Hey guys,

while i had several problems with spam I read through much of the forum. As I could read development is stale and the team invited others to step up as devs. From my own experience, the way this has been done is not sufficient. I mean - you are just announcing "Please join". but what? How? what are my requirements?

What I mean is, there is need of a "Getting involved" page which explains how things work in punBB world. There is need for a "how to code" page. And honestly I believe that Informer is blocking punBB more than it supports. Not only employers should work on the codebase. And this in fact does mean that the open source team needs access to all resources and host code on a neutral code platform like googlecode or github.

As I can understand that informer wants to keep the trademark, they can add a "sponsored by" label somewhere - as long as they sponsor webspace for hosting or something like that.

If there are no steps done now, it seems that either a fork will happen - or - what is more realistic - fluxBB will be the successor of punBB.

With this post I don't want to step on anybodys toes - I just wanted to write down what I have learned the past days bout punBB. Feel free to discuss and correct me, if you think it is needed.

Cheers,
Christian

2

(21 replies, posted in Discussions)

I have installed everything and sent you login data by mail. Thanks so far - lets see what the outcome is.

3

(21 replies, posted in Discussions)

OK, can you paste me the code + location in this forum?
I can install it and will give you feedback with details

Cheers

4

(21 replies, posted in Discussions)

yes I am sure - sorry to say.
Meanwhile spam bots have learned the new way to enter and do their 20-minute-registration job again.

I hate these fuckers (spammers of course)

5

(21 replies, posted in Discussions)

I have 14 spam registrations.

It should have been 80 or so. In other words, my situation has increased, but not solved.

I checked out my servers log. The following log file appears to be a spam attempt without success.

77.70.41.8 - - [14/Mar/2011:00:38:51 -0400] "GET /forums/index.php HTTP/1.0" 200 13867 www.m.c "http://www.m.com/forums/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 4.0) Opera 7.0 [en]" "-"
77.70.41.8 - - [14/Mar/2011:00:38:52 -0400] "GET /forums/register.php HTTP/1.0" 200 6586 m.com "http://m.com/forums/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 4.0) Opera 7.0 [en]" "-"
77.70.41.8 - - [14/Mar/2011:00:38:53 -0400] "POST /forums/register.php HTTP/1.0" 200 6303 m.com "http://m.com/forums/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 4.0) Opera 7.0 [en]" "-"
77.70.41.8 - - [14/Mar/2011:00:38:54 -0400] "POST /forums/register.php HTTP/1.0" 200 6586 m.com "http://m.com/forums/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 4.0) Opera 7.0 [en]" "-"
77.70.41.8 - - [14/Mar/2011:00:38:55 -0400] "POST /forums/register.php HTTP/1.0" 200 6303 m.com "http://m.com/forums/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 4.0) Opera 7.0 [en]" "-"
77.70.41.8 - - [14/Mar/2011:00:38:56 -0400] "GET /forums/login.php HTTP/1.0" 200 7364 m.com "http://m.com/forums/login.php" "Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 4.0) Opera 7.0 [en]" "-"
77.70.41.8 - - [14/Mar/2011:00:38:57 -0400] "POST /forums/login.php HTTP/1.0" 200 7651 m.com "http://m.com/forums/login.php" "Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 4.0) Opera 7.0 [en]" "-"
77.70.41.8 - - [14/Mar/2011:00:38:58 -0400] "GET /forums/index.php HTTP/1.0" 200 13

6

(21 replies, posted in Discussions)

Strange - I got one new.

But i see it has significantly increased my life.

7

(21 replies, posted in Discussions)

OK enabled at 18:48

At least the situation has become better. Usually I have got 2 or 3 registrations more.

Will come back if something happens

8

(21 replies, posted in Discussions)

I got a new registration 12 minutes after I installed your plugin - seems its not working 100%.
If you want to take a look, its: http://www.mortiis.com/forums

9

(21 replies, posted in Discussions)

I read the whole thread, everything is installed as you suggested (and was so by default)

10

(21 replies, posted in Discussions)

OK. I have disabled them for now and will give oyu feedback tomorrow. If there are no new spammers I count it as a success. Anyway, thanks very much guy.

On the captcha thing: I am very curious why there is no activity on this issue from the core crew. I have updated from 1.2.x b/c of this yesterday, and 1.3.x didn't solve it. whats wrong.

Spam prevention is a core feature in every board!

11

(21 replies, posted in Discussions)

Thanks, I have installed it and give it a try.

Is there a specfic reason why I should disable the Captcha? I mean, its not working, but...

12

(21 replies, posted in Discussions)

Hi all,

I have updated to 1.3.4 and enabled the bot questions and the captcha. But still some spammers register for the board - all 20 minutes another one. Its done automatically. I am curious. It seems the captcha/question stuff simply does not work and they use another hole in the board.

At least it seems the most spammer do not post b/c I enabled captach on login. Looks like at least this works.

So anybody know about this security bug in punBB? Is it under investigation?

And no, approval extension will not work for me - I would have to approve hundrets of messages each day.

And no, I don't believe its a human spammer - its going on for the same time pattern for several days now.

Please help!

Thanks
Cy