Register Members List Search Today's Posts Mark Forums Read

Reply
 
Mod Options
Hidden Image Checker by BOP5 for VB 3.x and VB 4.x (Stop Cookie Stuffing!) Details »
Hidden Image Checker by BOP5 for VB 3.x and VB 4.x (Stop Cookie Stuffing!)
Mod Version: 1.02, by BirdOPrey5 (IB Staff) BirdOPrey5 is offline
Developer Last Online: Jun 2019 I like it Show Printable Version Email this Page

vB Version: 4.x.x Rating: (7 votes - 4.71 average) Installs: 46
Released: 01 Apr 2012 Last Update: 12 Apr 2012 Downloads: 103
Supported Uses Plugins Auto-Template Translations  



Version 1.02 - Compatibility fix for dbtech Advanced Thanks/Like mod
Version 1.01 - Bug fix for user post counts over 1000
Version 1.0 - Initial Release

Also available on Qapla.com.

For some time now a new type of "Spammer" has been hitting forums. These "spammers" are not as obvious as those trying to make links or sell cheap Viagra. These new spammers use a technique called "Cookie Stuffing" which can make them a lot of money if you don't notice what they've done.

Cookie stuffing is when a malicious user posts a hidden (clear) image in a post. Although you may never see the image it actually links to a location that will set a cookie on the browser of everyone viewing the post. In the cases of cookie stuffing this is almost always a cookie that contains their affiliate code for a site like Amazon or eBay. If anyone on your forum should go on to buy something from Amazon.com later in the day the spammer will get a credit from Amazon because your user has the spammer's cookie on their computer.

At best this allows the spammer to make money off your unsuspecting users. At worst it is taking money away from you if you had your own affiliate cookie (legitimate) it may get over-ridden by the spammer's cookie.

There is no built in means for detecting small transparent images in vBulletin. This mod will show a banner notice under every post by a "new" user reporting the number of images in the post (if any). It only takes a second to scan the post and make sure the number of images reported, matches the number of images you see.

So next time a spammer tries to hide a small clear image in a post you or your mods will see a big yellow notice below the post that it contains an image- allowing you or your staff to take appropriate action. (Usually deleting the post and banning the user.) [Mod functions not part of this modification.]

However since it would get annoying to see these big yellow banners under every post that contains images the mod lets you limit seeing banners to only "new" users- You can choose a minimum post count or # of days registered before the user who posted is not considered new anymore.

In addition you can choose trusted usergroups that will never have their images counted regardless of their number of posts or days registered.

This mod contains both the VB 3.x and VB 4.x version in the same .xml file. It has been tested on VB 3.8.7 and VB 4.1.10 and VB 4.1.11 but it should work on all VB versions from at least 3.7 through 4.1.x and beyond. Feel free to try on earlier versions and let me know if you run into an error.

This mod DOES NOT count attachments or smilies as images since they are safe from cookie stuffing. Only remotely linked images using the [img] BBCode will be counted.

See screenshots for examples.

Please Mark as Installed if you use this.
Donations always appreciated.

Download Now

Only licensed members can download files, Click Here for more information.

Screenshots

Click image for larger version

Name:	hiddden_img_check_settings_short.jpg
Views:	191
Size:	114.9 KB
ID:	137481   Click image for larger version

Name:	hiddden_img_check_vb4_post.jpg
Views:	457
Size:	79.6 KB
ID:	137482   Click image for larger version

Name:	hiddden_img_check_vb4_prepost.jpg
Views:	297
Size:	67.1 KB
ID:	137483  

Show Your Support

  • To receive notifications regarding updates -> Click to Mark as Installed.
  • If you like this modification support the author by donating.
  • This modification may not be copied, reproduced or published elsewhere without author's permission.
Similar Mod
Mod Developer Type Replies Last Post
Image Status Checker / Dead Image Finder bairy vBulletin 3.5 Add-ons 52 20 Sep 2013 03:33
Administrative and Maintenance Tools Cookie Stuffing Detector [Inside- What is Cookie Stuffing and Why you Should Care] sockwater vBulletin 3.7 Add-ons 37 11 Jul 2011 04:13

Comments
  #2  
Old 01 Apr 2012, 02:45
BirdOPrey5's Avatar
BirdOPrey5 BirdOPrey5 is offline
 
Join Date: Jun 2008
Real name: Joe D.
Reserved.
__________________
-Joe
Former vBulletin.org Staff Member

(@BirdOPrey5) Former vb.org Moderator. Fighting for a free & independent vb.org.
BirdOPrey5.com - Exclusive VB Mods! (Formerly Qapla.com) | Joe's Ultimate Off Topic
Note - I do not read my PMs often, do not expect quick replies.
Reply With Quote
  #3  
Old 01 Apr 2012, 04:15
Alan_SP's Avatar
Alan_SP Alan_SP is offline
 
Join Date: Nov 2009
For some reason I don't see notice about number of images.

I checked both options, for days and for posts of user, used big numbers (so it certainly should trigger mod) and nothing. Of course, I checked post that has pictures.
Reply With Quote
  #4  
Old 01 Apr 2012, 07:31
Nirjonadda Nirjonadda is offline
 
Join Date: Dec 2011
Real name: Md Tajirul Islam
Excellent works on 4.1.10 !
Reply With Quote
  #5  
Old 01 Apr 2012, 09:19
BirdOPrey5's Avatar
BirdOPrey5 BirdOPrey5 is offline
 
Join Date: Jun 2008
Real name: Joe D.
Originally Posted by Alan_SP View Post
For some reason I don't see notice about number of images.

I checked both options, for days and for posts of user, used big numbers (so it certainly should trigger mod) and nothing. Of course, I checked post that has pictures.
I just released a bug-fix, please check if the new version helps.

If not- Are you sure the images are remote hosted? That is if you look at the source of the post in the editor in source mode the code looks like:
[img]http://www.somewhere.com/folder/someimage.gif[/img]

That is a remote-hosted image.

By default VB4 actually makes remote images into attachments, which makes them safe from cookie-stuffing.

If the source code has [attach] bbcode instead of [img] bbcode then it is not going to show because there is no risk.

The mod only counts the number of closing [/img] tags in a pre-rendered post so it doesn't count smilieys, attachments, or any other built-in images.
__________________
-Joe
Former vBulletin.org Staff Member

(@BirdOPrey5) Former vb.org Moderator. Fighting for a free & independent vb.org.
BirdOPrey5.com - Exclusive VB Mods! (Formerly Qapla.com) | Joe's Ultimate Off Topic
Note - I do not read my PMs often, do not expect quick replies.
Reply With Quote
  #6  
Old 01 Apr 2012, 13:46
In Omnibus's Avatar
In Omnibus In Omnibus is offline
 
Join Date: Apr 2010
Real name: Kris
Smart. As a rule, I kill any "hot" outbound links on my sites, however, certain members get a little testy about not being able to link signature images. Is there any possibility of this mod working for signatures?
Reply With Quote
  #7  
Old 01 Apr 2012, 14:12
BirdOPrey5's Avatar
BirdOPrey5 BirdOPrey5 is offline
 
Join Date: Jun 2008
Real name: Joe D.
Signature sounds like a good option for the next version, though I just block new users from having sigs at all.
__________________
-Joe
Former vBulletin.org Staff Member

(@BirdOPrey5) Former vb.org Moderator. Fighting for a free & independent vb.org.
BirdOPrey5.com - Exclusive VB Mods! (Formerly Qapla.com) | Joe's Ultimate Off Topic
Note - I do not read my PMs often, do not expect quick replies.
Reply With Quote
  #8  
Old 01 Apr 2012, 15:20
Alan_SP's Avatar
Alan_SP Alan_SP is offline
 
Join Date: Nov 2009
It still doesn't work for me.

I know what external image is, and I don't host images on my forum, only on external servers (so I don't need extra space on my server, as well as it makes backup much easier and smaller).

Also, I used option to Enable it always, as well as other two options. I used big numbers, but without ,. in them, just 1 and lots of zeros. Also, I removed all usergroups from trusted usergroups. I also checked with my two accounts, one that's admin in primary and one that's admin in secondary usergroup (in case it checks only primary, but from looking at code I think it doesn't matter).

I checked language settings, reduced phrase, anything and everything that crossed my mind. For some reason, it doesn't work.

I also tried to disable some of my mods (VaultWiki, vBSEO, Sevenskins image resizer), but nothing helped.

EDIT: This is potentially very important.

One of my moderators found image where I could see notice, as well as he (that's how he spotted this, he found it funny that there's notice that says that post has one image). What's different with this post:

User used two (2) image tags, i.e. [img][img]. Obviously by mistake, but it triggered your mod. For some reason, where there's only one image tag (as it should be), there's no triggering of your mod.

Link to this post: http://slobodni.net/t110465/#post790126

You obviously see one unparsed image tag. And I see notice.

EDIT2:
I just created test thread, you could see it here: http://slobodni.net/t111040/ I enabled for guests to see image notice for time being, so you only need to follow link. Notice is in Croatian, but I wrote it in English in posts, so you could obviously see. And, image I use is from my site, but posted with image tag.

Last edited by Alan_SP; 01 Apr 2012 at 17:32.
Reply With Quote
  #9  
Old 01 Apr 2012, 17:56
BirdOPrey5's Avatar
BirdOPrey5 BirdOPrey5 is offline
 
Join Date: Jun 2008
Real name: Joe D.
Very weird... if you can PM info for a Admin Login (please make sure language for account is English) - I can play with it and see if I can see what's wrong.
__________________
-Joe
Former vBulletin.org Staff Member

(@BirdOPrey5) Former vb.org Moderator. Fighting for a free & independent vb.org.
BirdOPrey5.com - Exclusive VB Mods! (Formerly Qapla.com) | Joe's Ultimate Off Topic
Note - I do not read my PMs often, do not expect quick replies.
Reply With Quote
  #10  
Old 01 Apr 2012, 22:16
Sayid Sayid is offline
 
Join Date: Jan 2009
What about images uploaded on other sub-domain of the same site. For example: image.mysite.com. is it counted or not?

Many thanks for sharing.
Reply With Quote
  #11  
Old 02 Apr 2012, 12:25
BirdOPrey5's Avatar
BirdOPrey5 BirdOPrey5 is offline
 
Join Date: Jun 2008
Real name: Joe D.
Images that use the [img] bbcode are counted regardless of the domain they are on... So even if you are using [img] to link to local images (for some reason) they would count as an image.
__________________
-Joe
Former vBulletin.org Staff Member

(@BirdOPrey5) Former vb.org Moderator. Fighting for a free & independent vb.org.
BirdOPrey5.com - Exclusive VB Mods! (Formerly Qapla.com) | Joe's Ultimate Off Topic
Note - I do not read my PMs often, do not expect quick replies.
Reply With Quote
  #12  
Old 09 Apr 2012, 15:16
BirdOPrey5's Avatar
BirdOPrey5 BirdOPrey5 is offline
 
Join Date: Jun 2008
Real name: Joe D.
There is a known conflict with DbTech's Advanced Post Thanks/Like mod. Thanks to Alan_SP for finding which mod conflicted.

I don't see any way of making them compatible so just skip this mod if you use the dbtech one.

The problem is dbtech parses bbcode of $post[pagetext] when it is supposed to be raw bbcode, not parsed. It means this mod can't find or count [img] bbcodes.
__________________
-Joe
Former vBulletin.org Staff Member

(@BirdOPrey5) Former vb.org Moderator. Fighting for a free & independent vb.org.
BirdOPrey5.com - Exclusive VB Mods! (Formerly Qapla.com) | Joe's Ultimate Off Topic
Note - I do not read my PMs often, do not expect quick replies.
Reply With Quote
  #13  
Old 10 Apr 2012, 11:00
Alan_SP's Avatar
Alan_SP Alan_SP is offline
 
Join Date: Nov 2009
I have to say that at the moment I'm still using older version of DBTech's APTL (v1.1.9) so there's a slight chance that with newer versions it might work.
Reply With Quote
  #14  
Old 12 Apr 2012, 12:46
BirdOPrey5's Avatar
BirdOPrey5 BirdOPrey5 is offline
 
Join Date: Jun 2008
Real name: Joe D.
Version 1.02 - Compatibility fix for dbtech Advanced Thanks/Like mod
__________________
-Joe
Former vBulletin.org Staff Member

(@BirdOPrey5) Former vb.org Moderator. Fighting for a free & independent vb.org.
BirdOPrey5.com - Exclusive VB Mods! (Formerly Qapla.com) | Joe's Ultimate Off Topic
Note - I do not read my PMs often, do not expect quick replies.
Reply With Quote
  #15  
Old 12 Apr 2012, 20:21
Alan_SP's Avatar
Alan_SP Alan_SP is offline
 
Join Date: Nov 2009
Thanks, this version fixes compatibility with DBTech's mod.

Now everything works as it should on my site.

P.S At the moment I couldn't like your post, otherwise I would.
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Mod Options

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 13:57.

Layout Options | Width: Wide Color: