826

(39 replies, posted in General discussion)

Connorhd wrote:

Errm, how do you know you have no viruses? tongue

Well, every now and then, I run an online scanner just to be sure.

827

(16 replies, posted in PunBB 1.2 show off)

That's probably a good idea.

828

(7 replies, posted in PunBB 1.2 troubleshooting)

Run the following query and see if any of the e-mail addresses look odd:

SELECT u.id, u.email FROM users u INNER JOIN subscriptions s ON s.user_id = u.id WHERE s.topic_id = 331;

829

(16 replies, posted in PunBB 1.2 show off)

Haha, that's awesome. I remember Tucows was one of those websites I used to visit when I first started using the Internet.

830

(7 replies, posted in PunBB 1.2 troubleshooting)

For some reason, one of the users that subscribe to that topic has an e-mail address that is rejected by your mail server. What's the ID of the topic?

831

(39 replies, posted in General discussion)

No antivirus here. I got a virus back in 98 or something (a boot sector virus), but that's it. No viruses, worms or malware. My recipe is:

1. Enable automatic updates.
2. Make sure Windows built-in firewall is enabled.
3. Avoid Internet Explorer and Outlook [Express].
4. Avoid [insert malware infested P2P app here].
5. Don't run .exe/.pif/.bat/.cmd/etc files you get as attachments from people you don't know smile

Voila!

832

(3 replies, posted in PunBB 1.2 discussion)

Cool. I'll put it on the list.

833

(71 replies, posted in News)

Squeg wrote:

I can imagine several legitimage uses that would be severly hindered by this simple anti-flooding technique. Large groups of users sharing an IP is one of them.  My message board is used for an RPG and users often have a different account for each role play character.  It is not uncommon for a user to set up 2 or 3 accounts at once.

Making the timeout configurable is one step towards making this more flexible.  Another would be to add a configurable "number of acceptable registrations within a given time" variable.  In other words, you might want to only allow 1 registration per IP every 30 minutes.  Or you might want to allow 4 registrations per IP every 60 minutes.

By allowing for a small number of registrations to happen before the user is affected by the timeout period, you greatly diminish the chances of legitimate users being affected.  But you still prevent the DDOS type registration attacks from being effective.

I agree. I will look into different methods of solving the problem. What you suggest would not be an option for 1.2.* though as it would require a lot more code and perhaps even some database schema changes.

I believe this is already on my todo list for 1.3.

835

(3 replies, posted in PunBB 1.2 discussion)

I remember someone having the same problem. The cause of the problem was the date/time on the server.

No, it only prevents users from signing up with hotmail accounts. It won't affect those who have already registered.

Thanks for the detailed report Roy. Much appreciated.

838

(4 replies, posted in PunBB 1.2 discussion)

Try something like .postleft { text-align: center } in your stylesheets.

839

(3 replies, posted in Feature requests)

There's a mod at punres.org and there will be an extension when 1.3 comes out.

Can't you just ban those domains? Go to admin/bans and add a new ban. Then enter e.g. hotmail.com in the field "E-mail/domain".

Edit: Don't forget to go to admin/permissions and set "Allow banned e-mail addresses" to no.

841

(3 replies, posted in PunBB 1.2 discussion)

Don't use PunBB? *rimshot*

842

(71 replies, posted in News)

creaturecorp wrote:

Probably irrelevant, but you spelled malicious wrong in the announcement. wink

Thanks. Fixed.

843

(13 replies, posted in PunBB 1.2 troubleshooting)

Smartys is right. That's not a PunBB query. Must be a mod you've installed.

And yes, the reason it's slow is probably because you're joining two big tables on a varchar column.

Yes, they all use pun_mail().

845

(2 replies, posted in PunBB 1.2 troubleshooting)

I plan on dealing with this in 1.3. For now, maybe you can just change your e-mail address.

846

(13 replies, posted in PunBB 1.2 troubleshooting)

Try renaming the script extern.php to something else and see if the load drops.

Thing is, REMOTE_ADDR is less reliable in that it can be assigned to several users, but it's more reliable in that it's a lot harder to spoof.

I think this is your host messing with the From header of the e-mails. What host is it?

849

(71 replies, posted in News)

Yes, I will move the message out into the language files for 1.3.

850

(71 replies, posted in News)

zaher: Are you saying ALL users from syria use the same IP?

Jansson: Yes, but I didn't want to fiddle with that now. It would just confuse people.