Register Members List Search Today's Posts Mark Forums Read

Reply
 
Mod Options
Enhanced Captcha Image Verification - stop bots from signing up!! Details »
Enhanced Captcha Image Verification - stop bots from signing up!!
Mod Version: 1.11, by steadicamop (Member) steadicamop is offline
Developer Last Online: Dec 2014 I like it Show Printable Version Email this Page

vB Version: 3.6.8 Rating: (63 votes - 4.89 average) Installs: 871
Released: 26 Nov 2006 Last Update: 27 Nov 2006 Downloads: 4753
Not Supported Uses Plugins Template Edits Additional Files  

Title : Enhanced Captcha Image Verification

Version : 1.1

Coder : Andy Calderbank & Jason Williams

Purpose
: Add extra Image Verification to the registration process, using an alternative system to the Captcha system.

Why : It would appear that spammers can now "read" the Captcha codes and overcome the verification process.

How : This extra feature uses images which are harder for a spam program/bot to interpret than text characters. The user has a choice of 4 randomly displayed images, and the answer is given below. The user must click on that image to proceed, if the incorrect image is selected an error message is shown. The images are randomly shown (from however many are in the directory - you can have as many as you want, just has to be more that 4!) and are automatically created from the images/verification/ directory - all on the fly. Sample images are included with this release, but you can use your own - I recommend using 100 x 100 pixels, in .jpg format and naming the image with a meaningful title (ie A House.jpg) - the extension is stripped so only the filename itself is shown.

To further enhance security, the images are passed through a script which means that none of the images on the screen have file names - and cannot be associated to the question by title alone.

I have been testing this on my forum and have found it to be effective - I cannot guarantee that this will stop all spamming, but this relies more on human input than a computer "reading" the image.

Important : This has been tested on 3.6.2 - I cannot guarantee it will work on anything above, please test with caution - and as always BACKUP FIRST! This will not work on anything below 3.6.0.

Demo : http://www.steadiforum.com/register.php

I hope this is help to the VBulletin community as I know this is a growing problem. I don't fancy the thought of trawling through hundreds of new members deleting stupid usernames and spam posts.

Installation :
  1. Upload the verification/ directory to your images/ folder - make sure .htaccess and show.php are present - otherwise it won't work.
  2. Import Product - product-image_verification.xml

Upgrading :
  1. Upload show.php to the images/verification/ directory.
  2. Import Product - product-image_verification.xml - select Allow Overwrite to enable upgrade.

Requirements : GD Libraries installed

File uploads : 39 (including images)
Files to Import : 1
New Templates : 1
New Phrases : 5
Uses Hooks : 1
New Queries : 0

History :
v1.0 - Original release
v1.01 - Slight code change for forums in sub-directories (thanks go to Barakat for solving this one)
v1.1 - Issue resolved with Windows servers also template clean up for xhtml compliance
v1.11 - Added version check function, minor upgrade.

Done - if you like please click install! (and I won't ask for any donations as long as you click Nominate for MOTM!)

Don't forget you don't have to use the provided images - you can customise these to any you wish - I've used ones that are hopefully universal and everyone will recognise.

Download Now

Only licensed members can download files, Click Here for more information.

Screenshots

Click image for larger version

Name:	imageverification1.jpg
Views:	8582
Size:	36.6 KB
ID:	56611   Click image for larger version

Name:	imageverification2.jpg
Views:	4473
Size:	24.5 KB
ID:	56612  

Show Your Support

  • To receive notifications regarding updates -> Click to Mark as Installed.
  • This modification may not be copied, reproduced or published elsewhere without author's permission.
Similar Mod
Mod Developer Type Replies Last Post
Miscellaneous Hacks Enhanced Image Captcha - Stop bots from signing up! steadicamop vBulletin 3.7 Add-ons 165 21 May 2015 00:36

  #31  
Old 26 Nov 2006, 19:05
footose footose is offline
 
Join Date: Mar 2006
I have the same problem no images showing up.

http://www.generationdub.com/images.jpg

I know for a fact GD works
I set the PHP to execute

And also the header doesn't show up at the top when the image verification is on screen.

gd
GD Support enabled
GD Version bundled (2.0.28 compatible)
GIF Read Support enabled
GIF Create Support enabled
JPG Support enabled
PNG Support enabled
WBMP Support enabled
XBM Support enabled

Last edited by footose; 26 Nov 2006 at 19:10.
Reply With Quote
  #32  
Old 26 Nov 2006, 19:49
steadicamop's Avatar
steadicamop steadicamop is offline
 
Join Date: Jul 2004
Real name: Jason Williams
Right click on one of the crosses and click Properties - check that it shows in the right directory (ie forumroot/images/vertification).

If it still isn't working I will check further into this.
Reply With Quote
  #33  
Old 26 Nov 2006, 19:55
steadicamop's Avatar
steadicamop steadicamop is offline
 
Join Date: Jul 2004
Real name: Jason Williams
Originally Posted by cavyspirit View Post
Based on your research, what's your opinion of this hack: http://www.vbulletin.org/forum/showthread.php?t=124828 which asks an admin-defined, forum-specific random question? Which way is better to go. Can/should we install both?
I can't comment on this hack as I haven't installed or tested it - although I feel that a text based version could be defeated - this is why I created this one, using images that only real people can interpret.

There's definately no harm in having both - but I would advise caution - if you have too many verification systems people may not register for the lengthy process .... ? Just my opinion though.
Reply With Quote
  #34  
Old 26 Nov 2006, 20:58
PamelaE PamelaE is offline
 
Join Date: Feb 2005
Does this actually work ? Can someone suffering from these spambots recommend it ?

My forum is getting it ten fold, its not a matter of being just pain as some have stated, they are posting porn pics every 10 minutes on my forums.

Its getting to the point where the forums will have to shut down because its high profile and highly embaressing.

Speaking to people at Digitalspy.co.uk they don't seem to suffer from is using older version of Vbulletin and it never seems to happen on UBB.

Anyway I hope this solution works, its pain that users have an extra layer during the registration process.

Plus I wonder how accessible image verification is. I'm not sure what the laws are in the US but in the UK sites have to meet accessability criteria.

thanks
Reply With Quote
  #35  
Old 26 Nov 2006, 21:20
footose footose is offline
 
Join Date: Mar 2006
When I right click on it I get the following.

http://forums.generationdub.com/imag...ion/show.php?1

I'm assuming the "="'s sign is missing?
Reply With Quote
  #36  
Old 26 Nov 2006, 21:54
steadicamop's Avatar
steadicamop steadicamop is offline
 
Join Date: Jul 2004
Real name: Jason Williams
It's something I'm working on currently - it would appear it's not a GD issue - mine is installed correctly and working - I'm looking into why and a solution and will post an update if necessary.
Reply With Quote
  #37  
Old 26 Nov 2006, 22:20
steadicamop's Avatar
steadicamop steadicamop is offline
 
Join Date: Jul 2004
Real name: Jason Williams
Originally Posted by footose View Post
When I right click on it I get the following.

http://forums.generationdub.com/imag...ion/show.php?1

I'm assuming the "="'s sign is missing?
Issue fixed - it would appear windows servers didn't like the existing code - this has been changed and now works 100%, just re-upload show.php to the images/verification directory - make sure you overwrite the old file.

The package now contains this updated file.

Jason
Attached Files
File Type: php show.php (1.0 KB, 51 views)
Reply With Quote
  #38  
Old 26 Nov 2006, 23:34
steadicamop's Avatar
steadicamop steadicamop is offline
 
Join Date: Jul 2004
Real name: Jason Williams
Originally Posted by PamelaE View Post
Does this actually work ? Can someone suffering from these spambots recommend it ?

My forum is getting it ten fold, its not a matter of being just pain as some have stated, they are posting porn pics every 10 minutes on my forums.

Its getting to the point where the forums will have to shut down because its high profile and highly embaressing.

Speaking to people at Digitalspy.co.uk they don't seem to suffer from is using older version of Vbulletin and it never seems to happen on UBB.

Anyway I hope this solution works, its pain that users have an extra layer during the registration process.

Plus I wonder how accessible image verification is. I'm not sure what the laws are in the US but in the UK sites have to meet accessability criteria.

thanks
All I will say is give it a try - you've nothing to lose by trying. So far I have had NO spam bots sign up on my forum, I'm very tempted to disable it to see how many I get in 24 hours, then enable it and see how many more I get in a further 24 hours.

I don't see how a peice of software can read what an image is - yes it can understand text but how would it know that it's a picture of an aeroplane, or a car, or a person, or a banana .....
Reply With Quote
  #39  
Old 27 Nov 2006, 00:02
bongwater's Avatar
bongwater bongwater is offline
 
Join Date: Nov 2005
hey, just giving everybody a headz up. This hack works. I run a relatively large forum (60-80 new signups a day) but in the past 2 weeks I've been getting 120 signups daily. Thought it was a good thing but it was actually bad. I noticed the spamming for vioxx, viagra, and some webcam & porn sites on my site. Noticed the signups were all born March 28, 1983, and so I found a pattern, it was all bogus. Searched and installed this hack (im running 3.6.0) only one day now, and no spam-bots cracked through the image verification hack. It's still too early to tell , but I am pleased. Best hack i recently installed . Good job (clicked installed yesterday)

bongwater

Last edited by bongwater; 27 Nov 2006 at 00:08.
Reply With Quote
  #40  
Old 27 Nov 2006, 07:04
beishe8 beishe8 is offline
 
Join Date: Nov 2005
...make sure .htaccess and show.php are present - otherwise it won't work.
Sad... I cannot upload .htaccess (The dot is the problem with my host)
Reply With Quote
  #41  
Old 27 Nov 2006, 07:21
Robru's Avatar
Robru Robru is offline
 
Join Date: Aug 2005
Works like a charm with 3.6.4, thanks
Reply With Quote
  #42  
Old 27 Nov 2006, 08:23
tazping2000 tazping2000 is offline
 
Join Date: Apr 2006
Sometimes it asks to click a picture, but although the four pics are there, the one it asks you to click is not. Is this correct?

Apart from that it all works fine on 3.6.3 (Apache).

With regard to some folk getting a red 'X' instead of a pick, I got that first, and solved it by just closing the browser, and opening a new one.

Last edited by tazping2000; 27 Nov 2006 at 08:33.
Reply With Quote
  #43  
Old 27 Nov 2006, 08:34
steadicamop's Avatar
steadicamop steadicamop is offline
 
Join Date: Jul 2004
Real name: Jason Williams
Originally Posted by beishe8 View Post
Sad... I cannot upload .htaccess (The dot is the problem with my host)
It shouldn't be too much of an issue, don't worry about uploading it, create an empty index.html file and upload that, then change the code in show.php:

Change:

Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

To:

Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

You will also need to edit the plugin - don't worry it's quite easy:

AdminCP -> Plugins & Products -> Plugin Manager -> Extra user verification

Click edit and find:


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

and change to:


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Click save then check that the verification still works - this should not affect how the product works.

Then you should be good to go - all this does is stop the directory from being listed.

Jason
Reply With Quote
  #44  
Old 27 Nov 2006, 08:36
steadicamop's Avatar
steadicamop steadicamop is offline
 
Join Date: Jul 2004
Real name: Jason Williams
Originally Posted by tazping2000 View Post
Sometimes it asks to click a picture, but although the four pics are there, the one it asks you to click is not. Is this correct?

Apart from that it all works fine on 3.6.3 (Apache).

With regard to some folk getting a red 'X' instead of a pick, I got that first, and solved it by just closing the browser, and opening a new one.
Does the answer ever say "thumb"? If so then re-upload the product from the new package - if you use Windows to look inside the directory with the images in it creates a Thumbs.db file - a typo early on meant it was looking for thumbs.db and not Thumbs.db - version 1.1 has fixed this. If you still have problems PM me your forum link and I will take a look for you.

Jason
Reply With Quote
  #45  
Old 27 Nov 2006, 08:48
tazping2000 tazping2000 is offline
 
Join Date: Apr 2006
Does the answer ever say "thumb"?
No, I just installed 1.1 for the first time.

I'll have a fiddle later, need to go out now. Thanks.
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Mod Options

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 04:06.

Layout Options | Width: Wide Color: