I am using phpBB for a Forum that I run (not Kendo related) and it has the registration mod that you're talking about...

The forum is hosted by Forumer.com (free hosting with ads...) and it's very early days as yet...

The only problem that I had during testing was that one of the test registrations didn't receive a confirming e-mail... this was a hotmail account... (one of my other test accounts was a hotmail account as well and this was okay...).

No probs with spammers as yet... but, as I said... early days...!

ok, I am going to wait until Friday and see if any registrations come in (none so far since the mod). I will let you know if it makes a difference.

Hiya, I recommend the following two mods in addition to the one already mentioned:

Visual confirmation for guests:
http://www.phpbb.com/phpBB/viewtopic.php?t=266787

IP log for people who register:
http://www.phpbb.com/phpBB/viewtopic.php?t=281477

My forum is set up as follows: Users cannot read or post without registering, they require image verification and email confirmation to register.
I have one forum only which allows guests to post, I have this because users sometimes forget their login details and can post there and ask for support.
As a result of this the two main spam problems I have are spam posts in the help forum, posted by guest users. Also bogus registrations which never get confirmed but still leave a live weblink to a spam site in their homepage field.

I use a combination of banning email addresses and IP addresses to defeat these attempts and have recently added the visual confirmation for guest posters mod

I also consider this to be a 'must-have' mod:

http://www.phpbb.com/phpBB/viewtopic.php?t=429484

Regards

Mike

PS - If you're not to hot on modding it all yourself I'd recommend looking up easyMod

Ok guys, I am coming back with the results as promised. No new bogus registrations since the code was applied http://www.discussworldissues.com/fo...es/biggrin.gif

Here are the controls I have in place:

1. No guest forum, if anyone is having trouble they need to email the admin thru the website

2. Valid e-mail adresses for registration is necessary, this reduces the number of spammers

3. Admin verification required for every new registree, they cannot post until they are approved to do so, ever since I enbaled this I got no spam posts (about three months now)

4. Enhanced captcha to protect against bogus registrations, this has stopped them completely so far.

On my to do list is to update to the latest release and applie the mods recommended on this thread for added security.

Please feel free to PM me for the code and instructions, I will be more than happy to help other people along.

Also, a mate has written some really cool javascrip that pops up a semi transparent area in the screen reading "click here if you are human", the form cannot be used until this is clicked, I will make the code available as soon as I figure it out.

P.S. - No mod lasts forever, there is a chance in the future that someone will learn to circumvent this but if it gives me a couple of months peace I am a happy man

Im running a little phpBB for our dojo too, and I recently had problems, so I enable the image verification that came with it, didnt notice it before.

could you help as to where to find the enhanced and improved version u use?

Yep, here is the link: http://www.matthewleverton.com/howto...2-captcha.html

You also have to download that freecap code file, is here (the link on the above site doesn't point ot the right location): http://www.puremango.co.uk/freecap1.4.1.zip

BACK ALL YOUR FILES UP BEFORE YOU START!

By the way, the default words that come in this file (HT_FREECAP_WORDS) contains a couple of bad words (is a bunch of words in English), is worth a quick look to delete inappropriate ones OR, if your forum is in a different language, try to find a long list of words in that language (try google) and replace the contents of this file, keep in mind that long words will not fit, so limt them to about 5 characters

There are a couple of banana skins:

1. On step 5, make sure you also remove the code for the "old" captcha on the file \\forum\templates\subSilver\profile_add_body.tpl, otherwise both captcha will show

2. On step 7, you need to do what it says and in addition remove the code from lines 270 to about 319, otherwise your registration form will try to use the "old" captcha verification too

Best of luck

thanks http://www.discussworldissues.com/fo...lies/smile.gif would prefer to convince dojo-leader to pay a vBUlletin Licence, its not THAT expensive anymore

Well, there is a lot to be said about free source.

Stick it to the man... http://www.discussworldissues.com/fo...ies/smoker.gif

If I had a forum of any sort in these spam-ridden times I would remove the option of adding a website to your user-profile in ANY of the open fields available (signature, location and so on) I would also implement a 10 post-rule before a user is able to post a www-link and able to create a new Topic.

I'm no programmer though. Dunno if the above is even technically possible.

Hi JCM,

Im having probs implementing this, my version is 2.0.22 and the instructions is for 2.0.19 in particular i am missing the last step of editing the resister page...

Any idea's?

ok, can you PM me your phpBB2/includes/usercp_register.php file?, I will have a quick look at it.

Is this step 7 on that website?

Cheers,

JCM

Not quite sure if there is a step seven but this is the intstructions i am following...


when i follow your link http://www.puremango.co.uk/freecap1.4.1.zip i dont really get anywhere.....
i have to navigate to web projects then free cap to get this page http://www.puremango.co.uk/cm_php_ca...script_113.php

Must be different huh http://www.discussworldissues.com/fo...lies/frown.gif no point sending my file if its the wrong version....

################################################## ############
## MOD Title: FreeCap Visual Confirmation
## MOD Author: A_Jelly_Doughnut (n/a) N/A
## MOD Description: Replaces the visual confirmation with a GD-based one
## New CAPTCHA is based on freeCap 1.4. See www.puremango.co.uk for that.
## MOD Version: 0.0.3
##
## Installation Level: Easy
## Installation Time: 5 Minutes
## Files To Edit: usercp_confirm.php, usercp_register.php
##
## Included Files: functions_freecap.php, .ht_freecap_font1.gdf, .ht_freecap_font2.gdf, .ht_freecap_font3.gdf,
## .ht_freecap_font4.gdf, .ht_freecap_font5.gdf, .ht_freecap_im1.jpg, .ht_freecap_im2.jpg, .ht_freecap_im3.jpg,
## .ht_freecap_img.jpg, .ht_freecap_im5.jpg
## License: http://opensource.org/licenses/gpl-license.php GNU General Public License v2
################################################## ############
## For security purposes, please check: http://www.phpbb.com/mods/
## for the latest version of this MOD. Although MODs are checked
## before being allowed in the MODs Database there is no guarantee
## that there are no security problems within the MOD. No support
## will be given for MODs not found within the MODs Database which
## can be found at http://www.phpbb.com/mods/
################################################## ############
## Author Notes:
## This has been ported to and fro so many times...
## Ported from Standalone to OCbb 0.9.5 by A_Jelly_Doughnut
## Ported from OCbb 0.9.5 to phpBB2 by A_Jelly_Doughnut
##
## Note the included fonts only work on little-endian processors like x86
## You'll need to generate your own fonts for UltraSparc and similar architectures.
##
################################################## ############
## MOD History:
## 2006-06-11 - Version 0.0.3
## - Updated for 2.0.21
## - Stupid bugs
## 2005-11-28 - Version 0.0.2
## - Oops, that method of generating and confirming a code didn't work if a # showed up
## - Renamed from Enhanced Visual Confirmation
## 2005-11-27 - Version 0.0.1
## - Initial release
##
################################################## ############
## Before Adding This MOD To Your Forum, You Should Back Up All Files Related To This MOD
################################################## ############

#
#----[ COPY ]---------------------
#
# Note that you can replace any of these fonts or images with your own should you desire.
# Just keep the names the same.
freecap/.ht_freecap_font1.gdf to includes/freecap/.ht_freecap_font1.gdf
freecap/.ht_freecap_font2.gdf to includes/freecap/.ht_freecap_font2.gdf
freecap/.ht_freecap_font3.gdf to includes/freecap/.ht_freecap_font3.gdf
freecap/.ht_freecap_font4.gdf to includes/freecap/.ht_freecap_font4.gdf
freecap/.ht_freecap_font5.gdf to includes/freecap/.ht_freecap_font5.gdf
freecap/.ht_freecap_im1.gdf to includes/freecap/.ht_freecap_im1.gdf
freecap/.ht_freecap_im2.gdf to includes/freecap/.ht_freecap_im2.gdf
freecap/.ht_freecap_im3.gdf to includes/freecap/.ht_freecap_im3.gdf
freecap/.ht_freecap_im4.gdf to includes/freecap/.ht_freecap_im4.gdf
freecap/.ht_freecap_im5.gdf to includes/freecap/.ht_freecap_im5.gdf
functions_freecap.php to includes/functions_freecap.php

#
#----[ OPEN ]---------------------
#
includes/usercp_confirm.php

#
#----[ FIND ]---------------------
#
else
{
exit;
}

#
#----[ AFTER, ADD ]---------------
#

if ((@extension_loaded('gd') || @extension_loaded('gd2')) && @extension_loaded('zlib'))
{
require($root_path . "includes/functions_freecap.$phpEx");

// output final image :-)
sendImage($im);
// (sendImage also destroys all used images)
}

#
#----[ OPEN ]---------------------
#
includes/usercp_register.php

#
#----[ FIND ]---------------------
#
if ($row['code'] != $confirm_code)
#
#----[ REPLACE WITH ]-------------
#

if (@extension_loaded('gd') || @extension_loaded('gd2'))
{
$logic = 'return strtolower($row[\'code\']) != strtolower($confirm_code);';
}
else
{
$logic = 'return $row[\'code\'] != $confirm_code;';
}

if (eval($logic))

#
#----[ FIND ]---------------------
#
$code .= $confirm_chars[mt_rand(0, $max_chars)];
}

#
#----[ AFTER, ADD ]---------------
#
$code = strtolower(preg_replace('#(\d)#e', 'chr($1 + 96)', $code));

#
#----[ FIND ]---------------------
#
$confirm_image = 'http://www.discussworldissues.com/fo... . append_sid(';

#
#----[ REPLACE WITH ]-------------
#
$confirm_image = (@extension_loaded('gd') || @extension_loaded('gd2')) ? "

btw your account cannot recieve pm's http://www.discussworldissues.com/fo...ilies/wink.gif

Simple solution.

spam bots fill in all of the fields on a form. so make a hidden field called "frombot" and then on submit if the field frombot has a value then you know its from a spammer and simply do nothing with the submission.

As for human spammers.. not a great deal you can do about those monkies except ban their IP/domain *shrug*.

Hi Bobdonny,

Can you receive private ones on KNH? we can exchage email addresses there.

Cheers,


JCM

cool, will do - but as admin i have yours and you have mine http://www.discussworldissues.com/fo...ilies/wink.gif