4
If your server has CURL php extension, you can enable 'stopforumspam' in protector preferences. It will filter 90% of the spammers that break captchas.
You can also add extra protection by checking if the user(spammer) accessed register.php directly (without clicking on register link)
You can edit profile/preloads/core.php and add this extra method:
function eventCoreHeaderStart($args)
{
if (empty($_SERVER['HTTP_REFERER'])) {
$_SESSION['noref'] = true;
}
if ($_SERVER['REQUEST_METHOD'] != 'POST') return true;
if (!isset($_SESSION['noref'])) return true;
if (!isset($_POST['email'])) return true;
$_POST = array();
}
This code will empty $_POST when direct access is detected and spammer will not be able to commit any data. This approach will filter 90% of the remaning 10%. You may still get spammer accounts, but they will probably be done by real users.
