Register Members List Search Today's Posts Mark Forums Read

Reply
 
Mod Options
[BetoPho] reCaptcha v3 Login Integration Details »
[BetoPho] reCaptcha v3 Login Integration
Mod Version: 1.1.0, by BetoPho (Coder) BetoPho is offline
Developer Last Online: Oct 2019 I like it Show Printable Version Email this Page

vB Version: 4.2.5 Rating: (2 votes - 4.50 average) Installs: 23
Released: 04 Jul 2019 Last Update: 06 Jul 2019 Downloads: 69
Supported Uses Plugins Template Edits Auto-Template External Content  

There are several requests to make this around the forum, so I guess I would contribute one.

Product Information
Provide reCaptcha intergration for vBulletin 4's login process that can check for bots or unsafe traffics using Google's famous reCaptcha engine.

Main Features
  • Ultilizing reCaptcha v3 advantages: invisible checks that can determine how safe a user/traffic is, from very likely human to very likely bot, using reCaptcha's 'score' system.
  • Performing specific actions to unsafe users/traffics, reject the login or redirect to another URL.
  • Bad traffic users captured by the product will just be displayed with an invalid login screen.
  • Ability to exclude users that won't be checked by reCaptcha.
  • Lightweight and easy to configure.
  • Simple installation: Install - Get reCaptcha keys - Configure the action - Done.

Future Versions Planning
  • Expanding integration with other forum sections, like thread/post posting, PM, album, etc.
  • Expanding integration with other activities, like register, search, page viewing, etc.
  • Combining suport with reCaptcha v2, adding additional layer of human verification, for example, only when reCaptcha v3 detected likely unsafe traffic, verification form from v2 will show for the user to verify.
  • Admincp Dashboard to view all failed login attemps captured by reCaptcha.
  • Support for vBulletin 3 & 5.
  • You name it.

Details
  • Files upload: none
  • Plugins: 6
  • Templates: 3 (2 templates, 1 CSS template)
  • Phrases: 2

Instructions
  1. (Preparation) Have your reCaptcha v3 keys ready first. reCaptcha homepage.
  2. Import the product XML file using Product section.
  3. Go to Options > [BetoPho] reCaptcha Integration.
  4. Insert the keys first (this product won't work without the keys).
  5. Configure and start using.

Additional Instructions
  1. To check if automatic template works, after putting the keys and configuring everything, view the homepage source (with the login form) as a Guest user and search for this code:

    Block Disabled:      (Update License Status)  
    Suspended or Unlicensed Members Cannot View Code.

    If found, it's good. If not found, it means you are using modified templates/style.
  2. In case it's not found, modify the template with the login form (usually 'header' template, might be other one depends on your style), search for the login form:

    Block Disabled:      (Update License Status)  
    Suspended or Unlicensed Members Cannot View Code.

    When found, insert the product code in the #1 section into anywhere inside of the form. For example, it will look like this:

    Block Disabled:      (Update License Status)  
    Suspended or Unlicensed Members Cannot View Code.

    Then it will work.

Let me know if you have any questions or suggestions.
Thank you

Changelog
1.0.0 - Jul 05 2019
  • Initial Release
1.1.0 - Jul 07 2019
  • Fix Admincp/Modcp locked out issue
  • Cleaning up codes and preparation for additional features

Download Now

Only licensed members can download files, Click Here for more information.

Screenshots

Click image for larger version

Name:	btp_rcaptcha_screenshot_options.jpg
Views:	132
Size:	122.4 KB
ID:	157415  

Show Your Support

  • To receive notifications regarding updates -> Click to Mark as Installed.
  • This modification may not be copied, reproduced or published elsewhere without author's permission.
Similar Mod
Mod Developer Type Replies Last Post
Miscellaneous Hacks reCAPTCHA!vB - Stop spam. Read books. magnus vBulletin 3.6 Add-ons 188 10 Sep 2012 09:55
Miscellaneous Hacks reCAPTCHA!vB - MailHide : Tired of spam? Fight back. magnus vBulletin 3.6 Add-ons 7 20 Jul 2008 00:44

Comments
  #2  
Old 04 Jul 2019, 18:48
BetoPho BetoPho is offline
 
Join Date: Nov 2014
Issues
  • Being locked out from logging into Admincp/Modcp
    This issue is fixed since v1.1.0.

Last edited by BetoPho; 06 Jul 2019 at 17:47.
Reply With Quote
  #3  
Old 05 Jul 2019, 01:35
Gadget_Guy Gadget_Guy is offline
 
Join Date: Jun 2010
Thanks! Been waiting for this!

D
Reply With Quote
  #4  
Old 05 Jul 2019, 02:24
stangger5's Avatar
stangger5 stangger5 is offline
 
Join Date: Jan 2005
Thanks!!
__________________
vb ibProArcade: Download Game, Report Game, Daily Game Systems.
40,000+ Flash and HTML5 Games for ibp and v3 arcades, @ next-level-arcade.com
Reply With Quote
  #5  
Old 05 Jul 2019, 23:17
Gadget_Guy Gadget_Guy is offline
 
Join Date: Jun 2010
I am having an issue with this installed now.

My admincp login doesn't work anymore and I am locked out of my site.

Any idea how I can manually revert the plug-in?

D
Reply With Quote
  #6  
Old 06 Jul 2019, 00:31
BetoPho BetoPho is offline
 
Join Date: Nov 2014
Originally Posted by Gadget_Guy View Post
I am having an issue with this installed now.

My admincp login doesn't work anymore and I am locked out of my site.

Any idea how I can manually revert the plug-in?

D
You can edit config.php, add this line to globally disabling all plugins:


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

After that, login into your Admincp, please whitelist yourself by putting your user ID into the Excluded users field. Then remove that line again to re-enable the plugins.

Can you let me know on which steps you did that made you being locked out of the Admincp?
Reply With Quote
  #7  
Old 06 Jul 2019, 14:21
Gadget_Guy Gadget_Guy is offline
 
Join Date: Jun 2010
Thanks,

I was able to disable the plugins, disable, and got the site back to normal.

All I did was add the plug-in, then whenever I tried to log in to adminCP it wouldn't accept my password and it locked my account out from number of failed attempts.

No matter what I did, it wouldn't let me log in.


Question: What I am not understanding is how your implementation is intended to work. it doesn't add itself as a human verification for registration?

D
Reply With Quote
  #8  
Old 06 Jul 2019, 18:00
BetoPho BetoPho is offline
 
Join Date: Nov 2014
You can download the latest version, v1.1.0 and update the product, it will fix the issue.

Originally Posted by Gadget_Guy View Post
Question: What I am not understanding is how your implementation is intended to work. it doesn't add itself as a human verification for registration?
The main concept of this product is to prevent brute force password attack and any kind of non-human automatically trying to login via the HTML form.

Currently, vBulletin's Human Verification system only supports these type of actions: Register, Post, Search, Contact Us, and Recover Lost Password. So there won't be a way to hook Login action using vBulletin hook system.

For your question, here is the full process of how this product works:
  1. User logging in;
  2. The product captures reCaptcha check value from the login form and send to Google server;
  3. Google checks and return the 'score' value to the product;
  4. If the score is less than the defined 'human' score, we assume this is either not human or an unsafe traffic;
  5. Do the provided actions (eg. redirect them to another URL).

So when the user is treated like a bot, even if the username/password combination is correct, their login will be rejected and being sent to another URL (if you choose that), making the board a little bit safer.
Reply With Quote
  #9  
Old 08 Jul 2019, 01:15
Gadget_Guy Gadget_Guy is offline
 
Join Date: Jun 2010
Thanks for the explanation.

I like what you did.

I will try the updated version later this week when I can make sure I have time to test.

Much appreciated.

D
Reply With Quote
  #10  
Old 28 Jul 2019, 12:34
dknelson dknelson is offline
 
Join Date: Oct 2004
I just installed it this morning. Trying about everything I can. My forum has been running for well over 10 years and though I've had the occasional registration spam, it exploded about 2 3 days ago and I've had well over a thousand since them. Hope this helps.
Reply With Quote
  #11  
Old 28 Jul 2019, 13:12
dknelson dknelson is offline
 
Join Date: Oct 2004
I have this installed. I checked the code from the registration page and it is indeed present.

My question is how do I set the "Human Verification Settings" under Options in the control panel. I I select "ReCaptcha", it shows my KEYS but when I try to register, it says "Image not Selected Properly" or so something like that. Do I just turn off all verification under Options?
Reply With Quote
  #12  
Old 28 Jul 2019, 20:35
BetoPho BetoPho is offline
 
Join Date: Nov 2014
Originally Posted by dknelson View Post
I have this installed. I checked the code from the registration page and it is indeed present.

My question is how do I set the "Human Verification Settings" under Options in the control panel. I I select "ReCaptcha", it shows my KEYS but when I try to register, it says "Image not Selected Properly" or so something like that. Do I just turn off all verification under Options?
The product currently does not integrate with vBulletin native Human Verification system, as the system doesn't support Captcha check for login.

For now, the product is intended to prevent bot logins, which could partly solve the issues you're having, since it's no use for bots to just registered but unable to post. I will add integration support to vBulletin Human Verification system on another future version.
Reply With Quote
  #13  
Old 28 Jul 2019, 20:43
dknelson dknelson is offline
 
Join Date: Oct 2004
I understand. So should I turn off all the native Human Verification settings or does this not interfere with it?
Reply With Quote
  #14  
Old 28 Jul 2019, 21:20
BetoPho BetoPho is offline
 
Join Date: Nov 2014
You don't have to turn it off, this product will work safely together with vBulletin native verification system
Reply With Quote
  #15  
Old 28 Jul 2019, 22:10
dknelson dknelson is offline
 
Join Date: Oct 2004
Thanks. I have it installed but honestly don't know if it's doing anything or not. If it is supposed to stop spam registrations, it doesn't seem to help much. Will give it a few days.
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Mod Options

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 15:31.

Layout Options | Width: Wide Color: