pete1964?

Dr Lobster*
Posts: 2123
Joined: Sat 30 Aug, 2003 20.14

i've seen this mysterious user logged in for hours, it seems to be a spambot (look at its web address) and it didn't answer (or read) a pm i sent... just what on earth is it doing, just staying logged in all the time?
User avatar
Gavin Scott
Admin
Posts: 6442
Joined: Fri 15 Aug, 2003 13.16
Location: Edinburgh
Contact:

You're right. He's gone.

There are more and more of these bots on the board - but most alarming is that they have started to post.

I'll try to stay on top of it, but feel free to message me if you observe similar behaviour.

Ta.
cdd
Posts: 2622
Joined: Fri 15 Aug, 2003 14.05

I notice a new policy has been adopted which is good - obvious spambot threads should just be deleted unceremoniously and as quickly as possible, to reduce the impact they have on people who browse down the list. I just think it needs more frequent enforcing.

By the way - just an idea - on the registration form, why don't you make a mandatory textbox saying "In at least 200 characters, tell us a bit about who you are (it won't be posted on the forum)" or something like that. This would be good because most spambots wouldn't be specifically programmed to accept custom registration fields. It would get sent to the adminisrtator when the account is to be activated or not (assuming Manual Account Activation is on), and if it is obviously drivel then the person does not get accepted. Currently, the spambots' system clearly relies on a standardised PHPBB format. Adding a field like this would make it too much work per spam entry for them to get a worthwhile click through ratio thereby eliminating spam almost entirely. Just a thought :P
User avatar
Bail
Posts: 1142
Joined: Fri 15 Aug, 2003 21.41
Location: UK

omigod omigod!

THIS DOMAIN IS NOW UNDER OFFER!
Image
User avatar
Gavin Scott
Admin
Posts: 6442
Joined: Fri 15 Aug, 2003 13.16
Location: Edinburgh
Contact:

cdd wrote:I notice a new policy has been adopted which is good - obvious spambot threads should just be deleted unceremoniously and as quickly as possible, to reduce the impact they have on people who browse down the list. I just think it needs more frequent enforcing.

By the way - just an idea - on the registration form, why don't you make a mandatory textbox saying "In at least 200 characters, tell us a bit about who you are (it won't be posted on the forum)" or something like that. This would be good because most spambots wouldn't be specifically programmed to accept custom registration fields. It would get sent to the adminisrtator when the account is to be activated or not (assuming Manual Account Activation is on), and if it is obviously drivel then the person does not get accepted. Currently, the spambots' system clearly relies on a standardised PHPBB format. Adding a field like this would make it too much work per spam entry for them to get a worthwhile click through ratio thereby eliminating spam almost entirely. Just a thought :P
All good thoughts.

There isn't a "new policy" though. Bot threads are always removed as soon as they are seen - with the one exception where the replies were humerous so I only deleted the offending link.

Unfortunately, while Martin is the domain and site owner, he would have to add extra fields to the registration system, and any other coding changes.

Account activation is automatic, provided the user's email address is valid.

The bots signing up was never an issue when they didn't activate their accounts, but now that they are its a more serious problem.

When Martin pops by then I shall have a chat with him.
User avatar
Pete
Posts: 7633
Joined: Fri 15 Aug, 2003 13.36
Location: Dundee

Do you not have FTP control for Metropol Gav? I'd have thought it would be useful what with the number of bugs and germs that affect phpBB.

Plus we could always beta test the amazing new HicksForum vapourware...
"He has to be larger than bacon"
Tiddles
Banned
Posts: 2
Joined: Sat 23 Sep, 2006 03.45

Why not just enable the Anti spam filter in phpBB's configuration?

It makes users enter a server generated code, thus eliminating spam bots.

I notice you don't have it enabled, this is why you're getting spam bots!
User Removed
User avatar
Gavin Scott
Admin
Posts: 6442
Joined: Fri 15 Aug, 2003 13.16
Location: Edinburgh
Contact:

I see it's not just the bots signing up we have to watch out for.

I've only got access to the Admin site, rather than the FTP business; and to be honest I'd need a guiding hand to do anything complex.

Martin can maybe see to it when he gets some time.
User avatar
Pete
Posts: 7633
Joined: Fri 15 Aug, 2003 13.36
Location: Dundee

I'll hold your hand Gav

what version of phpBB are we on anyhow? It might be possible to import things without having to fanny around with FTP
"He has to be larger than bacon"
User avatar
Gavin Scott
Admin
Posts: 6442
Joined: Fri 15 Aug, 2003 13.16
Location: Edinburgh
Contact:

Hymagumba wrote:I'll hold your hand Gav

what version of phpBB are we on anyhow? It might be possible to import things without having to fanny around with FTP
2.0.6 from what I can see.
Please Respond