Help - Search - Members - Calendar
Full Version: Bots / Scripts Can Register on 2.3.5
Invision Power Services > Invision Power Services, Inc. > IPS Company Feedback > IP.Board
Pages: 1, 2, 3
SeLvesTr
Member Search Results: 1 result(s) found
QUOTE
JellyDreamas (85.140.222.225)
marina.wonders@gmail.com
Active Member (1 Posts)
Joined: 28-September 08


Post
QUOTE
Wher search-link on your site!, mfk
Well... good site... Wher search-link on your site.Can you help me?P.S. Anybody know about XRumer 5.0 program? Need a link to it...
henke37
Known bug, check the tracker.
SeLvesTr
QUOTE (henke37 @ Sep 30 2008, 01:01 AM) *
Known bug, check the tracker.
Ah, ok. I also saw 9000 hits on Google for the display name.
bılʞ
Link to bug report?
Lındsey
There's a big thread about this in the customer lounge.
Mr_V
QUOTE (Lındsey @ Sep 30 2008, 09:59 AM) *
There's a big thread about this in the customer lounge.

Could you please repeat where, exactly? When I click on your link, I get

CODE
Sorry, the link that brought you to this page seems to be out of date or broken.


And I have the same problem with bots as of last night.
Lındsey
You need to have a active support contract in order to access that topic..
Mr_V
Ah, OK. Thanks.
_ALwarrior_
Help, new bots incoming!!! There is a pubblic patch? I've perpetual licence but any assistance, please send me the patch. Thanks!
marklcfc
Really need a fix.

Have had at least 10 today, most registering from gmail so I've temporarily banned gmail accounts from registering.
Midnightmadness
I'm haveing that problem also I just got 12 spam bot registrations and 6 last night
Jυra
Ah damn. It's Invisionfree all over again (for me at least). ><
Kursplat
QUOTE (Lındsey @ Oct 1 2008, 04:58 AM) *
You need to have a active support contract in order to access that topic..


As far as I know, I have an active support contract and I get the same error message.

And I'm also getting hit by these bots.
Comtech
QUOTE (Kursplat @ Oct 1 2008, 08:25 AM) *
As far as I know, I have an active support contract and I get the same error message.


You are not currently showing as an active customer.
bfarber
If you require support, please submit a ticket.
The Old Man
I too had the the JellyDreamas bot register on the same date which has caused me to be on the look out for the bloody things. Nothing stays secure for tool long these days does it? I've since had a number of bots get through, so yes I too agree the anti-spam Captcha now needs updating. This is why I like the idea of Recaptcha, when it gets circumvented, they update it without you having to update your site and mess your skins up!

So for now, I've gone back to the tried and trusted Anti-Spam Question custom profile field technique, which worked 100% in the past for me. I tried to find it again in the articles but in the end I did it on my own using a similar tutorial in the resources section that requires numbers entering.

Anyway, navigate your way here...

Admin CP > Management > Users And Groups > Custom Profile Fields > Add New >

And enter the following information...

Field title > Anti-Spam Check Question

Description
> Is snow hot or cold? (Answer in lower case)

Field Type
> Text Input

Maximum Input > 100

Display order
> 1

Expected Input
> cold

Include on registration page? > Yes

Field must be completed?
> Yes

Can be edited by member? > No

Make private profile field? > Yes

Admin and moderator editable only> Yes

I also recommend testing it to make sure it works but I have had no issues with this at all. When I entered anything other than the required answer, the board knocked me back.
Μichael
QUOTE (The Old Man @ Oct 1 2008, 10:22 AM) *
This is why I like the idea of Recaptcha, when it gets circumvented, they update it without you having to update your site and mess your skins up!

I've not read anywhere on the reCAPTCHA site that they claim this. Being more secure than the standard CAPTCHA is not the goal of reCAPTCHA, assisting in digitizing books is.

EDIT: Of course I say that, then I go and find what you're referring to: http://recaptcha.net/security.html
Keith J. Kacin
You can always upload your own images and fonts to the "style_captcha" folder. That may help. original.gif
The Old Man
QUOTE (Μichael @ Oct 1 2008, 03:30 PM) *
I've not read anywhere on the reCAPTCHA site that they claim this. Being more secure than the standard CAPTCHA is not the goal of reCAPTCHA, assisting in digitizing books is.

EDIT: Of course I say that, then I go and find what you're referring to: http://recaptcha.net/security.html


Phew! You had me going there for a minute.

QUOTE (Keith J. Kacin @ Oct 1 2008, 03:32 PM) *
You can always upload your own images and fonts to the "style_captcha" folder. That may help. original.gif


Thanks Keith, but having never done that before, I'd probably make it easier for more bots to register than could before! rolleyes.gif
TCWT
Crap! I had 20 spambots register today, all inputted "google" on the country field. IPB needs a better captcha system. shocked.gif
Kursplat
QUOTE (Comtech @ Oct 1 2008, 07:43 AM) *
You are not currently showing as an active customer.


Oh, I see that now over on the left side under my name. Well, I am an active customer. In fact, I just bought a 2nd license last week. I wonder if I created my forum profile before I purchased IPB.... I guess I should get that fixed.
PKIDelirium
Ugh, tell me something I don't know. Huge spambot attack this morning.
Mesmer
http://forums.invisionpower.com/index.php?showtopic=277194

already three topics about the same problem..
Keith J. Kacin
We are working on some captcha enhancements. News to come shortly.
Lındsey
QUOTE (Keith J. Kacin @ Oct 1 2008, 01:08 PM) *
We are working on some captcha enhancements. News to come shortly.


Cool.
Soldf
We also need this patch urgently

50 fake regs so far today.
Also they accepted the validation emails.
Luckily we also manually process each application.
Lındsey
Patch is coming. IPS NEWS is logged on wink.gif
ΑndyF
Anyone else tried Jason's idea > http://forums.invisionpower.com/index.php?showtopic=277065 original.gif
Midnightmadness
My board is patched up! Thank you!
Tarun
Very swift action, thank you so much.
emm1
Is it possible to do a manual edit update to that file?
bfarber
Line 522 (approx) change

CODE
$reg_code = strtoupper( substr( $regid, 0, 6 ) );


to

CODE
$reg_code = strtoupper( substr( md5( mt_rand() ), 0, 6 ) );
emm1
Thanks! Saved me alot of edits. original.gif
tsutton
Thank you, have patched up. Now waiting to see if it works or not...
.Logan
In 3.0 would it be worth incorporating "reCaptcha"? I've heard good things about it, never used it myself.
media
I got 1300 new account today it was a spam bot and i have spent 6 hours or more to delete...
I finally patch the system and stop the suckkerrsssssss... wassat.gif sleeping.gif thumbsup.gif
Amy T
Interesting I do not get any spam bots until after a fix for it was posted. First 1 in over a year.
Tedy
Thanks for the quick patch. About ten users registered today on my board and posted p0rn links. Most of them had IP in the range 200.63.42.*, it may help to find these users...
Mesmer
QUOTE (Amy T @ Oct 1 2008, 09:29 PM) *
Interesting I do not get any spam bots until after a fix for it was posted. First 1 in over a year.


and did you get this one after you aplied the fix?
Kotonoha
QUOTE (.Logan @ Oct 1 2008, 07:16 PM) *
In 3.0 would it be worth incorporating "reCaptcha"? I've heard good things about it, never used it myself.


Whether it's worth it or not, it's already been confimed. wink.gif
marklcfc
I installed the patch but still registering

HailMaryPC
IP: 195.60.174.21
annetzdark@tmail.org Registering (User validation)
Today, 08:48 PM
0 days and 0 hours ago
0 Today, 08:48 PM
Mesmer
QUOTE (marklcfc @ Oct 1 2008, 09:51 PM) *
I installed the patch but still registering


did you also upload the new backgrounds + fonts and removed the old ones?
RainbowViper
Remove the old ones?

Nothing in the announcement mentioned removing the old ones. But I sure will if that improves my chances to catch a spammer.... wink.gif
marklcfc
QUOTE (Mesmer @ Oct 1 2008, 08:52 PM) *
did you also upload the new backgrounds + fonts and removed the old ones?

No it said they were optional
Amy T
QUOTE (Mesmer @ Oct 1 2008, 02:49 PM) *
and did you get this one after you aplied the fix?


Before.
It was just interesting few minutes after the patch was announced I get my first bot sign up in over a year.
I did go ahead and patch the system up.
Keith J. Kacin
crying.gif
Mesmer
QUOTE (Keith J. Kacin @ Oct 1 2008, 10:17 PM) *
crying.gif


something wrong?
RainbowViper
I removed the old backgrounds and fonts. The new backgrounds were obviously different than the old ones, but the new fonts all looked very much like the old ones.

Are the new fonts supposed to look markedly different?

Jυra
QUOTE (Mesmer @ Oct 1 2008, 09:19 PM) *
something wrong?


A lot of IPS staff are getting yelled at and ripped into. Maybe.

Can someone confirm that adding a q and a thing to registration stops them?
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2008 Invision Power Services, Inc.