Stop Spammer

[naitram]

if i sniff the wire during a check member i see

Code Select Expand

GET /api?ip=110.82.149.188&username=dunkshoes6g&email=house4dZwu%40yahoo.com HTTP/1.0
Host: www.stopforumspam.com
User-Agent: PHP/SMF
Connection: close



HTTP/1.1 200 OK
Date: Mon, 28 Mar 2011 16:03:45 GMT
Server: Apache/2
X-Powered-By: PHP/5.2.12
Vary: Accept-Encoding,User-Agent
Content-Length: 244
Connection: close
Content-Type: text

trying to report a member i get (yes not my real API key)

Code Select Expand

POST /add HTTP/1.0
Host: www.stopforumspam.com
User-Agent: PHP/SMF
Connection: close
Content-Type: application/x-www-form-urlencoded
Content-Length: 93

username=dunkshoes6g&ip_addr=110.82.149.188&[email protected]&api_key=XXXXXXXXXXXXXXHTTP/1.1 200 OK

Date: Mon, 28 Mar 2011 16:07:16 GMT
Server: Apache/2
X-Powered-By: PHP/5.2.12
Vary: Accept-Encoding,User-Agent
Content-Length: 329
Connection: close
Content-Type: text/html



<!-- Return bool(true)
--><br />
<b>Warning</b>:  Cannot modify header information - headers already sent by (output started at /home/sfs/domains/stopforumspam.com/public_html/add.php:29) in <b>/home/sfs/domains/stopforumspam.com/public_html/add.php</b> on line <b>139</b><br />
<p>maintenance mode record processing deferred</p>

[butchs]

Thanks for the reference to Crawltrack; we'll definitely try that out. When you prevent registrations on an IP based on httpBL, how long before you expire the IP Address block? Or is that even the right question?

CrawlTrack does Web Analytics and is useful.  It's companion CrawlProtect has some anti-hacking protection.  Out of the box CrawlProtect is not compatible with SMF; however, this link will tell you how to set it up:  CrawlProtect for SMF

[snoopy_virtual]

"die();" the line before "?>" is all I recommend you try.  How hard is that?

It's very hard for me, as I never add lines that are not logical. (Or at least I never add them on purpose).

Anyway I have already answered that in its proper place.

No need to repeat it again.

I am not the core author of BB.  I am simply the port author.  Bad Behavior core is used by thousands of sites world wide.  Most of the code especially the BB warning page has been taken from the tried and true core.

I never said that the core program bad-behavior from http://bad-behavior.ioerror.us/ was not compatible with any of my mods. Of course it is compatible.

What it's not compatible with my mod httpBL is the way you have used to implement bad-behavior inside SMF.

When you prevent registrations on an IP based on httpBL, how long before you expire the IP Address block? Or is that even the right question?

It's better to keep topics separate. This one is for support with mod StopSpammer, not mod httpBL.

Anyway I would answer your question if I could understand it.

Could you please explain it a little more? (if possible in the proper topic)

i have updated to 2.3.9 and applied for my API key

the MOD passes its internal check

Your host can make remote connection with the DB

when i try and report a spammer the screen just reloads and does not appear to submit anything

I have seen all the rest of the answers about this problem and still don't know why it's happening to you.

I will think a little more about it and I will let you know if I find anything.

It would be a lot easier anyway if we could talk through Skype or something like this, so I can see the problem a little better.

CrawlTrack does Web Analytics and is useful.  It's companion CrawlProtect has some anti-hacking protection.  Out of the box CrawlProtect is not compatible with SMF; however, this link will tell you how to set it up:  CrawlProtect for SMF

That's not true

Crawltrack (apart from very good Web Analytics) is the perfect protection anti-hacking. It's completely compatible with SMF and doesn't need any modification at all.

CrawlProtect is another anti-hacking possibility, but I like more Crawltrack. Never tried both of them together though. Maybe I will do that one of this days.

[Kindred]

BTW: I have Bad Behavior, Stop Spammer and HttpBL installed and working together on two sites...

[naitram]

all set, had an old entry in a host file

[nzbutterfly]

Hi Snoopy,

I too, have the issue where when reporting a spammer, the reloaded page appears that I haven't done anything. Really, it has, I login to SFS & they are there (had to delete double entries as well). So, not a major, but as someone said, just a annoyance really.

I recently updated SMF from 1.1.11 to 1.1.13, Stop Spammer from 2.3.7 to 2.3.9 & httpBL from 2.4 to 2.5.1

Also, I get the line error;

Code Select Expand

8: Undefined index: id
File: /home1/nzbutter/public_html/discuss/Sources/ManageMembers.php
Line: 736
which for me is;

Code Select Expand

if ($value == $user_info['id'] || '1' == $value)

This enabled me to work out that Stop Spammer was the offender. I went through all the parsed comments from the Mods home page, with no difference, hence I ended up here. Anyway, saw you post #1206 saying look at #1192-#1195, which I have done. I will download the file & give it a go next. So will report back in a few days hopefully saying it's worked out.

I note that posts #1212-#1220 + #1222 are regarding the same issue.

Any chance that a report to BotScout could be included in the future?
(botscout.com/bot_submitter.htm)

Take care,
Robert.

[nzbutterfly]

Dropped the experimential file in from post #1195
So far so good.

Decided I would disable, then re-enable the Stop Spammer (just in case it made a difference). Well nothing is broke, but did get a new error log (not sure if it's an issue yet);

Code Select Expand

index.php?action=regcenter;sa=settings
8: Undefined index: stopspammer_faildb_sub
File: /home1/nzbutter/public_html/discuss/Themes/default/Register.template.php (admin_settings sub template - eval?)
Line: 529
Which for me is;

Code Select Expand

$stopspammer_faildb_sub = $txt['stopspammer_faildb_sub'];

   // Test if mod StopSpammer is OK
   $txt['stopspammer_ok'] = stopspammer_test_mod_ok();
   $stopspammer_faildb_sub = $txt['stopspammer_faildb_sub'];

On reading this, I suspect it means that there is no Stop Spammer DB connection at that moment. Am I correct?

(Just disabled it again, got the same error immediately, then all is happy when the mod is re-enabled).

So I have no concerns about this error, but throught you might like to know about it.

Robert.

[snoopy_virtual]

Hi Robert:

I too, have the issue where when reporting a spammer, the reloaded page appears that I haven't done anything.

Yes, I have tested already the file I attached in post #1195 and it sort that issue, so I will add that solution in the next mod update.

In the mean time use that file to sort it.

Error:

8: Undefined index: id

That's a known bug of version 2.3.9. It will be sorted in the next version. It's not an important error though. Only annoying. The mod works OK even with that error.

Any chance that a report to BotScout could be included in the future?

I have been thinking about it lately. Some kind of Super-Anti-Spam mod that would check and report all the known spammers DBs. Not only the DBs in ProjectHoneyPot, StopForumSpam and BotScout, but all the rest of them.

There is already a brilliant tool called FSLC done by our friend Gunner to do that. More info here:

http://www.gunnerinc.com/fslcinfo.htm

I have already talked with Gunner about it. The problem is his tool has been done in Assembly and I am not really good with it, so to convert that to a mod in SMF (using PHP instead) I will need to re-do all the tool from scratch. A lot of time and work needed.

Maybe I will do it anyway sometime, but in the mean time I would suggest you to use FSLC. It's very fast and easy to use.

I have even seen a video in Youtube done by an extremist anti-spam group explaining how to use it: http://www.youtube.com/watch?v=3yDpyfL-1x8

8: Undefined index: stopspammer_faildb_sub

It's not normal to get that error if you updated properly from 2.3.7 to 2.3.9

I can see anyway you are getting the information of the error with a (admin_settings sub template - eval?)

It's better to see the errors with template eval disabled (and your forum will work faster also). It is already a core feature in SMF 2.0, but for SMF 1.1.x you will need a mod to do it.

Can you please install Arantor's mod Disable Template Eval and check again if you are still getting that error?

On reading this, I suspect it means that there is no Stop Spammer DB connection at that moment. Am I correct?

No. You shouldn't get that error either with or without connection with the DB.

Let me know if everything is OK 

[nzbutterfly]

Hi Snoopy,

Thanks for your reply.

The new Stop Spammer file has done the trick & the icons update accordenly now.

The 8: Undefined index: id doesn't bother me. Didn't realise it was a separtate bug through.

Thanks for the FSLC & CrawlTrack links. Still deciding on CrawlTrack presently as I got more important items to update on the website.

8: Undefined index: stopspammer_faildb_sub

It's not normal to get that error if you updated properly from 2.3.7 to 2.3.9

I can see anyway you are getting the information of the error with a (admin_settings sub template - eval?)

It's better to see the errors with template eval disabled (and your forum will work faster also). It is already a core feature in SMF 2.0, but for SMF 1.1.x you will need a mod to do it.

Can you please install Arantor's mod Disable Template Eval and check again if you are still getting that error?

On reading this, I suspect it means that there is no Stop Spammer DB connection at that moment. Am I correct?

No. You shouldn't get that error either with or without connection with the DB.

I have installed Disable Template Eval 1.2. But on disabling Stop Spammer, I still get the same error (apart from the eval part)

Code Select Expand

8: Undefined index: stopspammer_faildb_sub
File: /home1/nzbutter/public_html/discuss/Themes/default/Register.template.php
Line: 529

When I upgraded the forum from 1.1.11 to 1.1.13, I uninstalled all the mods first. Upgraded the forum, then added the mods back one-by-one, checking they had my prefered options, API keys, etc. I then over-wrote the existing stopspammer.php file with the new one mentioned above.

To be honest, I'm not worried by this error as I don't plan to have the mod disabled. But figured you would like to know of it's existance.

The mod is working as expected, so I'm happy with it.

Take care,
Robert.

[busterone]

I have even seen a video in Youtube done by an extremist anti-spam group explaining how to use it: http://www.youtube.com/watch?v=3yDpyfL-1x8

I have no idea who that could be.      

[snoopy_virtual]

Error:
8: Undefined index: stopspammer_faildb_sub

To be honest, I'm not worried by this error as I don't plan to have the mod disabled. But figured you would like to know of it's existance.

As I said that error shouldn't be there, so It's good you told me. I have added it to my TODO list to check it out more closely.

After all it may mean there is another bug somewhere. Who knows.

I have even seen a video in Youtube done by an extremist anti-spam group explaining how to use it: http://www.youtube.com/watch?v=3yDpyfL-1x8

I have no idea who that could be.      

I don't know also who that "Spam Busterz" group are, but whoever they are, they are definitely doing a brilliant work. 

[Kindred]

That underlined index is just a missing text string.

[Wizzlefits]

Error:
8: Undefined index: stopspammer_faildb_sub

I found how to replicate that error.
If, SS is turned on, and only "check IP" is checked, it will cause that error, and say connection to SFS failed.

If, "Check email OR Check Username" is set to check it works fine with no error.

[snoopy_virtual]

Interesting.

Then it's definitely a bug.

I will look for it.

[nzbutterfly]

Hi,

RE;
Error:
8: Undefined index: stopspammer_faildb_sub
I have all 3 ticked (Check their username, Check their email & Check their IP) & don't get the error when it's turned on, but get it once for every time I turn it off.

I don't know also who that "Spam Busterz" group are, but whoever they are, they are definitely doing a brilliant work. 

Agree. Forum Spam List Checker is a great little program. I'd recommend people to get it as well as it's a great reporting tool.

RE;
FSpamlist
Since the only way of submitting bot details to their db is via their mod (link below), does anyone know if it has conflicts with StopSpammer, MOD httpBL or Bot Buster? I feel that yet another anti-spam mod is going to start slowing sign-up down too much & I find that StopSpammer & MOD httpBL seem to stop over 70% of dodgy sign-ups between them.
(temerc.com/forums/viewtopic.php?f=79&t=6180&sid=c3877d5a767372cb157b489dba76cc50)

Take care,
Robert.

[Another Rob]

I'm running this, what I would like to do is add a second button next to the spam magnifying glass links to check folks username & email in google. So the link would be http://www.google.com/#sclient=psy&hl=en&q=[email, username or ip] as well as the http://www.stopforumspam.com/search?q=[email, username or ip]

What files would i need to edit?

[snoopy_virtual]

RE;
FSpamlist
Since the only way of submitting bot details to their db is via their mod (link below), does anyone know if it has conflicts with StopSpammer, MOD httpBL or Bot Buster?
(temerc.com/forums/viewtopic.php?f=79&t=6180&sid=c3877d5a767372cb157b489dba76cc50)

I didn't know they had already a mod for that, so I don't know if it's compatible with the rest or not. I will check it out.

Anybody else here is already using it?

I feel that yet another anti-spam mod is going to start slowing sign-up down too much & I find that StopSpammer & MOD httpBL seem to stop over 70% of dodgy sign-ups between them.

That would depend on the amount of visits you have in your forum every day and the power of your server.

I suppose that will be a case of test and see if it's better to have it or not.

I'm running this, what I would like to do is add a second button next to the spam magnifying glass links to check folks username & email in google. So the link would be http://www.google.com/#sclient=psy&hl=en&q=[email, username or ip] as well as the http://www.stopforumspam.com/search?q=[email, username or ip]

What files would i need to edit?

That would depend on the version of SMF and the version of this mod you are using.

Which ones are them?

[Another Rob]

I'm running this, what I would like to do is add a second button next to the spam magnifying glass links to check folks username & email in google. So the link would be http://www.google.com/#sclient=psy&hl=en&q=[email, username or ip] as well as the http://www.stopforumspam.com/search?q=[email, username or ip]

What files would i need to edit?

That would depend on the version of SMF and the version of this mod you are using.

Which ones are them?
[/quote]

SMF 2.0RC3 & Stop Spammer 2.3.9

[snoopy_virtual]

@Another Rob

This mod is not compatible with SMF 2 RC3, so I don't know if it's working properly in your forum.

Also from RC3 to the actual RC5 a lot of security problems have been found and sorted, so I would suggest you to update your forum when possible.

Anyway, I have been thinking about your question to add those links to google search and I think the easiest way for you to do it will be modifying the function sprintfspamer inside the file StopSpammer.php.

When you asked that question the other day I thought you should modify all the links one by one, and that depends on the version of SMF you are using (that's why I asked) but if you try to add the links inside the file ManageMembers.php (that's were they are in SMF 2.x) it would be a lot more complicated and you would need to modify it in a lot of places, but inside the file StopSpammer.php you will need to do only a small modification:

Look for the file StopSpammer.php inside your /Sources/ folder.

Inside that file look for the function sprintfspamer. (Starts at line 142)

Replace the line:

Code Select Expand


return $format1 . '<a href="'. $url . '">' . implode($value[$index], $format2) . '</a>';


With:

Code Select Expand


$googleLink = '<a href="http://www.google.com/#sclient=psy&hl=en&q=' . urlencode($value[$index]) . '">(whatever picture or text you want to use here)</a> ';

return $googleLink . $format1 . '<a href="'. $url . '">' . implode($value[$index], $format2) . '</a>';


That will take care of all the links at the same time, as the $value[$index] changes in every link and takes the value of email, username or ip accordingly.

===========

Just one small detail:

This mod adds those kind of links only in 3 columns: username, email and ip, but not in the 4th column that you have in that list (the column for the "real name").

Doing the modification I have suggested will add a link to google search in the 4 columns: username, real name, email and ip

If you don't want that link in the column for the "real name" change the modification to:

Code Select Expand


$googleLink = $type != 0 ? '<a href="http://www.google.com/#sclient=psy&hl=en&q=' . urlencode($value[$index]) . '">(whatever picture or text you want to use here)</a> ' : '';

return $googleLink . $format1 . '<a href="'. $url . '">' . implode($value[$index], $format2) . '</a>';


Because $type 0 is the one I use for the real name, $type 1 for the IP, 2 for the username and 3 for the email.

===========

I don't know the level you have understanding PHP or HTML, so I don't know if this was clear enough for you.

If you don't understand something let me know and I will explain it more slowly.

===========

Another small detail:

I haven't checked that modification, so I am only 99% sure it's right (I may have forgotten something) so let me know if it doesn't work as expected and I will check why.

[pedalo]

Hello.

I have searched the forum but couldn't find anywhere where people have reported this problem of mine. Apologies if this has been posted/reported already.

It's nothing major really. I have installed this module on one of my SMF forums ( version 1.1.13 ).

When I go to: Admin > Members > View All Members (index.php?action=viewmembers;sa=all) I get a full list of all my registered members. This list includes the spammers that have been blocked as well, however, the paging links on the top of the page only shows enough page links to accomodate listing the non-spammer members. So if I go to the last page, I don't really see the last member that should be listed there.

To better explain for example: Let's say I have 30 members that are not spammers. And let's also say I have 30 members who are spammers but are blocked with the mod. And let's also say that my "View All Members" page on the admin area displays only 30 records per page.

If I go to my "View All Members" page I will only see Page 1 link, there would be no Page 2 link, but the list below it shows the blocked spammers together with non-spammers, which should add up to 60 members. 60 members = 2 pages. So I can't access half of my members until I go to the "Approve Members" page and actually manually reject all the spammers to remove them from the list on the "View All Members" page. Hope you understand what I'm trying to say.

I did not notice this issue on my 2.0 RC5 version forum, but I'm not 100% sure that this problem doesn't exist on this version too. I've tried looking in the code to see if I can find the issue, but I'm a newbie on SMF so at the mo it's beyong me. I hope someone has a quick fix. Thanks.