Register Members List Search Today's Posts Mark Forums Read

Reply
 
Mod Options
Spambot Stopper - Prevent Spambots from Registering Details »
Spambot Stopper - Prevent Spambots from Registering
Mod Version: 1.1.1, by kh99 (Senior Member) kh99 is offline
Developer Last Online: Nov 2017 I like it Show Printable Version Email this Page

vB Version: 4.x.x Rating: (53 votes - 4.92 average) Installs: 425
Released: 01 Feb 2013 Last Update: 16 Feb 2013 Downloads: 1906
Not Supported Uses Plugins Auto-Template Re-usable Code Translations  

What is it?
----------------------------
This mod rejects registrations where the form is filled out in less than a minimum time. You can configure one of the following actions to be taken when an automated registration is detected:

- Show a "No Permissions" page
- Display the "Successful Registration" message but without creating an account
- Redirect the user to any URL you choose
- Reload the registration page with an error message of your choosing

You can also provide a list of email addresses to be notified each time a registration is blocked.

Added for version 1.1.1: Time delay enforcer, maximum time option, time limits to cut down on email notifications, posting to a thread.

In the future, I'd like to add some simple logging and statistics, and a summary type of email notification (because people seem to quickly get tired of the single emails).

Note: I coded this myself from scratch, but I would like to acknowledge a couple of previous mods that used this same idea, by users Calorie and noppid, and maybe others. In any case, I believe this one adds some features that the others don't have.

Other advantages: no ads or links, no abuse of update notifications, no disappearing features, no threats to delete the mod (it will never be deleted, at least by me). Also, translations are allowed.

Installation:
----------------------------
1) If you have "Is Bot", "Stop the Registration Bots", "Spammers Suck!", or another mod that works on registration time, note any admincp settings for that mod then uninstall it.

2) Import the product XML file from the Product Manager.

3) Go to Settings > Options > Spambot Stopper Options and configure the desired settings.

4) IMPORTANT: try to register a new user to make sure that there are no problems with humans registering. If you want, you can also temporarily set the minimum time to a higher value (like 60 seconds) and test to see if the spammer rejection is working.



History:
----------------------------
1.1.1 (Feb 16, 2013)
  • Added timer for enforcing minimum time
  • Added maximum registration time limit
  • Added time limits for email notifications
  • Added posting notificatiosn to a thread

1.0.1 (Feb 01, 2013)
  • Fixed bug
  • Added check for fake timestamps

1.0 (Jan 31, 2013)
  • Initial Release

Download Now

Only licensed members can download files, Click Here for more information.

Screenshots

Click image for larger version

Name:	sg1.jpg
Views:	2489
Size:	118.3 KB
ID:	143558  

Show Your Support

  • To receive notifications regarding updates -> Click to Mark as Installed.
  • If you like this modification support the author by donating.
  • This modification may not be copied, reproduced or published elsewhere without author's permission.
  #61  
Old 06 Feb 2013, 00:38
djbaxter djbaxter is offline
 
Join Date: Aug 2006
Location: Ottawa, Canada
Don't forget also to ban certain email addresses at AdminCP >> Settings >> Options >> User Banning Options >> Banned Email Addresses.

I learned of a new (to me) and very dubious "anonymous" email service today and added it to my list: mailnesia.com

That website describes its service as follows:

Automatically clicks registration links
Disposable email at its best. Whenever you need to register on a site and you don’t want to give out your primary email address, use any @mailnesia.com address instead. Email verification links are visited automatically in the background to validate the account instantly!
My current vBulletin banned email addresses list looks like this:


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Reply With Quote
  #62  
Old 06 Feb 2013, 19:36
Lionel Lionel is offline
 
Join Date: Dec 2001
Real name: Lionel
@djbaxter Yes you can totally block China. You don't do it with IP range. You do it with TLD
That was so funny last night. As I was watching Black Hack Down, I was looking at my who's online and all those red dots of no permission kept on popping up as machine guns was erupting on TV
At one point I was tempted to redirect to China military site. Let them crack down on their people
Reply With Quote
  #63  
Old 06 Feb 2013, 20:16
DAMINK DAMINK is offline
 
Join Date: Jun 2010
Originally Posted by kh99 View Post
Looks good - but now I feel like I'm a competitor.

As for the ip banning, I was considering that, but the problem I have is that I feel if ips are going to be banned automatically, you also need a way to monitor the process and search and remove ips, as well as a way for someone to contact you if they get banned by mistake, and then it turns in to a major thing. What I was thinking of doing in the next release (some time this week) is to use the login "strikes" system so that at least it wouldn't be possible for anyone to try too often. I'm also going to try to include a summary email option instead of one per registration.
As it currently stands.
I redirect anyone that trips this mod to a bot trap which writes to the .htaccess file.
Now that does give an option to be unbanned.
This is not my code by any means. Just free stuff on the net.

Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Why couldnt this mod have this basic idea implemented into it?
That would fix the problem if ip addresses changing, old bans etc.
I mean if it was to be coded to suit this mod then you would add a "melt ip after X" option and perhaps a way to view the bans.

Here is how it spits it out for me.

http://www.ftw.net.au/blacklist.dat

Like i said its really simple yet it stops them in there tracks.
__________________
FTW Forum <- Home of the damned!
Reply With Quote
  #64  
Old 06 Feb 2013, 21:29
kh99 kh99 is offline
 
Join Date: Aug 2009
Real name: Kevin
Thanks again everyone. I'll consider putting something like that in. I'm working on it here and there when I get a chance, but I hope ot have another version out soon.
Reply With Quote
  #65  
Old 16 Feb 2013, 16:23
kh99 kh99 is offline
 
Join Date: Aug 2009
Real name: Kevin
I'm working on a version with more features, but it's going to take a while so I thought I'd release an update with the features I've had ready for a couple weeks now. Also, some people may be happy with the basic functions, so I'm thinking of maintaining this one as a "light" version.

There are no bug fixes so there's no pressing reason to update, but I've added the following:

- Timer for enforcing the minimum time for legitimate registrations
- Optional maximum time limit
- Time limits for filtering email notifications
- Option to post notifications to a thread

The posting to a thread feature is simple and requires an existing thread, but I'll be improving it in future versions.

Last edited by kh99; 16 Feb 2013 at 16:45. Reason: typo
Reply With Quote
  #66  
Old 16 Feb 2013, 16:33
In Omnibus's Avatar
In Omnibus In Omnibus is offline
 
Join Date: Apr 2010
Real name: Kris
Thank You
Reply With Quote
  #67  
Old 16 Feb 2013, 17:59
kh99 kh99 is offline
 
Join Date: Aug 2009
Real name: Kevin
Ack - 1.1.0 had a small problem with posting notifications to threads (if you use that option), so I fixed it and called it 1.1.1 (this is only a problem if you downloaded v1.1.0, within the past couple hours or so, but if you did you should update).

Sorry for any inconvenience.

Last edited by kh99; 16 Feb 2013 at 18:14.
Reply With Quote
  #68  
Old 17 Feb 2013, 04:18
puertoblack2003's Avatar
puertoblack2003 puertoblack2003 is offline
 
Join Date: Aug 2005
thank you for the update...
__________________
Android Custom Creations
Reply With Quote
  #69  
Old 17 Feb 2013, 04:53
smirkley smirkley is offline
 
Join Date: Apr 2008
Originally Posted by kh99 View Post
I'm working on a version with more features, ... so I'm thinking of maintaining this one as a "light" version.
Whoohoo!!,... not surprised here.
Reply With Quote
  #70  
Old 26 Feb 2013, 02:39
Bluemax712 Bluemax712 is offline
 
Join Date: Oct 2010
kh99,
Can you explain the setting for Force Wait for Minimum Time
How does it also not force the spambots to wait for same amount of time?
Reply With Quote
  #71  
Old 26 Feb 2013, 02:42
kh99 kh99 is offline
 
Join Date: Aug 2009
Real name: Kevin
Originally Posted by apsrfvb4 View Post
kh99,
Can you explain the setting for Force Wait for Minimum Time
How does it also not force the spambots to wait for same amount of time?
It uses javascript to prevent the "Complete Registration" button (the submit button) from being pressed until the minimum time has passed. But a spambot doesn't press the button to submit the form (and probably just ignores the javascript) , so it doesn't have to wait.

Last edited by kh99; 26 Feb 2013 at 02:47.
Reply With Quote
  #72  
Old 26 Feb 2013, 02:57
Bluemax712 Bluemax712 is offline
 
Join Date: Oct 2010
Originally Posted by kh99 View Post
It uses javascript to prevent the "Complete Registration" button (the submit button) from being pressed until the minimum time has passed. But a spambot doesn't press the button to submit the form (and probably just ignores the javascript) , so it doesn't have to wait.
Thanks for the quick reply kh99. Can I ask how do they submit the form then ..just curious.
Reply With Quote
  #73  
Old 26 Feb 2013, 03:06
kh99 kh99 is offline
 
Join Date: Aug 2009
Real name: Kevin
Originally Posted by apsrfvb4 View Post
Thanks for the quick reply kh99. Can I ask how do they submit the form then ..just curious.
Well, I'm not any kind of expert on spamming software, but anyway: your browser is just a program on your computer that displays web pages. If you're looking at your forum's registration page, for instance, and you press submit, the browser takes all the info you entered in the form and packs it up into an http request, connects to your server, and sends it. But any program can connect to your server and send a request, and it's actually pretty easy to write a program that can send a request that looks exactly the same as one coming from your browser. And if you write your own program you don't have to pay any attention to the submit button or to javascript that enables or disables it, you just send your "fake" request whenever you want.

Anyway, I'm not that great at explaining things like this - I hope it makes some sense.
Reply With Quote
  #74  
Old 26 Feb 2013, 03:08
Bluemax712 Bluemax712 is offline
 
Join Date: Oct 2010
Yes that helps thanks.

One last question I promise
Limit Notifications By Registration Time

If I set the range to be 0-60 or 1-60
Would I be able to get a message for both successful and denied registrations
Reply With Quote
  #75  
Old 26 Feb 2013, 03:10
kh99 kh99 is offline
 
Join Date: Aug 2009
Real name: Kevin
Originally Posted by apsrfvb4 View Post
One last question I promise
Limit Notifications By Registration Time

If I set the range to be 0-60 or 1-60
Would I be able to get a message for both successful and denied registrations

Yes, if you set the high end of the notification range to be more than the minimum time, you'll get notifications of successful registrations.
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Mod Options

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


New To Site? Need Help?

All times are GMT. The time now is 03:28.

Layout Options | Width: Wide Color: