[BetoPho]

Issues

• Being locked out from logging into Admincp/Modcp
  This issue is fixed since v1.1.0.

[Gadget_Guy]

Thanks! Been waiting for this!

D

[stangger5]

Thanks!!

[Gadget_Guy]

I am having an issue with this installed now.

My admincp login doesn't work anymore and I am locked out of my site.

Any idea how I can manually revert the plug-in?

D

[BetoPho]

Originally Posted by Gadget_Guy

I am having an issue with this installed now.

My admincp login doesn't work anymore and I am locked out of my site.

Any idea how I can manually revert the plug-in?

D

You can edit config.php, add this line to globally disabling all plugins:

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

After that, login into your Admincp, please whitelist yourself by putting your user ID into the Excluded users field. Then remove that line again to re-enable the plugins.

Can you let me know on which steps you did that made you being locked out of the Admincp?

[Gadget_Guy]

Thanks,

I was able to disable the plugins, disable, and got the site back to normal.

All I did was add the plug-in, then whenever I tried to log in to adminCP it wouldn't accept my password and it locked my account out from number of failed attempts.

No matter what I did, it wouldn't let me log in.


Question: What I am not understanding is how your implementation is intended to work. it doesn't add itself as a human verification for registration?

D

[BetoPho]

You can download the latest version, v1.1.0 and update the product, it will fix the issue.

Originally Posted by Gadget_Guy

Question: What I am not understanding is how your implementation is intended to work. it doesn't add itself as a human verification for registration?

The main concept of this product is to prevent brute force password attack and any kind of non-human automatically trying to login via the HTML form.

Currently, vBulletin's Human Verification system only supports these type of actions: Register, Post, Search, Contact Us, and Recover Lost Password. So there won't be a way to hook Login action using vBulletin hook system.

For your question, here is the full process of how this product works:

1. User logging in;
2. The product captures reCaptcha check value from the login form and send to Google server;
3. Google checks and return the 'score' value to the product;
4. If the score is less than the defined 'human' score, we assume this is either not human or an unsafe traffic;
5. Do the provided actions (eg. redirect them to another URL).

So when the user is treated like a bot, even if the username/password combination is correct, their login will be rejected and being sent to another URL (if you choose that), making the board a little bit safer.

[Gadget_Guy]

Thanks for the explanation.

I like what you did.

I will try the updated version later this week when I can make sure I have time to test.

Much appreciated.

D

[dknelson]

I just installed it this morning. Trying about everything I can. My forum has been running for well over 10 years and though I've had the occasional registration spam, it exploded about 2 3 days ago and I've had well over a thousand since them. Hope this helps.

[dknelson]

I have this installed. I checked the code from the registration page and it is indeed present.

My question is how do I set the "Human Verification Settings" under Options in the control panel. I I select "ReCaptcha", it shows my KEYS but when I try to register, it says "Image not Selected Properly" or so something like that. Do I just turn off all verification under Options?

[BetoPho]

Originally Posted by dknelson

I have this installed. I checked the code from the registration page and it is indeed present.

My question is how do I set the "Human Verification Settings" under Options in the control panel. I I select "ReCaptcha", it shows my KEYS but when I try to register, it says "Image not Selected Properly" or so something like that. Do I just turn off all verification under Options?

The product currently does not integrate with vBulletin native Human Verification system, as the system doesn't support Captcha check for login.

For now, the product is intended to prevent bot logins, which could partly solve the issues you're having, since it's no use for bots to just registered but unable to post. I will add integration support to vBulletin Human Verification system on another future version.

[dknelson]

I understand. So should I turn off all the native Human Verification settings or does this not interfere with it?

[BetoPho]

You don't have to turn it off, this product will work safely together with vBulletin native verification system

[dknelson]

Thanks. I have it installed but honestly don't know if it's doing anything or not. If it is supposed to stop spam registrations, it doesn't seem to help much. Will give it a few days.