xoops forums

aixos

Just popping in
Posted on: 2013/10/15 13:22
aixos
aixos (Show more)
Just popping in
Posts: 79
Since: 2004/12/31
#1

how to stop bots from registering as users ?

How to stop bots from registering as users.?
Every day more 30 fake users enter a xoops 2.5.6
and skips the captcha bot do not understand

Cesagonchu

Moderator
Posted on: 2013/10/15 15:58
Cesagonchu
Cesagonchu (Show more)
Moderator
Posts: 864
Since: 2010/2/1 2
#2

Re: how to stop bots from registering as users ?

Take a look here.

Quote:

Mamba wrote:
2) In the Profile module, go to the Basic step:

modules/profile/admin/step.php?id=1

and set the "Save after stop" to "No"

3) go to the Protector module in Admin, go to Preferences, and then at the bottom, at this option:

Quote:
Stop Forum Spam
Checks POST data against spammers registered on www.stopforumspam.com database. Requires php CURL lib

set it to "Ban the IP (no limit)"

redheadedrod

Home away from home
Posted on: 2013/10/15 17:02
redheadedrod
redheadedrod (Show more)
Home away from home
Posts: 1296
Since: 2008/2/26
#3

Re: how to stop bots from registering as users ?

Also watch for more information soon but Profile may be getting an upgrade to help those that are getting hit with BOT type registrations. I am busy with Mid Terms this week so I am swamped but Hopefully yet this week I will be able to look at Profile and make some upgrades.

Mostly to prevent the brute force method most bots are using that the above mentioned setup prevents. I have some ideas I want to look into that may make it very difficult for someone with a simple bot to register.

aixos

Just popping in
Posted on: 2013/10/15 18:38
aixos
aixos (Show more)
Just popping in
Posts: 79
Since: 2004/12/31
#4

Re: how to stop bots from registering as users ?


Thank you very much for your answers.

The protector módulol already started work

Very good idea to prevent bots to register, if you can stop the bots will be very good improvement

redheadedrod

Home away from home
Posted on: 2013/10/15 21:45
redheadedrod
redheadedrod (Show more)
Home away from home
Posts: 1296
Since: 2008/2/26
#5

Re: how to stop bots from registering as users ?

Right now Profile doesn't verify that the data returned is valid. If an admin disables some of the fields a bot is still able to force entry into those fields.

I am also thinking of adding some other tricks to fool bots. I want to make them configurable so admins can try different things and the bot makers can't use one bot for every site like they can now. Captcha stuff works to a point. I think the 2 step method keeps the bot from continuing but making profile validate as it should in the first place will go a long way.

Rodney

redheadedrod

Home away from home
Posted on: 2013/10/24 21:27
redheadedrod
redheadedrod (Show more)
Home away from home
Posts: 1296
Since: 2008/2/26
#6

Re: how to stop bots from registering as users ?

As mentioned here Profile has some issues.. As mentioned elsewhere I am going to be looking at ways to lock down Profile.

There are some major issues with it that never were caught and I will be looking at making some changes to make it much more difficult for spammers to automate registrations as well as remove most of the reasons for them to do so.

I will be working on this this weekend so wish me luck that I can have something to test shortly.

Rodney

capee

Just popping in
Posted on: 2014/3/20 3:10
capee
capee (Show more)
Just popping in
Posts: 2
Since: 2014/2/22
#7

Re: how to stop bots from registering as users ?

I have get this problem. one day registering to 200 members . But resolves using this stapes

1 step
Protector »» Preferences
Band the ip no limit

2 step
modules/profile/admin/field.php
go to profile and creating some Felds are require states
E.g.:- name , location etc.

Add to basic field to something word you like “ I’m not robot ” and its require

Not_Robot_ please Add this Word " im not Robot " Text Field Toggle Required

Test
http://freewebdevelopers.tk/modules/profile/register.php

this step using i can stop all spamming