amigo!! You even get a demonstration of my muy bueno Spanish :D
you have a screen shot? ;) I really want to see how it looks before put it on my forum
Quote from: akaiphan on May 09, 2009, 11:16:49 PM
you have a screen shot? ;) I really want to see how it looks before put it on my forum
It doesn't look like anything. See the explanation from .LORD above.
@.LORD.
thx, it works perfectly
How bout a real life example? At least I think it is.
This guy caught my attention in the referrer file because the ip address was from a .RU domain, but was referred from my site itself which shouldn't happen if the standard button clicking method was used to access those links. The following is from my Apache log at about 10 after 10 this morning.
89.223.116.128 - - [12/May/2009:10:10:48 -0400] "POST /index.php?action=login2 HTTP/1.0" 200 13105 "http://gregnmary.gotdns.com/index.php?action=login" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)"
::1 - - [12/May/2009:10:10:59 -0400] "OPTIONS * HTTP/1.0" 200 - "-" "Apache/2.2.8 (Linux/SUSE) (internal dummy connection)"
He (it?) didn't get in and I assume got the error message about registrations being disabled.
Good work chief. This should be a must have for SMF users.
what exactly does this mod do, does it change the url of the register form?
Quote from: ThePro on May 12, 2009, 02:05:43 PM
what exactly does this mod do, does it change the url of the register form?
See the explanation from .LORD above.
Actualy its not very well explaned.
The short version is it detects spambots when they attempt to bypass the normal registration routine and returns an error saying registrations are disabled.
Quote from: Tiribulus on May 12, 2009, 11:34:05 PM
The short version is it detects spambots when they attempt to bypass the normal registration routine and returns an error saying registrations are disabled.
It doesn't detect spambots. Instead, it changes the XHTML formatting from the default SMF one so that bots don't recognize it and can't fill out the form correctly.
Quote from: JBlaze™ on May 13, 2009, 12:23:29 AM
Quote from: Tiribulus on May 12, 2009, 11:34:05 PM
The short version is it detects spambots when they attempt to bypass the normal registration routine and returns an error saying registrations are disabled.
It doesn't detect spambots. Instead, it changes the XHTML formatting from the default SMF one so that bots don't recognize it and can't fill out the form correctly.
But doesn't it do that by recognizing when a non standard attempt at registration takes place. In other words, not by detecting spambots per se, but by sensing their activity? You would know better than I would and maybe I misunderstood him, but that's what I thought he was saying anyway. No?
It randomly changes (or in his words, "morphs") the XHTML randomly on each page load.
Quote from: JBlaze™ on May 13, 2009, 01:13:10 AM
It randomly changes (or in his words, "morphs") the XHTML randomly on each page load.
I guess what it looks like I'm really missing from him and yourself is how it distinguishes between a legit and miscreant registration. I really am just trying to understand, please don't take me like I'm arguing with you. I thought he was saying when there is an attempt to place the variables for registration directly into the relevant files without following the routine it gave a fake form and threw up the error. I know you're busy and this isn't your mod so don't feel obligated to answer this, but now my curiosity is piqued again.
Quote from: Tiribulus on May 13, 2009, 10:38:29 AM
Quote from: JBlaze™ on May 13, 2009, 01:13:10 AM
It randomly changes (or in his words, "morphs") the XHTML randomly on each page load.
I guess what it looks like I'm really missing from him and yourself is how it distinguishes between a legit and miscreant registration. I really am just trying to understand, please don't take me like I'm arguing with you. I thought he was saying when there is an attempt to place the variables for registration directly into the relevant files without following the routine it gave a fake form and threw up the error. I know you're busy and this isn't your mod so don't feel obligated to answer this, but now my curiosity is piqued again.
The XHTML register form always will be mutated on each page load.
Bots "fill" the form (form 'static') that should have the register template of SMF.
The bots don't fill (to date) the Real form (the mutated form).
To the Forum, the "form static" now would be a "false form". If the "false form" is filled, only can be a bot.
Any question, you can do :)
I'm not sure I fully understand how this mod does what it does and I'm not sure I really need to?
All I need to know I guess - is this mod better at protecting a forum than any other anti bot mod?
Should this mod instal automatically just like any other? Sorry to appear thick but whats all this about?
...Open a registration form, fill it out, but don't submit it yet. Install the mod. Click submit for the registration begun in step 1. There will be an error. Register a new account as usual and everything is now invisible.
I did try and install package but got errors in ./Sources/Register.php
I have 2.0 RC1 and a custom theme, also 'are you human' mod installed already.
Can anyone help please?
Quote from: .LORD. on May 17, 2009, 09:57:46 PM
The XHTML register form always will be mutated on each page load.
Is this before or after the mod and what page load do you mean? It loads once until you click register. I think you're saying after?
Please forgive my lack of expertise or plain boneheadedness with these question. I'm sure it's quite simple and I'm just missing it.
Quote from: .LORD. on May 17, 2009, 09:57:46 PM
Bots "fill" the form (form 'static') that should have the register template of SMF.
The bots don't fill (to date) the Real form (the mutated form).
To the Forum, the "form static" now would be a "false form". If the "false form" is filled, only can be a bot.
Any question, you can do :)
I must have rocks in my head or something :-[ I'm still not understanding how the actions of a bot are seen by the forum as different than the actions of a user. What does a bot do different than a real user that returns the static rather than morphed form? How does a bot not produce this page load that brings the new form? I do so appreciate your patience.
Has anyone upgraded from 1.1.8 to 1.1.9 with this mod installed? How did it go?
-Annikk
Quote from: annikk.exe on May 21, 2009, 04:48:45 AM
Has anyone upgraded from 1.1.8 to 1.1.9 with this mod installed? How did it go?
-Annikk
Did 2 forums with no problems at all. Simple, short and sweet. Best one yet!
Ok now to this mod.
I was looking for 1 simple answer but the info provided is excellent!
My question and forgive me for being foggy,
To follow the steps I am assuming we need to open a different browser as a guest, then proceed to the register form to "register" as a new user, correct? :-\
Basically, do I need to have 2 separate browsers, one logged in to admin and one as a guest. ???
QuoteDid 2 forums with no problems at all. Simple, short and sweet. Best one yet!
Sweet - thanks! :>
-Annikk
That's a good question. Just tested it and no problems for me either.
This is a great idea, and works, but there's a problem...
Upon installing this, the password fields are no longer masked - the passwords are completely visible when being typed in in both of the fields, so anybody around while somebody is registering will be able to see their password.
I didn't notice this, but if it's the case, the trade is well worth it in my opinion.
I can probably fix this myself now that I think about it... If I can sort it I'll paste the code in here.
Yeah i noticed that as well. If anyone has a fix let us know. thanks
Quote from: Astral2000 on May 20, 2009, 08:57:21 AM
I'm not sure I fully understand how this mod does what it does and I'm not sure I really need to?
All I need to know I guess - is this mod better at protecting a forum than any other anti bot mod?
No MOD is better than other MOD. This MOD is other option.
This quote is very good:
Quote from: Tiribulus on May 18, 2009, 12:06:20 PM
No forum package, or any other package for that matter, will ever be entirely impervious to every possible attack no matter how well written.
Also:
Quote from: Karl BensonIt is a cat and mouse game between forum software and bot-creators to secure forums against spam bots.
Using generic/centralised anti-spam measures makes it viable for bot-creators to try to get past them.
If every forum employs completely different anti-bot measures it makes it almost impossible to create bots for mass-automated registration.
Quote from: Astral2000 on May 20, 2009, 08:57:21 AM
Should this mod instal automatically just like any other? Sorry to appear thick but whats all this about?
...Open a registration form, fill it out, but don't submit it yet. Install the mod. Click submit for the registration begun in step 1. There will be an error. Register a new account as usual (*)and everything is now invisible.
...(*) and now registration is successful.
These steps are just to "simulate" what would happen if a bot try register.
The bot will use the Form was before you install the MOD, the normal Form of SMF.
Quote from: Astral2000 on May 20, 2009, 08:57:21 AM
I did try and install package but got errors in ./Sources/Register.php
I have 2.0 RC1 and a custom theme, also 'are you human' mod installed already.
Can anyone help please?
Ok, you can attach this file.
I have install this MOD in order, and not have problem.
Quote from: Tiribulus on May 20, 2009, 11:42:08 AM
Is this before or after the mod and what page load do you mean? It loads once until you click register. I think you're saying after?
After. And every time that you click in register, or refresh the page.
Quote from: Tiribulus on May 20, 2009, 11:42:08 AM
I must have rocks in my head or something :-[ I'm still not understanding how the actions of a bot are seen by the forum as different than the actions of a user. What does a bot do different than a real user that returns the static rather than morphed form? How does a bot not produce this page load that brings the new form? I do so appreciate your patience.
No problem. This concept is difficult. I even had trouble explaining to people/somebody that they know programming and speaks my language. :P
The bot will use the Form was before you install the MOD, the normal Form of SMF.
Why? because the bot was programmed; because the bot don't know that the form is morphing.
If the "normal Form" is sent, then only will can be a bot.
The user always will send the mutated Form. Why? because the users wrote their data in the inputs texts and send, and the bots send variable with the data.
Quote from: WindsorLive! on May 21, 2009, 11:04:21 AM
Quote from: annikk.exe on May 21, 2009, 04:48:45 AM
Has anyone upgraded from 1.1.8 to 1.1.9 with this mod installed? How did it go?
-Annikk
Did 2 forums with no problems at all. Simple, short and sweet. Best one yet!
Ok now to this mod.
I was looking for 1 simple answer but the info provided is excellent!
My question and forgive me for being foggy,
To follow the steps I am assuming we need to open a different browser as a guest, then proceed to the register form to "register" as a new user, correct? :-\
Basically, do I need to have 2 separate browsers, one logged in to admin and one as a guest. ???
Thanks for help and for your comment :D
About your question. mmm, yes, you can use two browsers, or two computers, or the same computer and the same browser but: open the form in a tab, login in other tab, install the mod, logout, change tab, send the form (and fail), reload this page and retry register.
But, only if you like test the mod.
Quote from: DistantJ on May 25, 2009, 12:51:36 PM
This is a great idea, and works, but there's a problem...
Upon installing this, the password fields are no longer masked - the passwords are completely visible when being typed in in both of the fields, so anybody around while somebody is registering will be able to see their password.
opps, yes, this bug only happens in 1.1.x, i have fixed this. Thanks for report :)
Quote from: sevacycles on May 29, 2009, 10:29:46 AM
Yeah i noticed that as well. If anyone has a fix let us know. thanks
Update :)
Just a quick question... I am getting the message below in my error log for some registration attempts. Others I am seeing a Registration denied. Is this the action of your mod in blocking a bot?
Error message '8: Undefined index: u56524953099662d77467eda8f8b1296e
File: /home/wwwroot/humboldttuna/smf/Sources/Register.php
Line: 188'
Thank you..
Bob Taylor
Quote from: .LORD. on May 30, 2009, 12:39:31 AM
Quote from: Tiribulus on May 20, 2009, 11:42:08 AM
I must have rocks in my head or something :-[ I'm still not understanding how the actions of a bot are seen by the forum as different than the actions of a user. What does a bot do different than a real user that returns the static rather than morphed form? How does a bot not produce this page load that brings the new form? I do so appreciate your patience.
No problem. This concept is difficult. I even had trouble explaining to people/somebody that they know programming and speaks my language. :P
The bot will use the Form was before you install the MOD, the normal Form of SMF.
Why? because the bot was programmed; because the bot don't know that the form is morphing.
If the "normal Form" is sent, then only will can be a bot.
The user always will send the mutated Form. Why? because the users wrote their data in the inputs texts and send, and the bots send variable with the data. >>>
AHA!!!
I do believe I have it now.
Bot = what is expected normally and is fooled because of it.
User = morphed form which is now the actual form which is triggered by the user actions of inputting into the fields and clicking send. The bots don't do this.
EDIT: I just saw this or would have replied sooner, thanks
Quote from: taysys on June 13, 2009, 01:29:31 PM
Just a quick question... I am getting the message below in my error log for some registration attempts. Others I am seeing a Registration denied. Is this the action of your mod in blocking a bot?
Error message '8: Undefined index: u56524953099662d77467eda8f8b1296e
File: /home/wwwroot/humboldttuna/smf/Sources/Register.php
Line: 188'
Thank you..
Bob Taylor
Yes, was a bot :D
Quote from: Tiribulus on June 13, 2009, 05:53:10 PM
AHA!!!
I do believe I have it now.
Bot = what is expected normally and is fooled because of it.
User = morphed form which is now the actual form which is triggered by the user actions of inputting into the fields and clicking send. The bots don't do this.
EDIT: I just saw this or would have replied sooner, thanks
No problem :D
Hi OP,
Thanks for this mod. It has really cut down on the # of bots registering for my site.
One question: I currently have my registration set to manually authorize every member. Because of this, the system automatically emails me whenever someone signs up.
However, it seems your anti-spam form, while keeping bots from getting through the registration process, still causes the "registration email" to be sent.
Would you consider changing the code a bit to make this email not be sent if it is a bot?
I stalled with my custom theme on 1.1.9 and I got the registration is down message. byt now my reg registration doesnt work at all. it wont let me send it when I click send. ???
Do you have codes to modify in the custom style mods???
Bad typing :-[
I have the mod installed but the registration process still says registration is down.
Is there an edit for custom themes??
Quote from: Doyne on June 15, 2009, 06:57:28 PM
I stalled with my custom theme on 1.1.9 and I got the registration is down message. byt now my reg registration doesnt work at all. it wont let me send it when I click send. ???
Do you have codes to modify in the custom style mods???
1.- Restores a backup and repeat the changes more carefully.
2.- See this info: Manual Installation Of Mods (http://docs.simplemachines.org/index.php?topic=402)
Found the problem. For some reason ???? all of the mod changes in the code where doubled. I have had this problem before and no I did not load the mod twice O:)
I wonder why this would happen. Could it be Firefox?
Very nice .LORD.! Thanks
Quote from: Doyne on June 16, 2009, 10:00:52 AM
Found the problem. For some reason ???? all of the mod changes in the code where doubled. I have had this problem before and no I did not load the mod twice O:)
I wonder why this would happen. Could it be Firefox?
I was also passed. The cause isn't "exactly" the browser. The forum could avoid double install.
Hi,
I currently have the 'authorize' option set for registration, so when anyone registers I have to manually approve them. The system also sends me an email everytime someone signs up.
Unfortunately, while your mod does a great job of keeping bots out of the system, I'm still receiving the emails once they hit the form!
Could you add a feature that disables "a user has joined your forum" emails when they are bots?
I Think this is the best anti-spam measure ever. users don't have to strain to see capcha letters with usual request new image, they don't have to answer silly questions, like 'are you a bot?'
If this works as promise, then its goodbye to spam. (At least for some time...) :D
Quote from: remi_naija on June 17, 2009, 11:20:26 AM
I Think this is the best anti-spam measure ever. users don't have to strain to see capcha letters with usual request new image, they don't have to answer silly questions, like 'are you a bot?'
If this works as promise, then its goodbye to spam. (At least for some time...) :D
I find this mod quite ingenious, but I don't think I'm ready to dump my other registration precautions just yet.
Quote from: ls1dreams on June 15, 2009, 10:07:02 AM
Would you consider changing the code a bit to make this email not be sent if it is a bot?
I sorry, is it would be beyond of the concept of this MOD.
Quote from: Mythcomeback | Burak on June 16, 2009, 11:32:50 AM
Very nice .LORD.! Thanks
Thanks for comment :)
Quote from: remi_naija on June 17, 2009, 11:20:26 AM
I Think this is the best anti-spam measure ever. users don't have to strain to see capcha letters with usual request new image, they don't have to answer silly questions, like 'are you a bot?'
If this works as promise, then its goodbye to spam. (At least for some time...) :D
I too prefer the antibots "hidden". (currently there are only two, this MOD, and the Stop Spammer).
However, this is a struggle between "the good guys and the bad guys". :P
Just as we are developing "weapons" on this side, on the other side also will.
The user/administrator will get more security using several (to taste) antibots of the options available.
Thanks for comment :)
Quote from: Tiribulus on June 17, 2009, 10:03:22 PM
Quote from: remi_naija on June 17, 2009, 11:20:26 AM
I Think this is the best anti-spam measure ever. users don't have to strain to see capcha letters with usual request new image, they don't have to answer silly questions, like 'are you a bot?'
If this works as promise, then its goodbye to spam. (At least for some time...) :D
I find this mod quite ingenious, but I don't think I'm ready to dump my other registration precautions just yet.
You can use many antibots measures, is better. (I don't recommend using too many, but not just one)
For example, I use this MOD, Stop Spammer, and the Captcha Clock (only because I love this MOD) and the captcha default off.
Thanks for comment :)
I have been getting an error message during registration. Something like 'you must choose a user name' even when a user name has been choosen. Has it got to do with this mod?
Today I let a known bot that had previously spammed my forums past my firewall and watched it try to register. It was absolutely defeated.
With the built in visual verification set to the highest level, it had been able to spam me in the past.
With this mod and the Anti-Spam Verification Questions mod now installed, I think that the only spammer I will ever see would be the live human kind and I can ask questions that only my potential members would know the answer to.
Thanks for this great mod. :)
Quote from: remi_naija on June 19, 2009, 01:45:45 PM
I have been getting an error message during registration. Something like 'you must choose a user name' even when a user name has been choosen. Has it got to do with this mod?
AFAIK no. I couldn't reproduce this. Can you tell me you did to reproducir wrong (details, data sent)? Have you installed manually?
Quote from: JeepneyDriver on July 05, 2009, 03:26:25 AM
Today I let a known bot that had previously spammed my forums past my firewall and watched it try to register. It was absolutely defeated.
With the built in visual verification set to the highest level, it had been able to spam me in the past.
With this mod and the Anti-Spam Verification Questions mod now installed, I think that the only spammer I will ever see would be the live human kind and I can ask questions that only my potential members would know the answer to.
Thanks for this great mod. :)
I am glad it worked and that you have protected :D
I installed the mod... how do I know if it is working? As a human it works fine, how do I imitate a bot to test the error message?
Will this mod be updated for 2.0 RC2?
is it possible for you to do the same mod to the email password reminder form....
i am getting spammed by a single malicious user requesting password changes for all my users...i am 99% sure he is using a bot to accomplish this....
this would protect that form as well...
thanks
i was unable too click on "register" button after installing this mod??
Will it be updated for 2.0 RC3?
Will it be updated for 2.0 RC5?
I would also like to request an update for 2.0 RC 5. thank you!
Quote from: Simple Joe on June 27, 2011, 11:40:26 AM
I would also like to request an update for 2.0 RC 5. thank you!
Why RC5? 2.0 final has been out for a while now.
Update for 2.0 would be super-cool indeed!
Quote from: mikser on July 29, 2011, 11:48:42 PM
Update for 2.0 would be super-cool indeed!
What he said.
So... when I parse the installation instructions for 2.0 I am given a list of "Find" and "Add Before" or "Replace" text boxes. None of the "Find" text is relevant. What should I do?
Quote from: JPAnderson on August 06, 2011, 05:42:32 PM
So... when I parse the installation instructions for 2.0 I am given a list of "Find" and "Add Before" or "Replace" text boxes. None of the "Find" text is relevant. What should I do?
...wait for an update to 2.0?
(shrug)
Judging that .LORD. has been inactive since Nov 10 of last year, is anyone interested in taking up this project? I don't know PHP, or I would.
Quote from: JPAnderson on August 07, 2011, 12:41:51 PM
Judging that .LORD. has been inactive since Nov 10 of last year, is anyone interested in taking up this project? I don't know PHP, or I would.
Relaxed, the modification will be updated soon. Now we are in charge :)
Regards.
Cool. Great news. I was looking for the "like" button, then I realized I was somewhere else.
;o)
I decided to update my forum to 2.0, and noticed this mod hadn't been updated. I think this mod is probably the biggest reason all my spam bots have stopped registering I decided to update it. I hope no one gets offended, but it looks like this mod has gone stale.
The only update was to get 2.0 final working. No changes made to 1.1 side.
I didn't test against the OpenID portion, but I suppose it works.
Edit, you can't re-distribute a mod without the author's permission.
Quote from: sleepnmojo on October 02, 2011, 02:25:13 PM
I decided to update my forum to 2.0, and noticed this mod hadn't been updated. I think this mod is probably the biggest reason all my spam bots have stopped registering I decided to update it. I hope no one gets offended, but it looks like this mod has gone stale.
The only update was to get 2.0 final working. No changes made to 1.1 side.
I didn't test against the OpenID portion, but I suppose it works.
You can not upgrade mod without the consent of our team. This mod will be updated when we can. I recently was passed to our team and we are updating all our mods are among more than 60 extra officers and officers. Please remove that link.
Quote from: SSimple Team on October 02, 2011, 09:24:44 PM
Quote from: sleepnmojo on October 02, 2011, 02:25:13 PM
I decided to update my forum to 2.0, and noticed this mod hadn't been updated. I think this mod is probably the biggest reason all my spam bots have stopped registering I decided to update it. I hope no one gets offended, but it looks like this mod has gone stale.
The only update was to get 2.0 final working. No changes made to 1.1 side.
I didn't test against the OpenID portion, but I suppose it works.
You can not upgrade mod without the consent of our team. This mod will be updated when we can. I recently was passed to our team and we are updating all our mods are among more than 60 extra officers and officers. Please remove that link.
Can you point to that in writing?
I like how you can do that.. Screw everyone because the guy who cared enough to update the mod wasn't the owner? Where's YOUR update, SSimple Team??
Looks to me like we're on our own here.
This modification truly works better than any other anti-spam mod I have used.
Security questions eventually get figured out by the bots, and everybody knows bots can do the image verifications.
Perhaps if this mod creator is too busy to update this mod, someone could create an entirely different mod so that spambots never even see the registration page. SMF really needs this as the spammers just get worse, so the good guys need to get better.
I just upgraded my board to 2.04 yesterday and have been inundated with spam accounts. I checked, and my anti-bot hadn't ported over with the rest of my mods. I completely removed it, came and got the most recent update, uploaded it - and got a "file corrupt" error.
Also, it appears Bad Behavior also doesn't work with this SMF release.
I give kudos to the dude who updated the mod himself and raspberries to SMF for letting a mod that works as well as this one does just to sit there while the rest of us are fighting spam left and right.
Quote from: AK49BWL on January 27, 2012, 12:26:23 PM
Where's YOUR update, SSimple Team??
Totally.
It's a shame, too. I hate to see SMF fall apart this late in the game. It's the best board software out there, afaic.
Hey Mari-- I've found that by just adding two verification questions to register, I've cut down incredibly on my spam problem.. So far that I actually just use the "Simple" image verification and those questions now. That, along with Stop Spammer, has been great... I've not had a single spam registration make it actually INTO the forum in many months... And I only have to reject around 5 Stop Spammer-caught registrations a month. WAY down from what I hear about from other forums.
IMO it's not SMF that's falling apart, it's the mod authors in this case.. SMF is still good as ever afaic :)
Until someone can create an SMF mod similar to the "Invisible Captcha" WordPress plug-in, then Verification Questions are the way to go. The key, however, is to make the questions unique because the spam-bots are programmed to know the answer to the more common questions out there. Here's a blog post about using the verification questions to Stop Spam-bot Registrations (http://blog.onlineinstitute.com/forum-hosting/how-to-stop-spam-bot-registrations-on-smf/) that expands on this. Basically keep the questions unique, and fresh, but don't make them so hard your real visitors can't answer them. Hope this helps!
I'm writing here just to tell you that I have successfully installed this mod on my SMF 1.1.18 forum. I hope it will work, the code seems neat and fine.
I believe I won't be upgrading anytime soon.
It was a very nice mod on 1.1.18, but not out of the box on 2.0.5 (current 2.0.X version).
Too bad it is not being updated.
Just a post to awaken whomever that people are still interested in this mod :)
p.s. I felt it made more sense to put this here, as the mod links to this thread!
This is a great mod - I was looking for something exactly like that. Bot Buster broke my complete registration and bots don't "use" the registration form which circumvented the "are you human" mod. This mod seems to me the only one that actually CAN work unless some bot is specifically programmed to circumvent it.
The problem is that if this were to be deployed widely enough (e.g. SMF 2.1), it would be worth the bot authors' time in breaking it, and programmatically that isn't that difficult to do.
Meanwhile you might want to consider alternative options such as Bad Behaviour and using the built in (into 2.0+) anti spam Q&A.