[TriLUG] phpBB and spam FW: Activate user account
jim at neuse.net
Thu Apr 30 07:41:30 EDT 2009
Hmmm. I have blocked the bots from posting yet get the "activate user" message thingie when they attempt to register. I took the easy way out and did the Dreamhost one click install. Consequently, I have not tweaked layout yet will give it a go...
Thanks for the suggestion.
Better yet, any folks want to volunteer to conquer the demon?
From: trilug-bounces at trilug.org [mailto:trilug-bounces at trilug.org] On Behalf Of Brian Phelps
Sent: Wednesday, April 29, 2009 11:50 PM
To: Triangle Linux Users Group General Discussion
Subject: Re: [TriLUG] phpBB and spam FW: Activate user account
Just shooting from the hip here but:
Are these spam bots specifically written for your site? What do you
know about the way the spam bots operate?
If they are generic bots, change the layout around a bit to "break"
the bot. Make the submit button the cancel button and vice versa, but
make the fake text invisible, but the real text visible by embedding
it in pics for the buttons.
You might even be able to trick the bot into submitting fake posts and
thinking it was successful.
Or maybe trick the bot into thinking the site is not a phpbb forum at
all, if you know enough about your attackers software.
On Wed, Apr 29, 2009 at 12:45 PM, Jim Ray <jim at neuse.net> wrote:
> As some of you may know, I had a calling, became ordained and started a congregation on the internet:
> Unfortunately, I receive fake user account activation with links to pr0n sites and had rather folks use their own web sites for that type of activity. Mine is for discussing God and love.
> Even with the CAPTCHA thingie, I can not figure out a way to prevent these bots from trying to become a member of the forum.
> Does anybody have a secret sauce they use to handle the situation, or is it just the nature of the beast?
> Rev. Jim
> -----Original Message-----
> From: jim at neuse.net [mailto:jim at neuse.net]
> Sent: Wednesday, April 29, 2009 11:50 AM
> To: Jim Ray
> Subject: Activate user account
> The account owned by "iodisalmMyday" has been deactivated or newly created,
> you should check the details of this user (if required) and handle it
> Use this link to view the user's profile:
> Use this link to activate the account:
> Thanks, The Management
> TriLUG mailing list : http://www.trilug.org/mailman/listinfo/trilug
> TriLUG FAQ : http://www.trilug.org/wiki/Frequently_Asked_Questions
TriLUG mailing list : http://www.trilug.org/mailman/listinfo/trilug
TriLUG FAQ : http://www.trilug.org/wiki/Frequently_Asked_Questions
More information about the TriLUG