Register Members List Search Today's Posts Mark Forums Read

Reply
 
Mod Options
vbStopForumSpam - known spammer lookup for new registrations Details »
vbStopForumSpam - known spammer lookup for new registrations
Mod Version: 0.61, by pedigree (Coder) pedigree is offline
Developer Last Online: Nov 2013 I like it Show Printable Version Email this Page

This modification is in the archives.
vB Version: 3.6.1 Rating: (180 votes - 4.84 average) Installs: 1984
Released: 17 Apr 2008 Last Update: 27 Jan 2010 Downloads: 6815
Not Supported DB Changes Uses Plugins Auto-Template Additional Files Translations External Content Is in Beta Stage  

vbStopForumSpam

This provides access to a RBL type system for forum admins, listing known spam IP / email / usernames. The RBL database is provided by www.stopforumspam.com. You do NOT need an API key from the website in order to access the database. only to submit data if you should wish to do so.

At the point of user registration, the mod checks if the IP number / provided username / email addresses appear on a block list and can block the registration.

Whilst this isnt the most perfect way to stop all forum spam, its another step that spammers have to overcome.

VB4 here http://www.vbulletin.org/forum/showt...hreadid=230921
Its the same code, it works in 3.54 to 4.0


What it does

It checks with a remote database of known forum spammers. Their IP number, email address and forum username are tested and based on your configuration, you can reject / log / accept user registrations based on what you get back.

This version doesnt have
- whitelisting or the ability to submit users to the database but it will within the next week.
- automatic user deletion / post / PM purging. There are good tools out there already, this does something else.

Instructions are included in the installation.txt file - PLEASE read it first and dont forget to actually upload the files in the upload folder, otherwise it WILL kill your registration progress and you wont see the log file options in admincp. You do not need to download the product-vbstopforumspam-3.54.xml file unless you are using a vBulletin version older than 3.6.0

Changes to vB
- 3 new database tables
- 2 database table alternations
- No new templates.
- 2 Hook (register_addmember_process & register_addmember_complete)

Ive tested it but had feedback that it works with versions as old as 3.6.2... Support should go back to older versions, as long as they have hook support for register_addmember_process / register_addmember_complete

Known to work - tested by me
- vBulletin 3.6.8 on Apache 2.2 / PHP 5.1.2 on Linux using cUrl
- vBulletin 3.7 Gold on Apache 2.0 / PHP 4.4.3 on Windows without cUrl (template changes wont work on 3.7 - thats in the next version with auto template changes)

For code to submit spammers to the database, check this post for code changes
http://www.vbulletin.org/forum/showp...&postcount=288

Reported in the thread to work
- 3.6.1, 3.6.2, 3.6.9, 3.6.10, 3.7.0, 3.7.1, 3.7.2, 3.7.3, 3.74, 3.80, 3.81, 3.82, 3.83, 3.8.4, 4.0beta3


If you have 3.54, then you can use the product-vbstopforumspam-3.54.xml file attached instead of the one in the ZIP file, which will allow older vBulletin versions to access this mods' features. I personally havent tested this version, its a user contribution, thanks to Darrell Mobley, that changes the way the XML works when imported into older versions.

Installers should remember to refresh their ACP navigation window when they first install it so they can see the new log file menu item.

REQUIRES MySQL 4.1.1+

Future versions
- Automatic integration into vBulletin to add users to the stopForumSpam.com database from a form
- Whitelisting of username / IP / email addresses
- AJAX integration to allow for lookups from within the users profile
- Decreased remote query count from three per user to one per user.

Versions / Changes

0.1 Initial Release

0.2 pedigrees special brew birthday release.
- Small security update. If you have 0.1 installed, download 0.2 and replace your existing functions_vbsfs.php with the one in the archive. It just tests to see if its running inside the VB framework before anything else. This is what happens when you code at 2am after drinking wine

0.3
- stopped it processing valid registrations twice
- moved all non-function code into the plugin. Not a big one as 0.2 basically did that
- fixed a typo in the log pruner that stopped it working (404)
- removed unused fields from the database for people with mysql that doesnt support varchar > 255 (ie mySQL4). If you have 0.2 installed and dont need to prune your logs just yet, you dont really need to install this version but can instead wait for 1.0 unless of a massive security update.

0.4
- logs registrations that arent/wouldnt be blocked
- fixed XML errors when username has a space it in
- tightened up the cache so that it doesnt test a username against an email name to give a bypass result (for when a username is an email address that isnt banned where the email address is)
- fixed some basic logic errors in the PHP

0.6
- Should work on PHP 4.4 now - rewrote the XML with PHP4 in mind (tested on Apache2.0/PHP 4.4.3)
- Fixed a caching system where data wasnt being updated correctly which could cause a remote query when one wasnt needed
- Possible false negative situation when a spammer was blocked due to SFS.com being down who then visited again when it was up but within the cache expiry time
- Remote query failure when the result page isnt XML should work a bit better now. It does a very basic test for valid XML results.
- Fixed log purging (again) and it should actually work properly now.
- No longer requires PHP5
- The log viewer now links to a user profile when registration is allowed.

v0.61 - Removed a template change that was invalid vBulletin code. The package you download will still say its 0.60 however

NB : When upgrading from any version to 0.6, you must remove and then add the plugin due to changes in one of the database tables

You need to have an API key from www.stopforumspam.com in order to submit data, its free and easy to get... You DONT need an API key in order to use this mod however, only to submit spammer data.

Issues are
- The usergroup permissions / view details etc DONT work. I jumped the gun and put the permissions controls in there before I put the code in. Please delete the includes/xml/bitfield_vbstopforumspam.xml file and rebuild your postbit

Installation
- Follow the instructions in the zip file, that includes upload the correct folders
- ONLY download the 3.54 xml file if youre using a vbulletin version prior to 3.6.0. use this file to install the mod instead of the xml file in the zip file.

Please click Installed

Download Now

Only licensed members can download files, Click Here for more information.

Addons

Screenshots

Click image for larger version

Name:	error.gif
Views:	4832
Size:	9.8 KB
ID:	78900   Click image for larger version

Name:	admin.gif
Views:	4527
Size:	19.0 KB
ID:	78901   Click image for larger version

Name:	logs.gif
Views:	4594
Size:	33.6 KB
ID:	78902  

Show Your Support

  • To receive notifications regarding updates -> Click to Mark as Installed.
  • If you like this modification support the author by donating.
  • This modification may not be copied, reproduced or published elsewhere without author's permission.
Similar Mod
Mod Developer Type Replies Last Post
Validate email by MX lookup fastforward vBulletin 2.x Full Releases 28 22 Oct 2007 11:29

  #736  
Old 08 Nov 2009, 02:57
kylek kylek is offline
 
Join Date: Oct 2003
Real name: Kyle
Originally Posted by Ohiosweetheart View Post
Where do I find the spam log viewer as shown in the attachments? For some reason, I can't locate it.
Admincp > Statistics & Logs > vbstopforumspam logs
__________________
Reply With Quote
  #737  
Old 08 Nov 2009, 08:32
rootsxrocks rootsxrocks is offline
 
Join Date: Aug 2009
I keep finding stopforumspam.com when looking up suspicious users , Unless someone tells me there is a better Mod I think Ill try this as well.
Reply With Quote
  #738  
Old 08 Nov 2009, 08:54
skippybosco skippybosco is offline
 
Join Date: Sep 2007
This mod uses stopforumspam.com data to check against.
Reply With Quote
  #739  
Old 08 Nov 2009, 15:24
Ohiosweetheart Ohiosweetheart is offline
 
Join Date: Dec 2005
Real name: Peggy
Wow this mod is rejecting just about everyone with a gmail address.



Originally Posted by kylek View Post
Admincp > Statistics & Logs > vbstopforumspam logs
Thank you
Reply With Quote
  #740  
Old 09 Nov 2009, 07:09
Gav-n-Tn Gav-n-Tn is offline
 
Join Date: Sep 2009
Originally Posted by rootsxrocks View Post
I keep finding stopforumspam.com when looking up suspicious users , Unless someone tells me there is a better Mod I think Ill try this as well.
Originally Posted by skippybosco View Post
This mod uses stopforumspam.com data to check against.
Originally Posted by Ohiosweetheart View Post
Wow this mod is rejecting just about everyone with a gmail address.

Thank you
This is an awesome mod (I LOVE IT!) but be careful not to let SFS be your ONLY way of trying to stop the idgits. I'm sure the author of this will tell you the same but it does get better as more people report the spammers to SFS and build the database. I still moderate all new members as a second line of defense and I use more than just SFS to check the IPs.
Reply With Quote
  #741  
Old 09 Nov 2009, 07:33
techtir techtir is offline
 
Join Date: Sep 2009
It's only rejecting spammers with gmail address. We have plenty of real members with gmail addresses.

A recent tactic of US spammers seems to be to get a fresh Nigerian Human to sign up. We see the IP is Nigerian and do nothing. About 5min to 15min later the 1st post comes, a large advert for phones etc from a US IP, often with new email addresses to send the order to.

If it's a cable or Fibre IP, then the user IP doesn't change much. So then we add those posting Emails and original email to VB's own blocked emails list (in case in future Stopforumspam is down) and then add all the IPs and Emails and user names to stopforumspam.

I'd like to see this mod add blocked or banned IPs & email, (i.e. no matter if registration was successfull or not) to VB's blocked list.

I already made one tiny change on the addon reporting script so the Report to Stopforumspam box and button doesn't appear unless the user is Banned user group (Change NOT admintrators group to EQUAL Banned Group). That submit button needs to simply update the Blocked IPs and Banned Emails settings visible in VBoptions userBanning, two SQL statements)
Reply With Quote
  #742  
Old 09 Nov 2009, 11:11
pedigree pedigree is offline
 
Join Date: Jul 2005
Originally Posted by techtir View Post
I'd like to see this mod add blocked or banned IPs & email, (i.e. no matter if registration was successfull or not) to VB's blocked list.

I already made one tiny change on the addon reporting script so the Report to Stopforumspam box and button doesn't appear unless the user is Banned user group (Change NOT admintrators group to EQUAL Banned Group). That submit button needs to simply update the Blocked IPs and Banned Emails settings visible in VBoptions userBanning, two SQL statements)
Explain the 1st one a bit more if you could please. 2nd one - click click, add the IP number to the vbulletin banned IP address list as well?
__________________
My mods vbRosterMaster | Ajax New PM Notifier | vbStopForumSpam
Reply With Quote
  #743  
Old 09 Nov 2009, 11:54
techtir techtir is offline
 
Join Date: Sep 2009
Here is the code from the "submit" to stopforumspam. It's the plugin add on I got from this thread with one small change.

Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Changed line
if (is_member_of($user['usergroupid'], 8))
Note it's now ==8, banned Group, rather than != Admin Group

This means the box with email, username, IP and submit to stopforumspam only appears if you banned user (i.e. automagically via Delete all posts as Span etc)
I haven't added anything else.
But this is where you would add two SQL statements, one to add email and other to add IP to the database normally accessed manually in VBoptions User Banning settings.
Then assuming all the spammer's posts where physically deleted you can now safely delete the user.
I usually also manually add IP used and email quoted in the Spamvertisment that is deleted, as well as the user account IP and email.

None of this is automatic, I'm only suggesting that that's what I would automate and where I'd add it.
Reply With Quote
  #744  
Old 09 Nov 2009, 12:08
techtir techtir is offline
 
Join Date: Sep 2009
The other issue is that the vbstopforumspam 1st checks IP then it checks email.
If there is a match on email in log I update manually the IP and user name with that email to Stopforumspam as the email pretty much is always real spammer.
a)
That would be a useful thing to automate.

b)
Since spammers usually try with same email and / or IP multiple times and stopforum spam database could go down for a while, I thought that if any successful blocks on email or IP found at stopforumspam, it would make sense to automatically update VB's own blocking database with those likely to be retried IP and/or email. I think that's quite useful compromise between loading the entire stopforumspam database (and syncronising changes) or doing nothing.

I don't think anything needs added to the "in forum" delete as spam or ban user as you want to review banned users in Admin CP before blocking/reporting them.

The Submit code (in last post above) ideally should use a custom user field (Reported) and NOT automatically delete the user. Then the button text could be Unsubmit and remove the details from Stopforumspam, the vboptions user blocking, and unbanned the user (change group to Registered User) if it was all a mistake. Mistakes happen.
Reply With Quote
  #745  
Old 10 Nov 2009, 22:22
Johndd Johndd is offline
 
Join Date: Nov 2009
Fantastic I was getting really frustrated banning spammers every morning. Thanks
Reply With Quote
  #746  
Old 11 Nov 2009, 10:29
Barteh Barteh is offline
 
Join Date: Aug 2006
Originally Posted by techtir View Post
It's only rejecting spammers with gmail address. We have plenty of real members with gmail addresses.

A recent tactic of US spammers seems to be to get a fresh Nigerian Human to sign up. We see the IP is Nigerian and do nothing. About 5min to 15min later the 1st post comes, a large advert for phones etc from a US IP, often with new email addresses to send the order to.

If it's a cable or Fibre IP, then the user IP doesn't change much. So then we add those posting Emails and original email to VB's own blocked emails list (in case in future Stopforumspam is down) and then add all the IPs and Emails and user names to stopforumspam.

I'd like to see this mod add blocked or banned IPs & email, (i.e. no matter if registration was successfull or not) to VB's blocked list.

I already made one tiny change on the addon reporting script so the Report to Stopforumspam box and button doesn't appear unless the user is Banned user group (Change NOT admintrators group to EQUAL Banned Group). That submit button needs to simply update the Blocked IPs and Banned Emails settings visible in VBoptions userBanning, two SQL statements)
Easiest way to deal with this is both a reCaptcha protected 'contact us' form (which iirc is automatically referred to when people are unable to register because of banned email addresses) and a moderation queue for new users.
vBSFS keeps out the vast majority of spammers (say, 999 per 1000 attempts at least), so you'll only have to deal with possible human spammers on occasion, assuming you have enough people who can authorise new users of course. You might want to install the ModCP moderate new users plugin as well, helps share this load with your supermoderators and thus keeps response time to a minimum.
Reply With Quote
  #747  
Old 12 Nov 2009, 17:10
Coop1979 Coop1979 is offline
 
Join Date: Aug 2006
Wow, I installed this an hour ago and already have had 20 spammers try to sign up and be rejected!
Reply With Quote
  #748  
Old 14 Nov 2009, 22:14
pedigree pedigree is offline
 
Join Date: Jul 2005
Im in the code again at the moment, putting code in there so that its hooked in inline_deleteaspam.

Now, given that you can delete posts as spam and not ban someone, what options should be put in to avoid submitting non banned users to the database?

Either
1. No submission to the database if the user isnt set to be perm-banned
2. A form checkbox in the page, to overwrite #1
3. Admin options (off by default) that allows non-banned users to be submitted regardless of the form data.
__________________
My mods vbRosterMaster | Ajax New PM Notifier | vbStopForumSpam
Reply With Quote
  #749  
Old 14 Nov 2009, 22:40
Wired1's Avatar
Wired1 Wired1 is offline
 
Join Date: Nov 2003
After you select Delete post as spam, under Punitive Action add a 3rd radio box that says "Ban these users and submit to vBSFS". It'd be nice if it submitted the IP they posted from as well as the IP they registered from, as like someone said earlier, they can be different. ESPECIALLY those wankers who spam the cell phone crap!
__________________
Admin of the Corsair Memory Forum (AKA the House of Help from back in the day)
Admin of Petri's IT Forum / Moderator at webdesignforums.net
Reply With Quote
  #750  
Old 14 Nov 2009, 23:26
pedigree pedigree is offline
 
Join Date: Jul 2005
Thats what I have at the moment but submitting data when not banning a user, a bit of an odd action
__________________
My mods vbRosterMaster | Ajax New PM Notifier | vbStopForumSpam
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Mod Options

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 18:21.

Layout Options | Width: Wide Color: