News:

Want to get involved in developing SMF, then why not lend a hand on our github!

Main Menu

Block e-mail usernames

Started by NanoSector, June 05, 2011, 04:40:28 PM

Previous topic - Next topic

FragaCampos

Thank you very much, Miker1029! ;)

Miker1029

Not a problem. I just went and mail listed all my users. Came up with 20 bounced s 7 qq.com, and am seeing am up in the logs of you can't use this mail provider... So its working and I'll be searching for more to add....

Mike

brynn

Hi and thanks for this mod!

I just installed, but there are a couple of things I don't understand.  Can it be set to block any kind of email address that's used for the username?  Or do you have to give it a list of all the email providers?

Thanks  :)

Miker1029

You have to add them. I uploaded a text file in this thread to get you start.  I'll put a copy/paste of an updated one I use on my forum in the next couple days... I just add as I get bounced mails....

Mike

brynn

I think I might not understand the purpose for this mod.  What do you mean by "bounced mails"?

I don't want email addresses used for usernames at all.  But it seems like only certain ones that you want to block.

Thanks  :)

Edit
Isn't there a place to make a list of all the usernames that you don't want anyone to use?  You know, like you might not want someone to call theirself "moderator" or "admin" or "owner", etc.  I wonder if i just put "@" in that list, if that would block them all??

Miker1029

Well, I Use it for FAKE E-Mail Accounts, But you use it to Block E-Mail Address' from providers you don't want, so say you want to block Yahoo, you add "yahoo.com" to the list and it won't allow anyone with a yahoo account to use that e-mail address to register....

And Ya, There is For user names in Admin->Registration->Set Reserved Names

Not sure, But I Believe you can set the forum to not Verify, But as for None at all, I'm Not sure, Never even thought of that....

Mike

brynn

Interesting....  Just out of curiosity, why do you want to block fake email addresses but not valid ones?

I want to block all email addresses, mostly for aesthetic reasons (they tend to be very long).  But also I don't want my forum to be a pawn for the world of spam.  Used to be, people avoided posting their email address publically because they didn't want to get blasted with spam.  So now when people blatantly advertise an email address, I have to think it's something to do with spam.

Miker1029

I've found that "Some" people that use fakes tend to go to the dark side without a certain level of accountability...  A Site is not going to send SPAM unless your set up that way, Also There are register bots that can be a real PITA....  So Ya, No Fake E-Mails I My site, There's no Need as The site doesn't Spam...Or Use ANY Personal Info for anything but the running of the forum...

I've attached My latest Fake List, Just Copy/Paste to your MOD for those who want to use it, As i've said before, ALOT of them came from Sites that are trying to collect them, and SOME are from me that bounced and had a name like "ONETIMEMAIL.COM", If I wasn't sure I didn't block it...

Mike

Kindred




(and brynn, you did understand it correctly)

This mod stops a user from using the email address as the username.
It also seems to be able to prevent certain providers and lists of email addresses, like Miker's list form being used as actual email addresses.

Personally, I think that's a waste of time. I own several domains. I can create several thousand "fake" or temporary email addresses that will let me register and then get deleted.
Слaва
Украинi

Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

"Loki is not evil, although he is certainly not a force for good. Loki is... complicated."

Miker1029

Ya, But I've actually had good results, and ya it's a never ending battle, But for me I went from about 60-100 Fake's a Month to (as Of this Easter I sent out an E-mail Blast for the holiday, From Christmas) I had 9......

So, I had such issues (Do to Ignorance, Which you know, lol) SPAM and BOTS that I just went the one step further.....

Mike


brynn

Thanks for the info, Mike and Kindred.

Quote(and brynn, you did understand it correctly)

This mod stops a user from using the email address as the username

But it doesn't block all domains, right?  It only blocks the ones that you list in the options, right?

QuotePersonally, I think that's a waste of time.

But doesn't having email addresses all over the place attract a lot of spammers looking snag the addresses?

Kindred

I was referring to Miker's block list... in my opinion of it being a waste.

but no --  from what I have read, this SHOULD stop ANYONE from using and email address as a username (going forward) and it will completely BLOCK anyone trying to register with one of the listed domains, in addition to that.   (I think -- try it out on a test system to check)
Слaва
Украинi

Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

"Loki is not evil, although he is certainly not a force for good. Loki is... complicated."

Miker1029

Quote from: brynn on March 30, 2016, 11:29:53 AM

But it doesn't block all domains, right?  It only blocks the ones that you list in the options, right?

But doesn't having email addresses all over the place attract a lot of spammers looking snag the addresses?

As Kindred Said it Only Blocks emails you ADD to the Settings for the MOD, And E-Mails and Spammers Have Really not a lot to do with this MOD, The Forum Can be Set up to HIDE all E-mails and Send them through the E-mail system of the Forum, So ONLY people with Elevated Permissions can SEE any ones E-mail Address.....(Admins, Moderators if you Choose)

I use this MOD As an "Extra" Step of preventing any Issues, I don't sell, give away, or in anyway do anything with my users information for anything but running the forum. so in my opinion you need not use a fake on my Forum, Maybe others (Ya I can see a good reason for it), as my forum doesn't abuse the information....

I'm No expert on how BOTS work but i'd imagine they'd need different E-mail Address, and Ya BOTS do go into forums to Skim all Info they can get, Why I have E-mails set-up the Way I do (Sent through forums E-mail system), And WHY my Guests and Spiders CAN NOT Access user profiles....

Mike




Kindred

Miker, I think you misunderstood brynn...

brynn's intention is to keep users from using the email address as their username so that spam-scrapers who view the site do not SEE the email (as a username) and add it to their catalog... not to prevent spammers from registering
Слaва
Украинi

Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

"Loki is not evil, although he is certainly not a force for good. Loki is... complicated."

DSystem

Another translation ...

    <file name="$languagedir/Modifications.portuguese_brazilian.php" error="skip">
        <operation>
            <search position="end" />
            <add><![CDATA[$txt['registration_failed_email_provider1'] = 'O registo falhou porque: você não pode usar esse provedor de e-mail em seu nome de usuário.';
$txt['registration_failed_email'] = 'O registo falhou porque: você não pode usar um endereço de e-mail como seu nome de usuário.';
$txt['registration_failed_email_provider2'] = 'O registo falhou porque: você não pode usar esse provedor de e-mail no seu endereço de e-mail.';

$txt['blockemail'] = 'Bloquear e-mail usernames';
$txt['enableblockemail'] = 'Habilitar bloqueador';

$txt['block_what'] = 'O que verificar';
$txt['what_username'] = 'Usernames';
$txt['what_email'] = 'Endereços de email';
$txt['what_both'] = 'Ambos';

$txt['block_by_provider'] = 'Bloquear por provedor';
$txt['email_providers_deny'] = 'Provedores para bloquear (nome.ext, E.G. hotmail.com, separados por um único ponto e vírgula (;))
<div class="smalltext">A opção "Bloquear por provedor" deve estar ativada.</div>';

$txt['also_check_email_addresses'] = 'Além disso, verifique os endereços de e-mail
<div class="smalltext">A opçao "Bloquear por provedor" ou "Permitir por provedor" deve ser habilitada para que isto funcione corretamente.</div>';

$txt['allow_by_provider'] = 'Permitir por provedor';
$txt['email_providers_allow'] = 'Provedores para permitir (nome.ext, E.G. hotmail.com, separados por um único ponto e vírgula (;))
<div class="smalltext">A opçao "Permitir por provedor" deve estar ativada.</div>';]]></add>
        </operation>
    </file>
    <file name="$languagedir/Modifications.portuguese_brazilian-utf8.php" error="skip">
        <operation>
            <search position="end" />
            <add><![CDATA[$txt['registration_failed_email_provider1'] = 'O registo falhou porque: voc&ecirc; n&atilde;o pode usar esse provedor de e-mail em seu nome de usu&aacute;rio.';
$txt['registration_failed_email'] = 'O registo falhou porque: voc&ecirc; n&atilde;o pode usar um endere&ccedil;o de e-mail como seu nome de usu&aacute;rio.';
$txt['registration_failed_email_provider2'] = 'O registo falhou porque: voc&ecirc; n&atilde;o pode usar esse provedor de e-mail no seu endere&ccedil;o de e-mail.';

$txt['blockemail'] = 'Bloquear e-mail usernames';
$txt['enableblockemail'] = 'Habilitar bloqueador';

$txt['block_what'] = 'O que verificar';
$txt['what_username'] = 'Usernames';
$txt['what_email'] = 'Endere&ccedil;os de email';
$txt['what_both'] = 'Ambos';

$txt['block_by_provider'] = 'Bloquear por provedor';
$txt['email_providers_deny'] = 'Provedores para bloquear (nome.ext, E.G. hotmail.com, separados por um &uacute;nico ponto e v&iacute;rgula (;))
<div class="smalltext">A op&ccedil;&atilde;o "Bloquear por provedor" deve estar ativada.</div>';

$txt['also_check_email_addresses'] = 'Além disso, verifique os endere&ccedil;os de e-mail
<div class="smalltext">A op&ccedil;ao "Bloquear por provedor" ou "Permitir por provedor" deve ser habilitada para que isto funcione corretamente.</div>';

$txt['allow_by_provider'] = 'Permitir por provedor';
$txt['email_providers_allow'] = 'Provedores para permitir (nome.ext, E.G. hotmail.com, separados por um &uacute;nico ponto e v&iacute;rgula (;))
<div class="smalltext">A op&ccedil;ao "Permitir por provedor" deve estar ativada.</div>';]]></add>
        </operation>
    </file>

Miker1029

Quote from: Kindred on March 30, 2016, 01:19:39 PM
Miker, I think you misunderstood brynn...lol

brynn's intention is to keep users from using the email address as their username so that spam-scrapers who view the site do not SEE the email (as a username) and add it to their catalog... not to prevent spammers from registering

Okay that's why I was getting lost that's simple just don't let them use an @ symbol set it in reserved name...
Also restrict .net .com etc..  And could make it so they can't use periods at all in the user name that pretty much stops it. I have all that set plus forum name developer etc...

Mike

Kindred

except that would stop someone from using the name Netrunner or K@

this mod CLAIMS to allow both of those, while stopping the user from using a full email/domain as username
Слaва
Украинi

Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

"Loki is not evil, although he is certainly not a force for good. Loki is... complicated."

brynn

#57
Ok, thanks guys.  Maybe I'll come up with a list of all the most common domains, to share here, like Miker has shared. 

It just needs to be in a text file, with domains separated with semicolon, correct?

Edit
Although I am still curious why Miker only wants to block fake email addresses??

Edit #2
Sorry, I missed this:

QuoteI use this MOD As an "Extra" Step of preventing any Issues, I don't sell, give away, or in anyway do anything with my users information for anything but running the forum. so in my opinion you need not use a fake on my Forum, Maybe others (Ya I can see a good reason for it), as my forum doesn't abuse the information....

But I still don't understand.  Are you thinking that anyone who uses a fake email address for a username is trying to hide something?  Or does not want to be a member for sincere reason?

brynn

Oooh....

Is it because you don't want other members to actually use the email address (that's being used as a username) and try to email a message to a fake address?

Miker1029

#59
Bunch Of reason that I can Think of off the Top of my head, The Forum Verifies By E-Mails for a Reason, A Fake, Pretty much is a work around for that, If I didn't want people without REAL E-Mails, I wouldn't bother verifying, I think (Dunno For sure) that Register Bots would need many E-Mail Address' and Would figure Fakes would be the Easiest to get... A Fake E-Mail Address Encourages Users that SPAM to SPAM.... No Accountability...

So On Top Of the MODS I'm Running to 1. Stop Spam, Stop BOTs (ALL), Stop FAKES, I Send Out an E-mail Blast Every (US) Holiday, And DELETE all BOUNCED E-mails (Returned do to E-mail not Existing, And ADD to E-Mail Block), In this way I'm Turning the Forum Around to REAL USERS, Instead Of BS Users, Might be an Easier way, but I'm doing this by What I've learned, and What "I" can figure will work....

As An Example I started using SMF (PHPBB before that, Used the Database Conversion to Switch, AND was on a "FREE" Host), and RAN UP to DANG near 2000 Users In my 1st Month, Was before I knew ANYTHING about running ANYTHING on the NET, Couple Years later I know more (And AM STILL LEARNING!), Awhile Ago I started Using "Email Inactive Users" MOD, That Sends a Notification to users that haven't posted and Haven't logged on in 6 Months, Sends them an E-mail to let them know account will be deleted in 7 days if they don't login, Then Deletes the accounts, as Of right now I'm at 2400+ (from about 4000+) Users (get anywhere from 200-300 New a month, AND I KNOW THESE USERS ARE REAL!), And Deleting Daily, By this July I should have Run the Cycle of My Ignorance out (Bots), and will be switching to a Yearly Deletion Process...

On this MOD and WHAT it does, I don't use it that way so I don't know..... The way I've described is the way I use it and works great for me....

@Kindred

Oh well then K@ will have to Be KAT or not sign up.....

Mike

These are the MODS I Use If it Helps Any:

EzPortal 3.1 [ Uninstall ]
2. Responsive Curve 1.0.0 [ Uninstall ]
3. Default Avatar 1.1.1 [ Uninstall ]
4. InLine Attachments 1.2.1 [ Uninstall ]
5. Voter Visibility 2.1 [ Uninstall ]
6. SA Twitter 1.2 [ Uninstall ]
7. Show Number of Errors at Top of Forum 1.1.2 [ Uninstall ]
8. KeyCAPTCHA for SMF 2.11 [ Uninstall ]
9. Treasury 2.12 [ Uninstall ]
10. Ad Managment 3.2 [ Uninstall ]
11. E-Arcade 3.0 [ Uninstall ]
12. Share this topic - SMF Mod 1.3 [ Uninstall ]
13. Stop Spammer 2.3.9 [ Uninstall ]
14. Code Highlighting 1.0 [ Uninstall ]
15. Highslide 4 SMF 0.8.1 [ Uninstall ]
16. SA GPlus 0.3 REV 9 [ Uninstall ]
17. Register Redirect 1.0 [ Uninstall ]
18. Email Inactive Users 1.1.1 [ Uninstall ]
19. Login Security 1.0.3 [ Uninstall ]
20. Membergroup ID with Group Name 1.1 [ Uninstall ]
21. Default_Membergroup 2.0 [ Uninstall ]
22. Block Email Usernames 0.4.2 [ Uninstall ]
23. httpBL 2.5.1 [ Uninstall ]
24. Topic Solved 1.1.1 [ Uninstall ]
25. Say Thanks 1.3 [ Uninstall ]
26. Downloads System 2.5 [ Uninstall ]
27. ICAP: Info Center Access Permission 1.0.0 [ Uninstall ]
28. Users mass actions 0.1.1 [ Uninstall ]
29. nCode Image Resizer 1.4 [ Uninstall ]
30. SA Facebook 3.0 [ Uninstall ]


And My "Reserved Names" That I DON'T Want in my Database....

Admin
Webmaster
Guest
root
no-reply
Miker1029
Miker
Moderator
Test
account
@
.
!
#
$
%
&
^
*
(
)
=
[
]
{
}
;
:
"
/
?
.
,
>
<
\
|
android
x86
net
org
com
xxx

Advertisement: