1
biglove
How is my Xoops 2.5.6 site getting spammed if the forms on register.php don't even display?
  • 2015/1/5 16:50

  • biglove

  • Not too shy to talk

  • Posts: 157

  • Since: 2004/8/18


I'm getting about 100 spam submissions everyday but the form doesn't even render.
http://www.level-of-consciousness.org/modules/profile/register.php

I tried setting up Protector.
I also attempted to update to Xoops 2.5.7.1, but my installation failed somehow.

2
redheadedrod
Re: How is my Xoops 2.5.6 site getting spammed if the forms on register.php don't even display?

Lets start with versions...

I see you are using 2.5.6 Xoops.

What version of PHP are you using?

I believe the spam happens due to someone writing a "bot" that bypasses the software and tries to post the information directly. So the best way in those cases to prevent spammers from registering in the first place. Protector is a very important module to install on all systems.

But lets start with your versions so we know how to best help you.

If you can also list any modules you have installed with there versions that would be helpful as well.

Rodney

3
Mamba
Re: How is my Xoops 2.5.6 site getting spammed if the forms on register.php don't even display?
  • 2015/1/6 22:05

  • Mamba

  • Moderator

  • Posts: 11366

  • Since: 2004/4/23


First, please upgrade to XOOPS 2.5.7.1 as there were some changes that help against spammers.

Then please follow these instructions.

Support XOOPS => DONATE
Use 2.5.10 | Docs | Modules | Bugs

4
biglove
Re: How is my Xoops 2.5.6 site getting spammed if the forms on register.php don't even display?
  • 2015/1/10 17:01

  • biglove

  • Not too shy to talk

  • Posts: 157

  • Since: 2004/8/18


I had most of the those settings already set.

The only one not set was:
4) Starting with XOOPS 2.5.7, in Preferences for the Profile module, set the "Use Captcha after the second Registration step" option to "Yes" (it is the default)

I'm not sure I understand what it's asking.
Is the Profile module the "User Profile" module?

I still got 75 spam messages last night.

5
biglove
Re: How is my Xoops 2.5.6 site getting spammed if the forms on register.php don't even display?
  • 2015/1/12 18:32

  • biglove

  • Not too shy to talk

  • Posts: 157

  • Since: 2004/8/18


I had another 100 spam messages from Xoops last night.

What can I do to stop this spam?

6
biglove
Re: How is my Xoops 2.5.6 site getting spammed if the forms on register.php don't even display?
  • 2015/1/13 13:18

  • biglove

  • Not too shy to talk

  • Posts: 157

  • Since: 2004/8/18


Another 100 spam messages last night.

I'm running Xoops 2.5.7.1

Is there nothing that can be done to stop the Spam in Xoops?

7
Mamba
Re: How is my Xoops 2.5.6 site getting spammed if the forms on register.php don't even display?
  • 2015/1/13 16:12

  • Mamba

  • Moderator

  • Posts: 11366

  • Since: 2004/4/23


Quote:
I'm not sure I understand what it's asking.
Is the Profile module the "User Profile" module?

Yes! You need to make the changes as shown. Otherwise, you'll continue to have spams...

If you want to make it even harder for the spammers, then set one of the fields like "location" or "interests" mandatory.
Support XOOPS => DONATE
Use 2.5.10 | Docs | Modules | Bugs

8
biglove
Re: How is my Xoops 2.5.6 site getting spammed if the forms on register.php don't even display?
  • 2015/1/13 19:26

  • biglove

  • Not too shy to talk

  • Posts: 157

  • Since: 2004/8/18


I attempted to do what you suggested:

However, the only option was:

User Profile »» Preferences
Show latest activities on user profile Yes / No (Yes Selected)

I did have at least one registration step, but it appears to have vanished after the upgrade to 2.5.7.1

I looked through these documentshttp://xoops.gitbooks.io/xoops-installation-guide/content/book/appendix1.html

and didn't see anything about creating the Registration Steps.



9
Mamba
Re: How is my Xoops 2.5.6 site getting spammed if the forms on register.php don't even display?
  • 2015/1/14 0:29

  • Mamba

  • Moderator

  • Posts: 11366

  • Since: 2004/4/23


The steps should be already there. You just need to set the first to "off", so it looks like this:

Resized Image


Quote:
I did have at least one registration step, but it appears to have vanished after the upgrade to 2.5.7.1

You probably didn't update the Profile module, after you have upgraded XOOPS to 2.5.7.1. Please update it in the Admin.
Support XOOPS => DONATE
Use 2.5.10 | Docs | Modules | Bugs

10
biglove
Re: How is my Xoops 2.5.6 site getting spammed if the forms on register.php don't even display?
  • 2015/1/14 17:42

  • biglove

  • Not too shy to talk

  • Posts: 157

  • Since: 2004/8/18


I updated the User Profile Module to 1.86 Final @ noon.

I confirmed both:
3) In the Profile module, go to Admin and in the Basic step located at:

/modules/profile/admin/step.php?id=1

set the "Save after stop" to "No"

4) Starting with XOOPS 2.5.7, in Preferences for the Profile module, set the "Use Captcha after the second Registration step" option to "Yes" (it is the default)


40 minutes latter I have still received 15 spam messages.
I had 100 last night.

What else can I try?

Login

Who's Online

156 user(s) are online (86 user(s) are browsing Support Forums)


Members: 0


Guests: 156


more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Mar 31
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits