Translations of this page: en bg cs de fi fr hu it ja pl ru tr zh

This is an old revision of the document!


Antispam (pun_admin_antispam)

PunBB 1.3 official extension

  • Status: Under development
  • Current version: 0.1

General idea

Protect the forum using CAPTCA from

  • Bruteforcing the passwords
  • Spam in guest posts
  • Bot registration

Specification

  • Put CAPTCHA at the Register, Guest post, Password restore and Login pages.
  • Add options to Administration ⇒ Settings ⇒ Features
    • Use CAPTCHA on register page (checkbox, checked by default)
    • Use CAPTCHA on guest posting (checkbox, checked by default)
    • Use CAPTCHA after 5 login failures (checkbox, checked by default)
    • Use CAPTCHA on password restore form (checkbox, checked by default)
  • Add database table <db_prefix>_config
    • o_pun_antispam_captcha_register = 1
    • o_pun_antispam_captcha_guestpost = 1
    • o_pun_antispam_captcha_login = 1
    • o_pun_antispam_captcha_restorepass = 1
  • CAPTCHA implementation
    • Use sessions to store the code.
    • Delay before image output (1 s).
    • When the test is passed by the user, do not ask again it again on other pages for some time (or until user does something suspicious).
    • TODO: Describe how the code will be modified against bots.
    • IDEA: Use the words list? E.g. “punbb”, “forum”, “guest”, “user” and s.o.
    • IDEA: Use the empty invisible field with title like “do not fill this”. If filled, this is a bot.
    • IDEA: Use math captcha.

Personal Tools