Bot Spamers

Quote

Edit register.php
Find line 46

Code Download source

$password1 = stripinput(trim(eregi_replace(" +", "", $_POST['password1'])));

After add:

Code Download source

$user_antispam = stripinput(trim($_POST['user_antispam']));

Change next line from:

Code Download source

if ($username == "" || $password1 == "" || $email == "") $error .= $locale['402']."<br>\n";

in:

Code Download source

if ($username == "" || $password1 == "" || $email == "" || $user_antispam=="") $error .= $locale['402']."<br>\n";

and add below:

Code Download source

if (strcasecmp($user_antispam,"CORRECT ANSWER HERE")!=0) {
$error .= "Error in Text Antispam Confirmation<br>";
}

Now you should add the textbox in the registration form:
Find:

Code Download source

<tr>
<td class='tbl'>".$locale['u006']."</td>
<td class='tbl'><input type='radio' name='user_hide_email' value='1' checked>".$locale['u007']."
<input type='radio' name='user_hide_email' value='0' >".$locale['u008']."</td>
</tr>

After add:

Code Download source

<tr>
<td class='tbl'><strong>AntiSpam</strong>:<br>VERY-SIMPLE-QUESTION-HERE? <span style='color:#ff0000'>*</span></td>
<td class='tbl'><input type='text' name='user_antispam' maxlength='100' class='textbox' style='width:200px;'></td>
</tr>

Insert at your choice an easy question&anwser.
Very simple (and too much hardcoded) but works greatly.

Quote

lelebart wrote:
take a look at
http://www.php-fusion.it/forum/viewth...#post_5173
it works, mates!

* * *

step 1] find in the /maincore.php

Code Download source

if (eregi("register.php", $check_url)&& preg_match("/^[0-9a-z]{32}$/", $vimage)) {

and replace it with

Code Download source

if (eregi("register.php", $check_url)&& preg_match("/^[0-9a-z]{32}$/", $vimage) [color=red]or eregi("contact.php", $check_url)[/color]) {

step 2] open /locale/English/contact.php and add:

Quote

//vcode-captcha
$locale['430'] = "Incorrect validation code.";
$locale['431'] = "Validation Code:";
$locale['432'] = "Enter Validation Code:";

step 3] delete or rename your /contact.php, and create a new /contact.php with this code (new parts are red)

Code Download source

<?php
/*---------------------------------------------------+
| PHPFusion 6 Content Management System
+----------------------------------------------------+
| Copyright © 2002 - 2006 Nick Jones
| http://www.php-fusion.co.uk/
+----------------------------------------------------+
| Released under the terms & conditions of v2 of the
| GNU General Public License. For details refer to
| the included gpl.txt file or visit http://gnu.org
+----------------------------------------------------*/
require_once "maincore.php";
require_once "subheader.php";
require_once "side_left.php";
include LOCALE.LOCALESET."contact.php";
   
if (isset($_POST['sendmessage'])) {
   $error = "";
   $mailname = substr(stripinput(trim($_POST['mailname'])),0,50);
   $email = substr(stripinput(trim($_POST['email'])),0,100);
   $subject = substr(str_replace(array("\r","\n","@"), "", descript(stripslash(trim($_POST['subject'])))),0,50);
   $message = descript(stripslash(trim($_POST['message'])));

   if ($mailname == "") {
      $error .= "· <span class='alt'>".$locale['420']."</span><br>\n";
   }
   if ($email == "" || !preg_match("/^[-0-9A-Z_\.]{1,50}@([-0-9A-Z_\.]+\.){1,50}([0-9A-Z]){2,4}$/i", $email)) {
      $error .= "· <span class='alt'>".$locale['421']."</span><br>\n";
   }
   if ($subject == "") {
      $error .= "· <span class='alt'>".$locale['422']."</span><br>\n";
   }
   if ($message == "") {
      $error .= "· <span class='alt'>".$locale['423']."</span><br>\n";
   }
[color=red]      if(iGUEST) {
         $user_code = stripinput($_POST['user_code']);
         $temp_num = stripinput($_POST['temp_num']);
         $result = dbquery("SELECT * FROM ".$db_prefix."vcode WHERE vcode_1='$user_code'");
         if (dbrows($result) == 0) {
            $error .= "· <span class='alt'>".$locale['430']."</span><br>\n";
         } else {
            $result = dbquery("DELETE FROM ".$db_prefix."vcode WHERE vcode_1='$user_code'");
         }
      }[/color]
   
   if (!$error) {
      require_once INCLUDES."sendmail_include.php";
      sendemail($settings['siteusername'],$settings['siteemail'],$mailname,$email,$subject,$message);
      opentable($locale['400']);
      echo "<center><br>\n".$locale['440']."<br><br>\n".$locale['441']."</center><br>\n";
      closetable();
   } else {
      opentable($locale['400']);
      echo "<center><br>\n".$locale['442']."<br><br>\n$error<br>\n".$locale['443']."</center><br>\n";
      closetable();
   }
} else {
   opentable($locale['400']);
   echo $locale['401']."<br><br>
<form name='userform' method='post' action='".FUSION_SELF."'>
<table align='center' cellpadding='0' cellspacing='0' class='tbl'>
<tr>
<td width='100'>".$locale['402']."</td>
<td><input type='text' name='mailname' maxlength='50' class='textbox' style='width: 200px;'></td>
</tr>
<tr>
<td width='100'>".$locale['403']."</td>
<td><input type='text' name='email' maxlength='100' class='textbox' style='width: 200px;'></td>
</tr>
<tr>
<td width='100'>".$locale['404']."</td>
<td><input type='text' name='subject' maxlength='50' class='textbox' style='width: 200px;'></td>
</tr>
<tr><td valign='top' width='90'>".$locale['405']."</td>
<td><textarea name='message' rows='10' class='textbox' style='width: 320px'></textarea></td>
</tr>";
[color=red]   if(iGUEST) {
   
      srand((double)microtime()*1000000);
      $temp_num = md5(rand(0,9999));
      $vcode_1 = substr($temp_num, 17, 5);
      $vcode_2 = md5($vcode_1);
      unset($temp_num);
      $result = dbquery("INSERT INTO ".$db_prefix."vcode VALUES('".time()."', '$vcode_1', '$vcode_2')");
         
      echo "<tr>
      <td width='100'>".$locale['431']."</td>
      <td>";
      
      if ($settings['validation_method'] == "image") {
      echo "<img src='?vimage=$vcode_2'>\n";
      } else {
      echo "<b>$vcode_1</b>\n";
      }
      unset($vcode_1,$vcode_2);
      
      echo "</td>
      </tr>
      <tr>
      <td width='100'>".$locale['432']."</td>
      <td><input type='text' name='user_code' class='textbox' style='width:100px' /></td>
      </tr>";
   }[/color]
echo "<tr>
<td align='center' colspan='2'>
<input type='submit' name='sendmessage' value='".$locale['406']."' class='button'>
</td>
</tr>
</table>
</form>\n";
   closetable();
}

require_once "side_right.php";
require_once "footer.php";
?>

* * *

what changes from that previous one to this:
- not (or easier) hard-coded;
- captcha required only for guests;
- better integration with language(s);
- just a script for all the captchas for your site!! (if you choose the amra's captcha code, maincore remains lighter!!)

Quote

Taylor wrote:
I have had the exact same problem but on my site i noticed all the spam users had been signing up using email addresses in the same format.

All the emails start with u[number].[number].[number][name] (u168.37.283.robt@esdjuhx.info is an example of one i had)

so to stop this i created this and added it to the register.php file

Code Download source

   if (preg_match("/[u]+[0-9]+\.[0-9]+\.[0-9]+.[a-zA-Z]+@([-0-9A-Z_\.]+\.){1,50}([0-9A-Z]){2,4}$/i",$email)){
      
      $error .= '<br /><b>
         Your E-Mail address has been identified as a spam email account, and therefore have
         not been registered. If you beleve this is an error, 
         <a href="contact.php">Please contact us.</a></b><br /><br />';   
         
   }

It checks the format of the email, if it matches the same format as the spam emails it adds the error. So far it has compleatly stopped all spam registrations (i also log the failed ones along with the ip to keep a record).
So if anyone wants to try this out feel free.

Quote

//vcode-captcha
$locale['430'] = "Incorrect validation code.";
$locale['431'] = "Validation Code:";
$locale['432'] = "Enter Validation Code:";