News:

Want to get involved in developing SMF, then why not lend a hand on our github!

Main Menu

httpBL

Started by Diego Andrés, February 17, 2010, 03:55:54 PM

Previous topic - Next topic

snoopy_virtual


El verdadero sabio es aquel que lo ve todo, lo estudia todo, lo analiza todo y molesta poco.
A true wise man is he who sees everything, studies everything, analyses everything and hardly ever annoys.

snoopy_virtual

The rest was an example for giveaway of a test I have done and anybody can repeat if they want.

Of course I wouldn't recommend nobody to try that test on an important forum. Only on test forums.  ;D

El verdadero sabio es aquel que lo ve todo, lo estudia todo, lo analiza todo y molesta poco.
A true wise man is he who sees everything, studies everything, analyses everything and hardly ever annoys.

Wizzlefits

Okay butches & snoopy!
You boys play nice or I'll get the beer powered fire hose out! I know how you hate that cheap beer. ;)
Anyway...
Quote from: snoopy_virtual on March 16, 2010, 11:23:50 AM
The way I designed the warning page is too scary and humans may think they are in the wrong site, because the design have nothing to do with the rest of your site.

This is very true. It scared the heck out of me the first I loaded it. But, Just to keep it simple and put the unlucky human at ease, I'm changing mine to something like this...
Quote
Sorry!
But you have been blocked you from viewing ', $context['forum_name'], '

Bet you're wondering what the heck is going on, right?
Well... in a nut shell, the IP address your computer is using has been listed as a bad boy. And since we like to provide a safe environment for our members, we check every IP to keep the rif raf out.
Now there is a chance that you are a real person and have been unlucky enough to get assigned a bad IP. More on how to fix that further down the page.
But for now, here's what we're going to do to prove that you are a real person and not a silly robot.

Below you will see a very simple math problem. All you have to do is put the correct answer in the "top box only " and click send.
HOLD ON!
There's a catch! You have to do this 2 times. Because a robot can get lucky once, but not twice. "wink wink"
Okay...go for it! We'll see you in a sec.
yada yada...

Yes it's a bit goofy, but it's not like head crab is going to turn them into a zombie.  :o

Oh, giveaway365.com
Since installing httBL and Stop Spammer....
Not a single bot has been able to post. Even went so far as turning on instant registration and turning off the smf visual verification.

Just my penny & a half. (can't afford the full 2 cents)

butchs

Quote from: Wizzlefits on March 17, 2010, 05:59:23 PM
Okay butches & snoopy!
You boys play nice or I'll get the beer powered fire hose out! I know how you hate that cheap beer. ;)
Anyway...

Ha ha...  You should see us over at Snoop's place.  ;)
I have been truly inspired by the SUGGESTIONS as I sit on my throne and contemplate the wisdom imposed upon me.

snoopy_virtual

Quote from: Wizzlefits on March 17, 2010, 05:59:23 PM
...
You boys play nice or I'll get the beer powered fire hose out!
...

* Snoopy gets out the water proof suit just in case

Quote from: Wizzlefits on March 17, 2010, 05:59:23 PM
...
I'm changing mine to something like this
...

Something like that was my idea. Something more friendly and less scary.

We can do something:

Lets design each of us a different warning page and put them all here. We can see them all and take the best ideas of each one.

El verdadero sabio es aquel que lo ve todo, lo estudia todo, lo analiza todo y molesta poco.
A true wise man is he who sees everything, studies everything, analyses everything and hardly ever annoys.

snoopy_virtual

@Wizzlefits

If you want to use the variable $context['forum_name'] inside the language strings you need to declare it global first, so if you want your warning page to work you need to change the line:


global $modSettings, $user_info, $txt, $boardurl;


For this one:


global $modSettings, $user_info, $txt, $boardurl, $context;

El verdadero sabio es aquel que lo ve todo, lo estudia todo, lo analiza todo y molesta poco.
A true wise man is he who sees everything, studies everything, analyses everything and hardly ever annoys.

Wizzlefits

Quote from: snoopy_virtual on March 17, 2010, 06:29:47 PM
@Wizzlefits

If you want to use the variable $context['forum_name'] inside the language strings you need to declare it global first, so if you want your warning page to work you need to change the line:


global $modSettings, $user_info, $txt, $boardurl;


For this one:


global $modSettings, $user_info, $txt, $boardurl, $context;

Yeper!
Otherwise it return an undefined (yada yada) error. I think, something like that, yea that the one. LOL!!

giveaway365.com

I have full confidence in snoppy sir. He will make a nice warning page !

Wizzlefits

#188
Quote from: giveaway365.com on March 18, 2010, 01:18:16 AM
I have full confidence in snoppy sir. He will make a nice warning page !
Agreed!  :)
But until snoopy & butchs stop poking each other with sharp sticks. (just kidding! I know the sticks are not sharp)
here's my "can't hit the side of a barn" shot at the warning.php.
Oh, it's only in english! Sorry.



Removed hard coded site name (should display your own site name) & tweaked css

butchs

Do not confuse our creative process with bickering.  Instead bath in the spam free waters that we are helping to create as we are but two mad programmers who are heck :o  bent to rid all SMF forums of spammery.
:)
I have been truly inspired by the SUGGESTIONS as I sit on my throne and contemplate the wisdom imposed upon me.

Wizzlefits

Quote from: butchs on March 18, 2010, 10:40:53 AM
Do not confuse our creative process with bickering.  Instead bath in the spam free waters that we are helping to create as we are but two mad programmers who are heck :o  bent to rid all SMF forums of spammery.
:)
LOL!
Your bickering.....errr I mean "creative process" is interesting, not to mention fun to watch!  ;)
So ya'll just keep them "process" flowing! I'm learning a lot.  :D

giveaway365.com

I am sure that creative thinkers are going to make a very very nice warning page now ! We have not disturbed them since last 100 hours !

giveaway365.com

#192
Sir,
I have made a warning page... Its a bit personalise for my website...
Test it here : http://www.giveaway365.com/warning.php

Have a look at it...
Please note : All visitors are advice not to use this file for production as its just for testing. It may have bugs and errors.

rich357

error message:
8: Undefined index: REQUEST_URI
C:\Inetpub\vhosts\example.com\httpdocs\forums\Sources\httpBL_Subs.php
478

What's with this error?

I reinstalled the entire forum, then reinstalled the mod. So far, nothing tells me the mod is even working.
I dont see the magnifying glass thing besides the names.

What am I missing?

Yes I have the API key from honeypot.



mane16

Snoopy, I have a problem with the mod instalation, I upload the package into smf, but when I´ll go to install it, it says ERROR in the 4th line (4.     Executar Modificación     ./Themes/default/index.template.php     Prueba fallida), and i don´t know why..., anyway, if someone has the same problem, and is already solve, maybe could tell me how to solve..., if is in spanish lenguage, better, but if is in english, is all right anyway ^^
thanks

snoopy_virtual

Quote from: mane16 on April 14, 2010, 03:17:02 PM
Snoopy, I have a problem with the mod instalation, I upload the package into smf, but when I´ll go to install it, it says ERROR in the 4th line (4.     Executar Modificación     ./Themes/default/index.template.php     Prueba fallida), and i don´t know why..., anyway, if someone has the same problem, and is already solve, maybe could tell me how to solve..., if is in spanish lenguage, better, but if is in english, is all right anyway ^^
thanks

I already answered you that question in Spanish here:

http://www.snoopyvirtualstudio.com/foro/index.php?topic=328.0  ;)

Salú

El verdadero sabio es aquel que lo ve todo, lo estudia todo, lo analiza todo y molesta poco.
A true wise man is he who sees everything, studies everything, analyses everything and hardly ever annoys.

flapjack

unfortunatley, until a whitelist system is added, I am saying goodbye to this mod. too many false positives, too much hassle for users everytime go through the warning message.

Wizzlefits

#197
Just noticed something interesting.
2 spammers just got past httpBL by brute force.
They tried to register 2 times per second until it let them pass. 1 hit the page 8 times, the other hit 6 times.

StopSpammer caught them on the back side.  ;D

giveaway365.com

the logic is simple.
httpbl takes time to identify because of formalities and stopspammer works on inputs of people like you and me !

Wizzlefits

Quote from: giveaway365.com on April 28, 2010, 12:45:19 AM
the logic is simple.
httpbl takes time to identify because of formalities and stopspammer works on inputs of people like you and me !
Not sure what you mean by formalities.
Mod httpBL checks the IP of everyone that hits the site.
Stop Spammer checks (depending on how one has it set) email, user name and IP of the registration info.

In my case, the bot was hitting the registration page url directly on every request. httpBL stopped most of the requests, but my guess is, and it's only a guess, that due to a slight delay between my server and the project honeypot server the bot was able to submit the info.

BTW,
Some auto post software does not use a browser to do its job. Which means it doesn't have to wait for images, java etc to load and thus can hit a page, submit the info and be gone very very fast.

Advertisement: