shieldwolf wrote:Thank you for the info. I currently have a MOD that requires the user to enter what they see visually. It appears to not do the thing. I will keep your MOD under advisement.
Also, thank you for the hdiff file. It seems the long way, but the sure way.
Here's what I'm using to protect myself against a lot of the spammers out there. It's a very simplified version of one of my first PunBB mods, and it works well for me 
I've tried to comment the code as best I can to explain what it does...
Open register.php, and find on line 27:
require PUN_ROOT.'include/common.php';
Add after:
/***************************
START SPAM PROTECTION
***************************/
// Address of the blocklist server
$checkspam['blocklist'] = 'sbl-xbl.spamhaus.org';
// Build the url to check (reverse DNS query). If you want to test if it works on
// your server, replace the "get_remote_address()" part with the following: '127.0.0.2'
$checkspam['Reverse DNS'] = implode( '.', array_reverse( explode( '.', get_remote_address() ) ) ) . '.' . $checkspam['blocklist'];
// Do the actual lookup. If the users IP is listed in the blocklist, we will be given just an IP back from the queried server.
// If the user is *not* listed as a spammer, the result we get back from the server will be the same string as we sent.
if( $checkspam['Reverse DNS'] != gethostbyname($checkspam['Reverse DNS']) ) {
message('Unfortunately, it would appear that your current IP address is listed in one of the anti-spam databases we queried.
Because of this, you will not be able to register a new account at this point in time. If you believe this to
be a mistake, we urge you to read the FAQ over at <a href="http://www.spamhaus.org/faq/index.lasso">The Spamhaus Project</a>
for more details, including actions you can take to resolve this issue.',true);
}
/****************************
END OF SPAM PROTECTION
****************************/
Save & upload.
If you allow anonymous posts on your forum, if would be a good idea to do the same with post.php (line numbers should be the same).
EDIT: Changed blocklist to a slightly less strict one as it would appear some legitimate users, like quaker, encountered problems with the original one...and we don't want that, now do we 
