Author Topic: Apologies for the bots  (Read 4361 times)

0 Members and 1 Guest are viewing this topic.

Offline Shockwave

  • good/evil
  • Founder Member
  • DBF Aficionado
  • ********
  • Posts: 17427
  • Karma: 499
  • evil/good
    • View Profile
    • My Homepage
Apologies for the bots
« on: June 26, 2009 »
We have had a little problem of late with spambots..

Unfortunately as any forum software becomes more popular then people will try and find ways of exploiting it... For some time now there have been web bots that have successfully cracked SMF's image verification software and it is a bit of a race between the creators of this software and the makers of SMF.

I've been patching the forum like crazy, some of you may have noticed that we are up to version 1.9 now, and today after three bots got through I decide to add another mod, there is a random question now asked at registration to determine if a user is human before allowing registration, if this mod doesn't work then I'll write my own but in the meantime apologies for these fake accounts, hopefully the problem is fixed now.
Shockwave ^ Codigos
Challenge Trophies Won:

Offline combatking0

  • JavaScript lives!
  • Senior Member
  • DBF Aficionado
  • ********
  • Posts: 4569
  • Karma: 235
  • Retroman!
    • View Profile
    • Combat King's Barcode Battler Home
Re: Apologies for the bots
« Reply #1 on: June 26, 2009 »
I've been having problems with bots on my own SMF board too, and I have contemplated modifying the random image generator slightly to stop them.

However, there's a chance it may stop certain future updates from working. I'll back up the necessary files and let you know what happens.
You are our 9001st visitor.
Challenge Trophies Won:

Offline Shockwave

  • good/evil
  • Founder Member
  • DBF Aficionado
  • ********
  • Posts: 17427
  • Karma: 499
  • evil/good
    • View Profile
    • My Homepage
Re: Apologies for the bots
« Reply #2 on: June 26, 2009 »
All you need to do is back up the registration templates and add some new fields which need validating, the bots directly inject variables into the form so it should be easy to fool them into thinking that registration is disabled on the forum...
Shockwave ^ Codigos
Challenge Trophies Won:

Offline Shockwave

  • good/evil
  • Founder Member
  • DBF Aficionado
  • ********
  • Posts: 17427
  • Karma: 499
  • evil/good
    • View Profile
    • My Homepage
Re: Apologies for the bots
« Reply #3 on: June 26, 2009 »
What I mean is, just generate the appropriate error message for bots ;) check to see if they set the variables in your custom form..
Shockwave ^ Codigos
Challenge Trophies Won:

Offline combatking0

  • JavaScript lives!
  • Senior Member
  • DBF Aficionado
  • ********
  • Posts: 4569
  • Karma: 235
  • Retroman!
    • View Profile
    • Combat King's Barcode Battler Home
Re: Apologies for the bots
« Reply #4 on: June 26, 2009 »
I see what you mean. I'll give it a try tonight.
You are our 9001st visitor.
Challenge Trophies Won:

Offline Pixel_Outlaw

  • Pentium
  • *****
  • Posts: 1390
  • Karma: 84
    • View Profile
Re: Apologies for the bots
« Reply #5 on: June 26, 2009 »

Thanks again to our members staying on their toes and reporting bad posts. I was able to delete them right away.
Challenge Trophies Won:

Offline Clyde

  • A Little Fuzzy Wuzzy
  • DBF Aficionado
  • ******
  • Posts: 7271
  • Karma: 71
    • View Profile
Re: Apologies for the bots
« Reply #6 on: June 27, 2009 »
Those bots are becomming increasingly clever, one i saw about the chemist had multi lingual tags for search engine spiders to find. I infact thought it was actually a real person.
Still Putting The IT Into Gravy
If Only I Knew Then What I Know Now.

Challenge Trophies Won: