Topic: PunBB 1.2 : Major spam issue

My forum is being massively spammed by porno-bots despite the email verification.

Would it be possible (as many other forums do that) to check registration with a randomly generated text image that human user has to read and confirm ?

Is it planned for v1.3 ?

Thanks for this excellent work !

Re: PunBB 1.2 : Major spam issue

Kyle_Katarn wrote:

Would it be possible (as many other forums do that) to check registration with a randomly generated text image that human user has to read and confirm ?
Thanks for this excellent work !

Well, you should try searching first tongue

Like here: http://www.punres.org/viewtopic.php?id=281

I have that one and a random question coming up when they register

3

Re: PunBB 1.2 : Major spam issue

I've edited the topic description because spam is not really a security issue, its a nuisance but it won't result in you being hacked.

The trouble with randomly generated images is that some human users can't read them because of some level of visual impairment. In fact, some can't be read even by human users with perfectly good eyesight.

Re: PunBB 1.2 : Major spam issue

I find CAPTCHAs to be a nuisance, so I created my own human verification, http://funnel.ath.cx:1420/spam/. It verifies with a simple mathematical question such as

What is two plus eight;
Which is larger, three or seven;
What is eight times ten;
Which is smaller, ten or five;
and what is eight minus five.

You can also easily edit the script's language by changing lines 25, 26, 27 and 28 with your preffered language's words, too. Minimal PHP knowledge is required.

5

Re: PunBB 1.2 : Major spam issue

Paul wrote:

I've edited the topic description because spam is not really a security issue, its a nuisance but it won't result in you being hacked.

I cannot agree with that definition: security is not only avoiding hacking, no.
Trying to avoid porn spams with photos is trying to increase security level, at least for our children.
wikipedia, wiktionnary

Re: PunBB 1.2 : Major spam issue

Security is the condition of being protected against danger or loss

You are not in ANY danger when a spambot posts on your forum.

The only thing you can lose is possible forum members,

But There are mods you can install (lots) that will help remove the spam bots.
Featues will be installed in 1.3 as defult to help agains this, but if you want, you can install more sucerity features to protect your forum

Sorry. Unactive due to personal life.

7

Re: PunBB 1.2 : Major spam issue

matt1298 wrote:

Security is the condition of being protected against danger or loss

You are not in ANY danger when a spambot posts on your forum.
The only thing you can lose is possible forum members,

What is your definition of the word 'danger'? hmm Sorry, bad definition.

But There are mods you can install (lots) that will help remove the spam bots.

It is another subject!

8

Re: PunBB 1.2 : Major spam issue

There is only one good solution to spam registrations, and it is this one

100% success rate for me so far. Wonderfully easy to implement too.

Landen Meadows Residents Forum - http://www.landenmeadows.net

Re: PunBB 1.2 : Major spam issue

My deffininion of danger in this case is losing the forum, someone hacking into it and taking the admin account.

i cant see any danger of spam bots, yeah they are annoying, and as they post links, you can just disable links in posts and if you are under attack from spam bots (in my case) my admins and mods would see this due to there activity and deleate it.

Sorry. Unactive due to personal life.

10

Re: PunBB 1.2 : Major spam issue

This is getting a bit off topic. To clarify; I changed the description because most people seeing a topic entitled "Majour security issue" would assume it was some kind of exploit being reported and not a topic about spam prevention.

11

Re: PunBB 1.2 : Major spam issue

axa wrote:

There is only one good solution to spam registrations, and it is this one

100% success rate for me so far. Wonderfully easy to implement too.

There's an updated multiple question/answer version of that mod.

http://punbb.org/forums/viewtopic.php?id=16076

12

Re: PunBB 1.2 : Major spam issue

matt1298 wrote:

My defininion of danger in this case is losing the forum, someone hacking into it and taking the admin account. i cant see any danger of spam bots, yeah they are annoying, and as they post links, you can just disable links in posts and if you are under attack from spam bots (in my case) my admins and mods would see this due to there activity and deleate it.

I think that the admin of this DH site should not agree with you... I'm sorry, but spam can be a true plague.

Paul wrote:

This is getting a bit off topic. To clarify; I changed the description because most people seeing a topic entitled "Majour security issue" would assume it was some kind of exploit being reported and not a topic about spam prevention.

I agree with that. It was just your definition of security that seems not compliant to me smile

Re: PunBB 1.2 : Major spam issue

A thing...

Of course this isn't a regular computer security breach in the developer's usual meaning, nor the thread's subject was appropriate.

But there's some sense to put security breaches and spam on a not-so-distant level of each other. Not on the same level, because spam is more limited, of course. But still. The damage is not just some time to delete the posts, as said above hate messages or some porn for children can do some serious damages too. On some countries, an admin can even be liable if he doesn't take reasonable steps to prevent it to happen.

I do hope 1.3 has all the appropriate hooks to do extended anti spam tools (to prevent it, detect it, and repair it) and at least at the beginning one semi (or fully) official anti spam plugin.