Bad Behavior for SMF mod

[butchs]

I have install bad behavior. I have checked to enable it. I enter my http:BL Access Key(copied & pasted). However, it says "Project Honey Pot is offline!".

It is common for the service to go up and down.  When it is up you will get
"2b021b1f" keys when a bad guy visits your site.  When it is down Bad behavior code protects you.  No matter what the results of the test are, the mod will try (when the cache expires) to access the project honey pot service.

As for the project honeypot web site, they are two different things.  The website can still be up while the database is being adjusted.

Unlike all other tests the mod does something no other project honeypot application does to insure that the test is accurate.  It took me some time for me to create the test but it has proven reliable. 

[Xarcell]

I have install bad behavior. I have checked to enable it. I enter my http:BL Access Key(copied & pasted). However, it says "Project Honey Pot is offline!".

It is common for the service to go up and down.  When it is up you will get
"2b021b1f" keys when a bad guy visits your site.  When it is down Bad behavior code protects you.  No matter what the results of the test are, the mod will try (when the cache expires) to access the project honey pot service.

As for the project honeypot web site, they are two different things.  The website can still be up while the database is being adjusted.

Unlike all other tests the mod does something no other project honeypot application does to insure that the test is accurate.  It took me some time for me to create the test but it has proven reliable. 

Yeah your right. It seems the service is up & down at times. Currently working...

Thanks.

[Powerbob]

Installed this today on my 2.0.2 and it went smooth as silk, no problems at all.

Thanks 

[butchs]

You are welcome.

[natzy24]

Hey maybe you can help, or at least tell me if I've missed something. I just installed the Bad Behaviour Mod however I now have this on the top of the screen:

// Bad Behavior Start $txt['permissionname_badbehavior_goodgroup'] = 'Bad Behavior Whitelist Group'; $txt['permissionhelp_badbehavior_goodgroup'] = 'This option will make a member group exempt from all Bad Behavior tests.'; // Bad Behavior End

site is: http://dragonagerpg.amazeart.net/index.php?action=forum [nofollow]
Any help?

[Kindred]

your installation was done incorrectly and added the txt strings AFTER the closing ?> in the language file.

Find the edited language file and move the ?> from where ever it is int he file to the very end...

[GlitchPC]

Hello, butchs...

I currently use the following mods to stop spammers:

• httpBL
• Stop Spammer

Is there any particular reason for me to include your mod as additional protection?  Is there any known conflicts with your mod and the two I have already mentioned?

Thanks, in advance, for any info...

[CDM]

I am not incredibly tech-savvy, so I am having trouble figuring out how to run the test.

To test:
To insure that Bad Behavior is functioning correctly you can add the sting "Bad Behavior Test" to the User Agent (UA) of a HTTP request from someone who is not in the whitelist and is not the administrator.

    * Windows use FireFox with the [nofollow]"Modify Headers"[/nofollow] add-on.
    * Macintosh, [nofollow]"enable the Develop menu"[/nofollow] in Safari.


If you look at the page source (just below the title) you will see the speed of this mod at work:  <!-- Bad Behavior 2.2.1 run time: 3.025 ms -->

So, I should get the add-on with firefox? Then do the test? And what is a sting? Where is the user agent? What is an http request? Where do I find the page source and title? 

I apologize if these are silly questions but I need help. Thank you in advance!

[CDM]

If I have data in the entries logs, does that mean it is working properly? I do have some data now, finally, and it seems to be working, altho it has let a couple spammers thru.

[butchs]

Hello, butchs...

I currently use the following mods to stop spammers:

• httpBL
• Stop Spammer

No conflicts.  BB does what httpBL does but adds BB protection when projecthoneypot is down.  Plus this mod is routinely updated for SMF.

[butchs]

If I have data in the entries logs, does that mean it is working properly? I do have some data now, finally, and it seems to be working, altho it has let a couple spammers thru.

Yes it is working.

Sign up for projecthoneypot and enter the "http:BL Access Key" in the admin page of the mod to block more spammmers.  Click "?" for help.

[GlitchPC]

Hello, butchs...

I currently use the following mods to stop spammers:

• httpBL
• Stop Spammer

No conflicts.  BB does what httpBL does but adds BB protection when projecthoneypot is down.  Plus this mod is routinely updated for SMF.

Thanks for the quick reply...

I have it installed, configured...and, apparently, enabled.  Yet, I get the error that Project HoneyPot is offline.  The httpBL mod I have states that the connection to HoneyPot is perfect.  I don't use Firefox...and don't want to end up blocking myself.

Any help?

Edit...

It seems to be working, now.  Logs are showing entries.  However, I do have an additional question...regarding the following statement...

In SMF you can whitelist member groups only.  Unlike httpBL, this mod will use the last known ip address of a whitelisted member and not block them if they are not logged in and their ip address has not changed.

What happens for Opera Turbo users?  Turbo creates different IPs quite a bit.  Will a member get denied access simply because they use Opera with Turbo enabled?  If so...how does one go about rectifying this issue...since they will have a different IP every time they log into the forum?

[CDM]

Yes it is working.

Sign up for projecthoneypot and enter the "http:BL Access Key" in the admin page of the mod to block more spammmers.  Click "?" for help.

Thanks so much!! FAB mod!!

[butchs]

Thanks for the quick reply...

I have it installed, configured...and, apparently, enabled.  Yet, I get the error that Project HoneyPot is offline.  The httpBL mod I have states that the connection to HoneyPot is perfect.  I don't use Firefox...and don't want to end up blocking myself.

Only BB 4 SMF provides an accurate status of Project Honeypot.  httpBLmod uses the test that many other mods use from the Project Honeypot site that incorrectly states the connection is perfect when it is not.  Notice that it does not block anything when BB says the connection is down?

In SMF you can whitelist member groups only.  Unlike httpBL, this mod will use the last known ip address of a whitelisted member and not block them if they are not logged in and their ip address has not changed.

What are you talking about?  That is not how the whitelist works.  Look at the link I provided.

Bottom line all new non-admin ip addresses not in the whitelist will be checked.  All non-admin users logged in beyond the cache limit, not in the whitelist, will be checked.

I have it installed, configured...and, apparently, enabled.  Yet, I get the error that Project HoneyPot is offline.  The httpBL mod I have states that the connection to HoneyPot is perfect.  I don't use Firefox...and don't want to end up blocking myself.

Any help?

Again you are not getting an error.  Project Honeypot is down often.

The mod does not block admins!  Furthermore, you can not block yourself if Project Honeypot is down.  When it is is down the BB tests takes over and they will not block you unless you are a spammer.  But if you like to act like a spammer the mod offers a whitelist.  Read this link for info on how to add your ip address range to the whitelist.

I don't use Firefox...and don't want to end up blocking myself.

What happens for Opera Turbo users?  Turbo creates different IPs quite a bit.  Will a member get denied access simply because they use Opera with Turbo enabled?  If so...how does one go about rectifying this issue...since they will have a different IP every time they log into the forum?

I do not see that as an issue with this mod.  The Project Honeypot portion checks the ip vs the spammer database and the Bad Behavior portion analyzes the delivery method as well as the software the spammer is using not the ip address.

[GlitchPC]

I, apparently, misunderstood what I read in your link.  Thanks for the clarification and a great mod.  It's doing its thing...and I couldn't be happier.

[stevehow]

Is it possible to install the Bad Behaviour mod without the "suspicious" post button in the reply . Having tested the mod successfully, the comment from my other admins is that we'd prefer not to have that functionality.

[NanoSector]

Very nice mod! Seems to block the majority of spammers from my forum

[butchs]

Is it possible to install the Bad Behaviour mod without the "suspicious" post button in the reply . Having tested the mod successfully, the comment from my other admins is that we'd prefer not to have that functionality.

Unzip the package.

Edit "install_db.php" as follows:
delete:

Code Select Expand

if (function_exists('add_integration_function')) {
$badbehavior_integraton_hooks = array(
'integrate_bbc_codes' => 'badbehavior_suspicious_hide',
'integrate_bbc_buttons' => 'badbehavior_suspicious_button',
'integrate_pre_include' => '$boarddir/Sources/Subs_badbehavior_bbc.php',
);

foreach ($badbehavior_integraton_hooks as $badbehavior_hook => $badbehavior_integraton_function)
add_integration_function($badbehavior_hook, $badbehavior_integraton_function, TRUE);

Unset($badbehavior_integraton_hooks);
Unset($badbehavior_hook, $badbehavior_integraton_function);
}


Edit "uninstall_db.php" and delete:

Code Select Expand

if (function_exists('add_integration_function')) {
$badbehavior_integraton_hooks = array(
'integrate_bbc_codes' => 'badbehavior_suspicious_hide',
'integrate_bbc_buttons' => 'badbehavior_suspicious_button',
'integrate_pre_include' => '$boarddir/Sources/Subs_badbehavior_bbc.php',
);

foreach ($badbehavior_integraton_hooks as $badbehavior_hook => $badbehavior_integraton_function)
remove_integration_function($badbehavior_hook, $badbehavior_integraton_function);

Unset($badbehavior_integraton_hooks);
Unset($badbehavior_hook, $badbehavior_integraton_function);

//  Delete BBC code
if (!empty($modSettings['disabledBBC'])) {

$BB_uninstall_content = '';

if (strpos($modSettings['disabledBBC'], ',') !== false) {
$BB_uninstall_temp = array();
$BB_uninstall_temp = explode(',', strtolower($modSettings['disabledBBC']));

if (in_array('suspicious', $BB_uninstall_temp)) {
foreach ($BB_uninstall_temp as $key => $value)  {
$pos = strpos(strtolower($value), 'suspicious');
if ($pos !== false) {
} else {
$BB_uninstall_content .= $value . ',';
}
}
unset($value);
$BB_uninstall_content = substr($BB_uninstall_content, 0, -1);
}
} else {
if ($modSettings['disabledBBC'] !== 'suspicious')
$BB_content = $modSettings['disabledBBC'];
}
$smcFunc['db_insert']('replace',
$db_prefix . 'settings',
array('variable' => 'string', 'value' => 'string',
),
array(
array('disabledBBC', $BB_uninstall_content),
),
array('variable')
);
}
unset($BB_uninstall_temp);
}

Save.  Re-zip and install.

[butchs]

I, apparently, misunderstood what I read in your link.  Thanks for the clarification and a great mod.  It's doing its thing...and I couldn't be happier.

Very nice mod! Seems to block the majority of spammers from my forum

Thank you.

[stevehow]

Re omit 'suspicious button' thanks for you prompt reply. Butchs