Stop Forum Spam

Started by ITA003, December 10, 2008, 11:55:38 AM

Previous topic - Next topic

squad

I have installed this and so far cannot see it in action :)

I am having a uneasy spate of IP's trying to log into my forum using
current members usernames. I am chasing my tail blocking IP's in
my cPanel Deny IPs ummmm A right pain in the behind. I wish these
twits would simply get out of my face  >:(


Which sadly means I have to remove all but one or two topics from
General Public view. Those current Topics are what I thought would
entice members to join. Ah well back to the drawing board  ::) ::)

ITA003

This mods works only during the registration step not the log-in.

Rik©

Quote from: ITA003 on February 12, 2011, 09:08:18 AM
This mods works only during the registration step not the log-in.
Why not make it also check the ip during log-in... will save us a lot of manual bans.

-Rik©

PLAYBOY


spiros

#244
Edit: I added the changes manually to themis theme and the strings show now.

I cannot find a way to activate it. Installed in 1.1.13 and in ?action=regcenter;sa=settings page I can see:

Required strength for user passwords (?):

And a blank line with ":" and check box below it.

I use the Themis theme.

Blade_Runner

My SMF 2.0RC4 forum is flooded with spam error log like the following. How can I stop SMF from reporting these errors?
-------------------------------------
The user xxxxxx with Email [email protected] (IP xxx.xxx.xxx.xxx) is a Spam, please contact forum administrator.

larryhyman

QuoteMy SMF 2.0RC4 forum is flooded with spam error log like the following. How can I stop SMF from reporting these errors?

I would love it if this went to an email to me instead of the master log file, or at least it's own log...

Other than that, I think this one of the best mods I've ever used !
In god we trust, all others pay cash !

http://hyman.sytes.net

Blade_Runner

Quote from: larryhyman on February 12, 2011, 01:09:08 PM
QuoteMy SMF 2.0RC4 forum is flooded with spam error log like the following. How can I stop SMF from reporting these errors?

I would love it if this went to an email to me instead of the master log file, or at least it's own log...

Other than that, I think this one of the best mods I've ever used !

I agree!

Stigmartyr

Quote from: Blade_Runner on February 12, 2011, 08:45:42 PM
Quote from: larryhyman on February 12, 2011, 01:09:08 PM
QuoteMy SMF 2.0RC4 forum is flooded with spam error log like the following. How can I stop SMF from reporting these errors?

I would love it if this went to an email to me instead of the master log file, or at least it's own log...

Other than that, I think this one of the best mods I've ever used !

I agree!

So today, I also ran into an issue installing this mod - where I had to uninstall reCaptcha and SFS, then reinstall them both..

Now that I have SFS, I don't really see a need to use reCaptcha anymore to be honest.  Infact why would you need any captcha at all :P


Jerri Blank

Quote from: ITA003 on December 29, 2010, 06:55:41 PM
The message is:


The user %s with Email %s (IP %s) is a Spam, please contact forum administrator.


You can modify the line 7 in file SFS.english.php


$txt['sfs_spam_detected'] = 'The user %s with Email %s (IP %s) is a Spam, please contact forum administrator.';


The %s are mandatary and are the spammer's Username, Email and IP

Can you tell me exactly where to find this file?  Is it still in the Packages directory, within the .tar.gz file I uploaded?

Thanks for this mod - my spam registrations are manageable now.

Kindred

themes/default/languages
Слaва
Украинi

Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

"Loki is not evil, although he is certainly not a force for good. Loki is... complicated."

Jerri Blank


ITA003

Quote from: Blade_Runner on February 21, 2011, 02:26:41 PM
How can I add an ip address to the whitelist?


At the moment is not possibile have a whislist. Do you have an IP address in Stop Forum Spam database and you are sure that it isn't a spam?

larryhyman

@ITA003

Could you please guide me to modding your mod so that I can get it to write to it's own log file, Thanks
In god we trust, all others pay cash !

http://hyman.sytes.net

Mayhem30

Can you make a similar mod that checks the stop spammer database when a user tries to log in?

I think that would take care of a lot of the bot issues forums are facing now. I'm getting 50-100 error logs day from bots trying to guess member passwords.

ITA003

@larryhyman: I think that the error log is the right place... maybe I can make a new setting to disable the log...


@Mayhem30: I'm working a new version where is possible to enable checks in Log-in

Mayhem30

Quote from: ITA003 on February 22, 2011, 02:00:12 AM
@larryhyman: I think that the error log is the right place... maybe I can make a new setting to disable the log...


@Mayhem30: I'm working a new version where is possible to enable checks in Log-in

thank you!

larryhyman

Quote from: ITA003 on February 22, 2011, 02:00:12 AM
@larryhyman: I think that the error log is the right place... maybe I can make a new setting to disable the log...


@Mayhem30: I'm working a new version where is possible to enable checks in Log-in

No, don't disable the log, I just don't want it mixing with other errors like database errors and the like, I would really it to have it's own log, so it stops polluting the main log....

ALSO, I THINK THIS IS THE BEST MOD EVER AND SHOULD BE A STANDARD FEATURE, YOU KNOW HOW MANY TIMES THIS MOD HAS PROTECTED MY SITE !!!
In god we trust, all others pay cash !

http://hyman.sytes.net

Arantor

QuoteALSO, I THINK THIS IS THE BEST MOD EVER AND SHOULD BE A STANDARD FEATURE, YOU KNOW HOW MANY TIMES THIS MOD HAS PROTECTED MY SITE !!!

Won't ever be a standard feature, firstly it relies on an external site and the team are very wary of doing that and secondly, it's incredibly easy to get yourself listed by accident, because there's no double checking - one of the former project managers here submitted his own IP address to see what happened, and there's no double checking to validate that it wasn't submitted falsely.


@ITA003 Adding a new log is easy enough, just when you call the fatal_error or fatal_lang_error function, make sure to pass a different name through as the second parameter which would give it its own log category. Let me know if that doesn't make sense and I'll help with that.
Holder of controversial views, all of which my own.


Advertisement: