Register Members List Search Today's Posts Mark Forums Read

Reply
 
Mod Options
vbStopForumSpam Details »
vbStopForumSpam
Mod Version: 0.61, by pedigree (Coder) pedigree is offline
Developer Last Online: Nov 2013 I like it Show Printable Version Email this Page

vB Version: 4.0.0 Rating: (100 votes - 4.73 average) Installs: 1194
Released: 23 Dec 2009 Last Update: 27 Dec 2009 Downloads: 6042
Not Supported DB Changes Uses Plugins Additional Files Re-usable Code External Content  

vbStopForumSpam

Mod of the month winner October 2009.... That cant be bad


Apologies in advance, this is a copy of the 3.6/3.7/3.8 mod that has been verified to work in 4.0 (its so that I dont get a billion PMs asking if it works in 4.0)

This provides access to a RBL type system for forum admins, listing known spam IP / email / usernames. The RBL database is provided by www.stopforumspam.com. You do NOT need an API key from the website in order to access the database. only to submit data if you should wish to do so.

At the point of user registration, the mod checks if the IP number / provided username / email addresses appear on a block list and can block the registration.

Whilst this isnt the most perfect way to stop all forum spam, its another step that spammers have to overcome.

What it does

It checks with a remote database of known forum spammers. Their IP number, email address and forum username are tested and based on your configuration, you can reject / log / accept user registrations based on what you get back.

This version doesnt have
- whitelisting or the ability to submit users to the database but it will within the next week.
- automatic user deletion / post / PM purging. There are good tools out there already, this does something else.

Instructions are included in the installation.txt file - PLEASE read it first and dont forget to actually upload the files in the upload folder, otherwise it WILL kill your registration progress and you wont see the log file options in admincp.

Changes to vB
- 3 new database tables
- 2 database table alternations
- No new templates.
- 2 Hook (register_addmember_process & register_addmember_complete)

Ive tested it but had feedback that it works with versions as old as 3.6.2... Support should go back to older versions, as long as they have hook support for register_addmember_process / register_addmember_complete

For code to submit spammers to the database, check this post for code changes
http://www.vbulletin.org/forum/showp...&postcount=288

Reported to work
- 3.6.1, 3.6.2, 3.6.9, 3.6.10, 3.7.0, 3.7.1, 3.7.2, 3.7.3, 3.74, 3.80, 3.81, 3.82, 3.83, 3.8.4, 4.0beta3, 4.0 Gold
, 4.2pl1,2

Installers should remember to refresh their ACP navigation window when they first install it so they can see the new log file menu item.

REQUIRES MySQL 4.1.1+

There is a small mod, coded by Wired1 that will allow you to submit spammer details to the database from the admin control panel, here http://www.vbulletin.org/forum/showp...&postcount=289 This relies 100% on javascript being enabled and makes no tests that it is enabled.

You need to have an API key from www.stopforumspam.com in order to submit data, its free and easy to get... You DONT need an API key in order to use this mod however, only to submit spammer data.

Issues are
- The usergroup permissions / view details etc DONT work. I jumped the gun and put the permissions controls in there before I put the code in. Please delete the includes/xml/bitfield_vbstopforumspam.xml file and rebuild your postbit

Installation
- Follow the instructions in the zip file, that includes the file upload the correct folders.

Please click Installed

The original thread is at http://www.vbulletin.org/forum/showthread.php?t=176481 where there is a wealth of knowledge about the mod, please ask questions in there.

Download Now

Only licensed members can download files, Click Here for more information.

Show Your Support

  • To receive notifications regarding updates -> Click to Mark as Installed.
  • If you like this modification support the author by donating.
  • This modification may not be copied, reproduced or published elsewhere without author's permission.
Similar Mod
Mod Developer Type Replies Last Post
Administrative and Maintenance Tools vbStopForumSpam - known spammer lookup for new registrations pedigree vBulletin 3.6 Add-ons 1228 26 Jan 2016 19:27
Administrative and Maintenance Tools vbStopForumSpam pedigree vBulletin 3.8 Add-ons 154 09 Apr 2013 08:54

  #481  
Old 11 Nov 2013, 19:17
stemmy stemmy is offline
 
Join Date: Feb 2006
im getting db errors on install. Any fix for this.
Reply With Quote
  #482  
Old 25 Dec 2013, 18:14
webmastersitesi webmastersitesi is offline
 
Join Date: Oct 2007
Originally Posted by stemmy View Post
im getting db errors on install. Any fix for this.
me too ?
__________________
webmaster forum |webmaster forum
seo
Reply With Quote
  #483  
Old 08 Jan 2014, 02:30
Itworx4me's Avatar
Itworx4me Itworx4me is offline
 
Join Date: Feb 2002
Originally Posted by stemmy View Post
im getting db errors on install. Any fix for this.
Originally Posted by webmastersitesi View Post
me too ?
Open up product-vbstopforumspam.xml

Replace TYPE with ENGINE on line 22, 35, 45


Hope this helps.....

Itworx4me
Reply With Quote
  #484  
Old 08 Jan 2014, 11:45
webmastersitesi webmastersitesi is offline
 
Join Date: Oct 2007
Originally Posted by Itworx4me View Post
Open up product-vbstopforumspam.xml

Replace TYPE with ENGINE on line 22, 35, 45


Hope this helps.....

Itworx4me
thx i was able to import
__________________
webmaster forum |webmaster forum
seo
Reply With Quote
  #485  
Old 11 May 2014, 16:27
gregmlb gregmlb is offline
 
Join Date: Dec 2007
Is anyone using this successfully with 4.2.2 PL1?
Reply With Quote
  #486  
Old 12 May 2014, 04:39
Montagar Montagar is offline
 
Join Date: Jun 2011
Originally Posted by gregmlb View Post
Is anyone using this successfully with 4.2.2 PL1?
Yes, works fine for us.
Reply With Quote
  #487  
Old 12 May 2014, 17:06
djbaxter djbaxter is offline
 
Join Date: Aug 2006
Location: Ottawa, Canada
Same here. Using it on 4 vb4.22pl1 forums.
Reply With Quote
  #488  
Old 06 Jun 2014, 00:31
AusPhotography's Avatar
AusPhotography AusPhotography is offline
 
Join Date: Nov 2007
Real name: Rick-owner, Kym-admin
Originally Posted by djbaxter View Post
I can no longer recall the source either but here's what I have, adapted for vBulletin 4.x (up to and including 4.2.0 PL3).
I've updated this into a plugin, and fixed it for PHP 5.4 support (also vB4.2.2pl1)
Upload this via Admin CP - Plugins & Products - Download / Upload Plugins
Attached Files
File Type: xml vbstopforumspam_usergroup_6.xml (1.3 KB, 34 views)
__________________
www.AusPhotography.net.au a.k.a. AP is a photography forum where members share their photography, photo editing skills and techniques. We run regular photographic competitions; Rick (site owner) and Kym (site tech) using this account
*** Home of the AP fully comprehensive vb4 photographic competition management solution ***
Reply With Quote
  #489  
Old 18 Jun 2014, 03:31
djvj djvj is offline
 
Join Date: May 2009
I'm getting tons of emails a day on this addon and some legit users are not able to register:


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

It appears to be working though:

Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

When some users try to register, they say they get a database error.
Reply With Quote
  #490  
Old 20 Jun 2014, 00:56
AusPhotography's Avatar
AusPhotography AusPhotography is offline
 
Join Date: Nov 2007
Real name: Rick-owner, Kym-admin
Originally Posted by djvj View Post
When some users try to register, they say they get a database error.
That happens when the connection to SFS website takes longer than your MySQL connection timeout.

We reduced the CURL timeout (8 seconds I think) in the SFS plugin code to get around it.

I assume your MySQL timeout is 30 seconds which most shared hosts setup.
__________________
www.AusPhotography.net.au a.k.a. AP is a photography forum where members share their photography, photo editing skills and techniques. We run regular photographic competitions; Rick (site owner) and Kym (site tech) using this account
*** Home of the AP fully comprehensive vb4 photographic competition management solution ***
Reply With Quote
  #491  
Old 21 Jun 2014, 04:51
djvj djvj is offline
 
Join Date: May 2009
Thanks for your response AusPhotography.

So I have since uninstalled this mod for the GlowHost version and all my db/sql errors have gone away. I still get the SBS support, so I will be sticking with that plugin.

Just for reference, I did contact GoDaddy, but they would not provide details on the server's settings and said I would need to buy a VPS service at least to get access. Obviously that's not an option as the cost is far more for that vs shared hosting.
Reply With Quote
  #492  
Old 12 Sep 2014, 15:17
Paul. Paul. is offline
 
Join Date: Mar 2007
Originally Posted by djvj View Post
I'm getting tons of emails a day on this addon and some legit users are not able to register:


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

It appears to be working though:

Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

When some users try to register, they say they get a database error.
Originally Posted by AusPhotography View Post
That happens when the connection to SFS website takes longer than your MySQL connection timeout.

We reduced the CURL timeout (8 seconds I think) in the SFS plugin code to get around it.

I assume your MySQL timeout is 30 seconds which most shared hosts setup.
I get that error, too.

AusPhotography, is that a solution to the error shown?
I have emailed to get the details checked so I can use StopForumSpam.
It's working perfectly on another forum we have.
This forum is new as the previous was messed up and got deleted. It worked there, too.
Reply With Quote
  #493  
Old 28 Apr 2015, 15:02
thincom2000 thincom2000 is offline
 
Join Date: Jun 2006
Real name: Ted
Regarding the "MySQL has gone away" errors and register.php requests being tied up for 2 minutes or more...

The CURL timeout in the plugin code is 5 seconds as far as I can tell.

I think the problem is that CURL has a connection error during that 5 seconds where it can't connect to stopforumspam.com


When this happens, it is treated as a normal CURL error and falls back to file_get_contents(url), which I don't think has a timeout. file_get_contents also has trouble connecting and waits a very long time to give up (until after the MySQL link is auto-closed).

If an attacker can detect this situation on your site, they would be able to perform an attack like Slow Loris against a vBulletin forum that uses this mod. It's actually easy to "detect" this situation. SFS limits you to 20,000 API lookups per 24 hours, then blocks your IP which will also cause a CURL connection error. Using only 14 requests per minute (so not really detectable by DOS prevention), an attacker can leverage this limit and trigger file_get_contents for every registration attempt after 20,000. Since your IP is blocked, every request will wait until PHP times out. You will run out of PHP child processes, and your forum will be inaccessible. To protect yourself, you should make the following change.

In includes/functions_vbsfs.php, find and remove all of these:

Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

I would suggest that the author of this mod also makes this change to prevent Slow Loris attacks, or implements stream wrappers with an appropriate timeout set if support for file_get_contents(url) is still needed.
__________________
- the makers of VaultWiki

Last edited by thincom2000; 28 Apr 2015 at 15:39.
Reply With Quote
  #494  
Old 25 Nov 2015, 13:55
infnity8x3 infnity8x3 is offline
 
Join Date: Apr 2009
Installed and working as expected. vb 4.2.3. Had to do the sql syntax edit as mentioned above but that was easy. Thanks.

I was using glowhost version. But that mod added way to many (at least for me) useless options and features. I really only used it for the stopforumspam module.

I am all about a minimalist approach and this mod fits the bill.

Installed.
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Mod Options

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


New To Site? Need Help?

All times are GMT. The time now is 01:12.

Layout Options | Width: Wide Color: