[Extension release] StopForumSpam.com Antispam (Page 1 of 2)

I'm very happy with it.

Also: the more users start installing it, and giving feedback to SFS about which spammers are still getting though, the better the hit ratio will be.

So it's important that a few other people start adding IPs, emails of spammers to the SFS database (the sooner we get a one-click submit button in punapproval or a improved extension to do that, the smaller the chances any spammers will get though)

btw:  Would it make sense, especially if someone has a large userbase already, with many spammer registrations, to run the same query on login.php? Then if there's a match DELETE the profile (or at least signal it).

somewhere here:

// Login
if (isset($_POST['form_sent']) && empty($action))
{
    $form_username = forum_trim($_POST['req_username']);
    $form_password = forum_trim($_POST['req_password']);
    $save_pass = isset($_POST['save_pass']);

    ($hook = get_hook('li_login_form_submitted')) ? eval($hook) : null;

    // Get user info matching login attempt
    $query = array(
        'SELECT'    => 'u.id, u.group_id, u.password, u.salt',
        'FROM'        => 'users AS u'
    );

    if ($db_type == 'mysql' || $db_type == 'mysqli')
        $query['WHERE'] = 'username=\''.$forum_db->escape($form_username).'\'';
    else
        $query['WHERE'] = 'LOWER(username)=LOWER(\''.$forum_db->escape($form_username).'\')';

    ($hook = get_hook('li_login_qr_get_login_data')) ? eval($hook) : null;
    $result = $forum_db->query_build($query) or error(__FILE__, __LINE__);
    list($user_id, $group_id, $db_password_hash, $salt) = $forum_db->fetch_row($result);

    $authorized = false;
    if (!empty($db_password_hash))

I think it's only interesting (potentially)  IF someone already has 3'000-10'000 users and just wants to make sure that the users logging in aren't just changing backlinks/signatures etc. but....

That's basically the endresult I was thinking of (a bit naively)

Surprised by that. Is it TOR users? Because most registrations I see by bots are from India, Pakistan, USA, Philippines, China...

Good stuff! My user lists are too clean though No records
Why don't you publish it under 1.3 Additions aswell seperately. It's a good project!

@ Slavok or alexp
you might want to try it on this site? Or give Grez access to test it?
also any chance of installing the stopforumspam extension here for further testing and improvement?

• The best would be if that can be set my admin; "Minimum No Of Sightings Required To Block"

I'd want 1. Why?
Of 82 registrations blocked by this extension on a testsite last 7 days, 12 were 5 or less sightings. But the sightings were mostly fresh for the <=5. So I'd personally prefer to still not see those.

I think this is good , as an option IF someone wants to double check.

Great extension, however it doesn't allow registration to work (you get an error clicking on "Register"). Disabling the extension makes it all work again.

Do you want me to enable debugging info and find out what happened?

@TomeOne: Before installing extension change line 35, at manifest.xml from this

if (!$forum_db->table_exists('pun_pm_messages'))

to this

if (!$forum_db->table_exists('stopforumspam'))

I know about this error (and I have fixed it at home), but I've got problems with internet connection so I can't upload it 

There isn't any settings page.
It's only possible to go directly into phpmyadmin for example and see what IPs are being banned.

If it's installed it's "on".

So I guess you won't need the debug info unless 1.1.2 still gives me grief?

Edit: which it hasn't, thanks Grez!

@KeyDog Actually there's easier (and better) way to do that with forum's function, but well, for this I need API key, so it means I have to programme something for Administrators to insert the key to forum's config and they would have to register to SFS.com and generate their API key... and frankly - I don't have time/mood for doing that

But, well if someone's little bit bored, feel free to programme that - I think you could for example use hook aba_add_edit_ban_qr_add_ban and add IP to SFS database (function get_remote_file() should do the trick), if the $ban_message is "spambot" or something like that.

This morning I had 2 of 4 registrations pending in pun_approval that were already in stopforumspam database - BUT only since a couple of hours.... however both IPs had been reported 8 (!) times in the last 6 hours... starting 5.x hours before I checked.... (I think they're taking advantage of night time reduced moderator activity)

So the question is: wouldn't it make sense to query the sfs-db every 3 hours for registrations completed in last 3 hours and delete any user whose IP was found?

That shouldn't put unnecessary load on the sfs-db I assume...

Edit:
I was told that instead of querying the sfs db one could download the list mentioned below.. if we had some script that gets it every 4-5 hours (wget and unzip) - that would permit a query of recent registrations (daily, weekly) without sending lots of queries and also faster as serverside

Updated once per hour
listed_ip_1.zip - Last 24 hours, limited to 6 downloads per IP per day, last update 05-Oct 06:00 EDT

Now the question is; can this be implemented in  "deluxe" extension - or does such a script need to be loaded seperately?

It's possible that SFS servers were down, when the user posted the message (extension waits max 10 seconds for SFS servers to respond)