Spam

Found an issue with the phpBB system here at NESdev? Use this forum to report problems.

Moderator: Moderators

Xkeeper
Posts: 85
Joined: Fri Feb 29, 2008 10:35 am

Post by Xkeeper » Mon Sep 01, 2008 3:52 am

... adding in even the most basic of spam protection isn't hard, guys. Seriously, give me FTP access and you'll have most bots blocked within seconds with about zero effort.

Seriously. I mean it. I did this to my own forum years ago and I haven't had a spambot since.

User avatar
BMF54123
Posts: 409
Joined: Mon Aug 28, 2006 2:52 am
Contact:

Post by BMF54123 » Mon Sep 01, 2008 4:42 am

tepples wrote:I can look up the IP addresses of spammers so that other users can report them to their ISPs.
That's like shooting a BB gun at an invisible tank.

Passive moderation is not going to take care of this problem. Only a little administrative elbow grease behind the scenes will.

(I can vouch for Xkeeper; he knows what he's doing)

User avatar
Zepper
Formerly Fx3
Posts: 3192
Joined: Fri Nov 12, 2004 4:59 pm
Location: Brazil
Contact:

Post by Zepper » Mon Sep 01, 2008 2:59 pm

...but he has an admin status right now.

tepples
Posts: 21973
Joined: Sun Sep 19, 2004 11:12 pm
Location: NE Indiana, USA (NTSC)
Contact:

Post by tepples » Mon Sep 01, 2008 5:16 pm

And I am using the admin status to ban spammers' accounts right before I delete all their posts. But every time I am promoted, I learn of a higher access level that I don't yet have. Currently I know of the following:
  1. FTPer
  2. Administrator (e.g. myself)
  3. Moderator
  4. User
  5. Guest
As far as I can tell, only FTPers can install tools that prevent spam robots from registering or posting. The only relevant actions that I can find in the phpBB 2 admin control panel are to 1. ban accounts that have already spammed (which I am doing) and 2. turn off automatic confirmation of all newly registered accounts.

User avatar
BMF54123
Posts: 409
Joined: Mon Aug 28, 2006 2:52 am
Contact:

Post by BMF54123 » Mon Sep 01, 2008 6:36 pm

tepples wrote:2. turn off automatic confirmation of all newly registered accounts.
As much as I hate e-mail confirmation, it might be the best option right now.

User avatar
Zepper
Formerly Fx3
Posts: 3192
Joined: Fri Nov 12, 2004 4:59 pm
Location: Brazil
Contact:

Post by Zepper » Mon Sep 01, 2008 7:14 pm

It would work well, but get ready... as your inbox may get flooded. ;)

tepples
Posts: 21973
Joined: Sun Sep 19, 2004 11:12 pm
Location: NE Indiana, USA (NTSC)
Contact:

Post by tepples » Tue Sep 02, 2008 5:28 am

BMF54123 wrote:
tepples wrote:2. turn off automatic confirmation of all newly registered accounts.
As much as I hate e-mail confirmation, it might be the best option right now.
But how would I tell the difference between a human trying to register and a spambot trying to register when deciding whether to activate the account?

User avatar
Zepper
Formerly Fx3
Posts: 3192
Joined: Fri Nov 12, 2004 4:59 pm
Location: Brazil
Contact:

Post by Zepper » Tue Sep 02, 2008 8:19 am

Usually by looking the e-mail address. I had/have a forum with this thing, and most e-mails have a weird user@. You cannot filter them automatically, unfortunately. That's why I warned you about the flood. Normal users and bots will get registered.

Celius
Posts: 2157
Joined: Sun Jun 05, 2005 2:04 pm
Location: Minneapolis, Minnesota, United States
Contact:

Post by Celius » Wed Sep 10, 2008 11:21 am

Hey, I just registered at another site, and they had a great method of dealing with spambots. There were about 8 textboxes in the registration process that it said in big letters to leave empty. If you didn't leave it empty, it would think you're a spambot. They were all in a row, so it said that spambots always fill in some of the boxes. Maybe something like that should be implemented here.

User avatar
Dwedit
Posts: 4306
Joined: Fri Nov 19, 2004 7:35 pm
Contact:

Post by Dwedit » Tue Sep 16, 2008 3:24 am

Please stop the incompetence already!
Auto-ban and delete all posts by anyone with under 10 posts who makes links using those specific censored words.
Here come the fortune cookies! Here come the fortune cookies! They're wearing paper hats!

tepples
Posts: 21973
Joined: Sun Sep 19, 2004 11:12 pm
Location: NE Indiana, USA (NTSC)
Contact:

Post by tepples » Tue Sep 16, 2008 6:17 am

If only I knew how to make or find a phpBB mod...

Roth
Posts: 399
Joined: Wed Aug 03, 2005 3:15 pm
Contact:

Post by Roth » Tue Sep 16, 2008 6:22 am

You know, I had the same problem on another forum when phpBB2 was installed, but this hack did the trick:

http://www.phpbb.com/community/viewtopic.php?t=435694

It's easy to implement, and only every once in awhile one would get through. If I remember, the setup time is only ~5 minutes. Like I said, it did wonders for the forum I was running.

There's also another more complicated one that takes ~30 minutes, but I never tried that. It's the one that asks questions (I think maybe Celius mentioned it?). Oh wait, no, he was talking about the other one haha Well, yeah, that one works very well!

Of course, this is all considering that you can get into the server.

Post Reply