XOOPS 
Forum
Forum Index General Forums Community Support Modules Support Themes Support Development International Support Module Hack Reviews Theme Designer Talk
  1. Board index / 
  2. XOOPS Community Support forums / 
  3. Q and A 
  4.  / Register.php spammed
Register
1
Cuidiu
Register.php spammed

  • 2007/5/10 19:43

  • Cuidiu

  • Quite a regular

  • Posts: 358

  • Since: 2006/4/23


My registration page was spammed and some fields that should have been answered were left unanswered (should not have allowed him to submit the page without answering!) when I got the registration email. Is there a way I can make the form not spammable or use server side code to validate the fields that should be completed? I'm using 2.2.4. This hacker knew right where he was going - I suspect I'm not the first XOOPS site he's been spamming. I would like to prevent future spamming like this - is that possible?

Thank in advance,

Cuidiu
[size=x-small]Working sites:
XOOPS 2.0.16 PHP 5.2.2, MySQL 5.0.24a-standard-log, Apache/2.0.54 (Unix)
XOOPS 2.2.4, PHP 4.3.10, MySQL 3.23.58, Apache/1.3.33 (Unix)[/size]
2
wuddel
Re: Register.php spammed

  • 2007/5/10 19:50

  • wuddel

  • Just popping in

  • Posts: 71

  • Since: 2005/9/13


look at xoops-magazin.com there ist a hack to put the captcha code in the registry form. The hack should be work in 2.2.x too.
cu wuddel

[size=x-small]sorry about my sh** english [/size]
3
Cuidiu
Re: Register.php spammed

  • 2007/5/10 23:18

  • Cuidiu

  • Quite a regular

  • Posts: 358

  • Since: 2006/4/23


Thanks wuddel, I will give that a try. I would love to know how they submitted the form without answering the required questions. I know it is possible but I would love to know how... Anyone??? Feel free to PM instead of answering this post.

[size=x-small]Edited to add: I know it's possible for a hacker to submit without completing all fields - but unlikely for the regular site visitor... but still want to know how to prevent it?[/size]
[size=x-small]Working sites:
XOOPS 2.0.16 PHP 5.2.2, MySQL 5.0.24a-standard-log, Apache/2.0.54 (Unix)
XOOPS 2.2.4, PHP 4.3.10, MySQL 3.23.58, Apache/1.3.33 (Unix)[/size]
4
Cuidiu
Re: Register.php spammed

  • 2007/5/13 5:50

  • Cuidiu

  • Quite a regular

  • Posts: 358

  • Since: 2006/4/23


But 2.2.4 frameworks does not include captcha so I guess I'm back to where I started.

Why is it that no one responds to my question about my form being submitted with almost all required fields blank. Does no one think this is an important issue? Will someone please tell me how this could happen?

Quote:

wuddel wrote:
look at xoops-magazin.com there ist a hack to put the captcha code in the registry form. The hack should be work in 2.2.x too.
[size=x-small]Working sites:
XOOPS 2.0.16 PHP 5.2.2, MySQL 5.0.24a-standard-log, Apache/2.0.54 (Unix)
XOOPS 2.2.4, PHP 4.3.10, MySQL 3.23.58, Apache/1.3.33 (Unix)[/size]
5
jdseymour
Re: Register.php spammed

The latest protector module blocks this by default. See the Peak XOOPS site for the latest protector module.
6
wuddel
Re: Register.php spammed

  • 2007/5/13 14:33

  • wuddel

  • Just popping in

  • Posts: 71

  • Since: 2005/9/13


You need this Framework
cu wuddel

[size=x-small]sorry about my sh** english [/size]
7
Cuidiu
Re: Register.php spammed

  • 2007/5/13 20:16

  • Cuidiu

  • Quite a regular

  • Posts: 358

  • Since: 2006/4/23


Thank you jdseymour. I do use Protector on that site but not the latest version.

Quote:

jdseymour wrote:
The latest protector module blocks this by default. See the Peak XOOPS site for the latest protector module.
[size=x-small]Working sites:
XOOPS 2.0.16 PHP 5.2.2, MySQL 5.0.24a-standard-log, Apache/2.0.54 (Unix)
XOOPS 2.2.4, PHP 4.3.10, MySQL 3.23.58, Apache/1.3.33 (Unix)[/size]
8
Cuidiu
Re: Register.php spammed

  • 2007/5/13 20:18

  • Cuidiu

  • Quite a regular

  • Posts: 358

  • Since: 2006/4/23


Thanks wuddel. So much to do, so little time!

Quote:

wuddel wrote:
You need this Framework
[size=x-small]Working sites:
XOOPS 2.0.16 PHP 5.2.2, MySQL 5.0.24a-standard-log, Apache/2.0.54 (Unix)
XOOPS 2.2.4, PHP 4.3.10, MySQL 3.23.58, Apache/1.3.33 (Unix)[/size]

Login

Register now!  |  Lost Password?

Search

Advanced Search

Recent Posts

Who's Online

204 user(s) are online (137 user(s) are browsing Support Forums)

Members: 0

Guests: 204

more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Apr 30
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits