phpBB2Refugees.com Logo
Not affiliated with or endorsed by the phpBB Group

Register •  Login 

Continue the legacy...

Welcome to all phpBB2 Refugees!Wave Smilie

This site is intended to continue support for the legacy 2.x line of the phpBB2 bulletin board package. If you are a fan of phpBB2, please, by all means register, post, and help us out by offering your suggestions. We are primarily a community and support network. Our secondary goal is to provide a phpBB2 MOD Author and Styles area.

How to disable spambot notification emails ?


 
Search this topic... | Search MOD Requests... | Search Box
Register or Login to Post    Index » MOD Requests  Previous TopicPrint TopicNext Topic
Author Message
circleofatlantis
Board Member



Joined: 13 Jul 2009

Posts: 13



PostPosted: Mon Mar 12, 2012 4:54 am 
Post subject: How to disable spambot notification emails ?

I have a mod installed that checks the profile information on registration and rejects the registration if any of the information is filled in.

It works perfectly, but recently I've been getting 300+ spambot registration attempt emails every day. (from 5 different forums collectively). Its got to the point where the notifications have themselves become spam. Essentially, I'm spamming myself with information I dont want to know.

I've looked at the mod itself and the registration code, but I cant see how the email is generated or how to stop it being sent.

Would anyone have an idea of what to look for ?

I have a programming background, but not in what phpBB2 is coded in. If someone can show me what to look for and what to change, I can make the changes, but I dont know enough to find a vague description. Not much help, sorry.

Any help is appreciated.
Back to top
Salvatos
Board Member



Joined: 19 Feb 2009

Posts: 415
Location: Québec


flag
PostPosted: Mon Mar 12, 2012 5:35 pm 
Post subject: Re: How to disable spambot notification emails ?

We'll probably need to see the mod's source to find where it's coming from.
Back to top
circleofatlantis
Board Member



Joined: 13 Jul 2009

Posts: 13



PostPosted: Tue Mar 13, 2012 4:44 am 
Post subject: Re: How to disable spambot notification emails ?

I think this is the mod.

Code:
##############################################################
## MOD Title: No Website Signature during registration
## MOD Author: EXreaction < exreaction@gotechzilla.com > (Nathan Guse) http://www.gotechzilla.com
## MOD Description: When a user registers, the website and signature sections are removed, and they are not
##        allowed to register if they enter in anything
## MOD Version: 1.1.11
##
## Installation Level: (Easy)
## Installation Time: ~2 Minutes
## Files To Edit: includes/usercp_register.php
##                templates/subSilver/profile_add_body.tpl
## Included Files: none
## License: http://opensource.org/licenses/gpl-license.php GNU General Public License v2
##############################################################
## For security purposes, please check: http://www.phpbb.com/mods/
## for the latest version of this MOD. Although MODs are checked
## before being allowed in the MODs Database there is no guarantee
## that there are no security problems within the MOD. No support
## will be given for MODs not found within the MODs Database which
## can be found at http://www.phpbb.com/mods/
##############################################################
## Author Notes:
## This is my first mod for phpbb! :D
## Works perfect for me with easymod on a clean phpBB2 install.
##############################################################
## MOD History:
##
##   2006-02-22 - Version 1.0.0
##      - (no version notes)
##   2006-03-12 - Version 1.0.1
##      - Re-wrote the MOD...I learned a much easier and better way to do it since 1.0.0
##   2006-03-17 - Version 1.0.2
##      - Fixed it so bots can't fill it in even though it is hidden
##            (basically it is version 1.0.0 plus version 1.0.1)
##   2006-03-27 - Version 1.0.3
##      - Fixed a few things...
##   2006-04-23 - Version 1.1.0
##      - Made it so that instead of just setting the website sig to nothing, if someone enters anything in
##            they are not allowed to register(only stops bots(that enter something in there)...
##            people won't see it anyways, so they won't enter anything in)
##   2006-05-13 - Version 1.1.1
##      - Added session_end() so that when the bot is banned, they can't keep trying to register...
##        ...and fixed a few other problems. :p
##   2006-05-14 - Version 1.1.11
##      - Minor mistake fixed :p
##############################################################
## Before Adding This MOD To Your Forum, You Should Back Up All Files Related To This MOD
##############################################################

#
#-----[ OPEN ]------------------------------------------
#
   
includes/usercp_register.php

#
#-----[ FIND ]------------------------------------------
#

$unhtml_specialchars_replace = array('>', '<', '"', '&');

#
#-----[ AFTER, ADD ]------------------------------------------
#

// Start Website Signature removal mod

// Change "$ban_ip = false;" to "$ban_ip = true;" to ban the of the user if it tries to enter in something in the website or signature sections
$ban_ip = false;

// End Website Signature removal mod

#
#-----[ FIND ]------------------------------------------
#

      rawurlencode($website);
   }

#
#-----[ AFTER, ADD ]------------------------------------------
#

// Start Website Signature removal mod
   if ( ($mode == 'register') && (($signature != '')||($website != '')) )
   {
      if ($ban_ip == true)
      {
         $sql = "INSERT INTO ".BANLIST_TABLE." (`ban_ip`) VALUES ('".$userdata['session_ip']."')";
         if ( !$db->sql_query($sql))
         {
            message_die(GENERAL_ERROR, "Couldn't insert ban_ip info into database", "", __LINE__, __FILE__, $sql);
         }
      }
      session_end($userdata['session_id'], $userdata['user_id']);
      message_die(GENERAL_ERROR, 'Die robot!');
   }
// End Website Signature removal mod

#
#-----[ OPEN ]------------------------------------------
#

templates/subSilver/profile_add_body.tpl

#
#-----[ FIND ]------------------------------------------
#

   <tr>
     <td class="row1"><span class="gen">{L_WEBSITE}:</span></td>

#
#-----[ BEFORE, ADD ]------------------------------------------
#

   <!-- BEGIN switch_user_logged_in -->

#
#-----[ FIND ]------------------------------------------
#

   </tr>

#
#-----[ AFTER, ADD ]------------------------------------------
#

   <!-- END switch_user_logged_in -->

#
#-----[ FIND ]------------------------------------------
# note: Second line is longer than shown

   <tr>
     <td class="row1"><span class="gen">{L_SIGNATURE}

#
#-----[ BEFORE, ADD ]------------------------------------------
#

   <!-- BEGIN switch_user_logged_in -->

#
#-----[ FIND ]------------------------------------------
#

   </tr>

#
#-----[ AFTER, ADD ]------------------------------------------
#

   <!-- END switch_user_logged_in -->

#
#-----[ DIY INSTRUCTIONS ]------------------------------------------
#

If you want to ban the bot's IP address when they are denied,
  make sure you change the $ban_ip = false; to $ban_ip = true;
  If you don't know how to do that,
  open:
  includes/usercp_register.php

  find:
  $ban_ip = false;

  replace with:
  $ban_ip = true;


  This is not necessary, as the bot won't be allowed to register anyways,
  but if you want it to auto-ban that IP, go ahead...

#
#-----[ SAVE/CLOSE ALL FILES ]------------------------------------------
#
# EoM


The register php has that "die robot" thing in quite a few places, but it doesnt make any sense to me.
Back to top
Salvatos
Board Member



Joined: 19 Feb 2009

Posts: 415
Location: Québec


flag
PostPosted: Tue Mar 13, 2012 8:05 am 
Post subject: Re: How to disable spambot notification emails ?

I don't see anything there that would trigger an e-mail. Can you check the text of those e-mails and find which file in phpBB2/language/lang_english/email it corresponds to?
Back to top
circleofatlantis
Board Member



Joined: 13 Jul 2009

Posts: 13



PostPosted: Tue Mar 13, 2012 8:08 am 
Post subject: Re: How to disable spambot notification emails ?

This is an example of the email I get. I'll try to find what you asked for.

Quote:
There was a Spambot Registration Attempt at Games Unbalanced ! on Tue Mar 13, 2012 3:05 am.

SPAMBOT REGISTRATION DATA:

IP address: 193.105.210.149
Username: Edgetewizisse
E-mail address: fdsgsdfgsdfgsdfg@prokonto.pl

ICQ Number: 216824316
AIM Address:
MSN Messenger:
Yahoo Messenger:
Website: http://szklarskaporebanoclegi.net/
Location: Nicaragua
Occupation: Accounting, finance
Interests: Martial arts
Signature:


Edit :

Here we go :

Spambot_notify.tpl

Quote:
Subject: Spambot Registration Attempt
Charset: iso-8859-1

There was a Spambot Registration Attempt at {SITENAME} on {ATTEMPT_DATE}.

SPAMBOT REGISTRATION DATA:

IP address: {SPAMBOT_IP}
Username: {USERNAME}
E-mail address: {EMAIL_ADDRESS}

ICQ Number: {ICQ}
AIM Address: {AIM}
MSN Messenger: {MSN}
Yahoo Messenger: {YIM}
Website: {WEB_SITE}
Location: {FROM}
Occupation: {OCC}
Interests: {INTERESTS}
Signature: {SIGNATURE}

{EMAIL_SIG}


Edit 2 : I dont know if that is a standard file or not. There is no evidence I can find that its included in the mod.
Back to top
dogs and things
Board Member



Joined: 18 Nov 2008

Posts: 621
Location: Spain


flag
PostPosted: Tue Mar 13, 2012 8:31 am 
Post subject: Re: How to disable spambot notification emails ?

That's not a standard file, obviously it's part of the MOD

Did you install the MOD yourself?

We need to see the MOD install file, usually a .txt file with code change instructions.

_________________
phpBB2 will never die, I hope!
Back to top
circleofatlantis
Board Member



Joined: 13 Jul 2009

Posts: 13



PostPosted: Tue Mar 13, 2012 8:41 am 
Post subject: Re: How to disable spambot notification emails ?

Thats in my second post.

I'll have to try and find the archive it came from, but all thats in the sub directory under mods is that single file quoted above.
Back to top
dogs and things
Board Member



Joined: 18 Nov 2008

Posts: 621
Location: Spain


flag
PostPosted: Tue Mar 13, 2012 9:04 am 
Post subject: Re: How to disable spambot notification emails ?

Whoops,

I see you posted a file.

But the one you posted is not what causes those emails to be sent.

The MOD you posted disables the possibility of publishing a signature during the registration process but does not send any emails.

You'll need to find another MOD's install.txt

_________________
phpBB2 will never die, I hope!
Back to top
circleofatlantis
Board Member



Joined: 13 Jul 2009

Posts: 13



PostPosted: Tue Mar 13, 2012 11:07 am 
Post subject: Re: How to disable spambot notification emails ?

Found it.

I went into the mod section of one of my forums and looked at the mod history and found the right one in there, including its text.

It includes instructions on how to disable the emails. icon_smile.gif

So I think I'm happy now. Will upload the file to each forum and see what happens.

Thanks for your help.
Back to top
Salvatos
Board Member



Joined: 19 Feb 2009

Posts: 415
Location: Québec


flag
PostPosted: Tue Mar 13, 2012 5:56 pm 
Post subject: Re: How to disable spambot notification emails ?

Glad you found it icon_smile.gif
Back to top
lumpy burgertushie
Board Member



Joined: 19 Nov 2008

Posts: 216


flag
PostPosted: Sat Mar 17, 2012 12:53 am 
Post subject: Re: How to disable spambot notification emails ?

now that you have disabled it, you should disable the complete MOD as it is not working for you.
then, install the RAC MOD. it will stop all spambot registrations.

Code:
##############################################################
## MOD Title:      Registration Auth Code (RAC)
## MOD Author:       Marshalrusty < marshalrusty@phpbb.com > (Yuriy Rusko) http://www.phpbb.com/community/viewtopic.php?f=1&t=427852
## MOD Description:   This MOD is based on the "VIP Code MOD" by Martin Aignesberger. A number of improvements have been made to
##                  the aforementioned MOD including:
##                  1) Proper usage of language variables
##                  2) Proper usage of the phpBB MOD Template
##                  3) The removal of 2 unnecessary steps
##                  4) More detailed instructions
##
##                  This MOD will require users to enter an auth code during registration, which is defined by the administrator.
##                  Alternatively, the administrator may wish to ask a question, which the code would be the answer to
##                  Here are two examples of possible setups:
##                  
##                  http://www.marshalrusty.com/phpBB/spam/description.gif
##                  http://www.marshalrusty.com/phpBB/spam/question.gif
##
## MOD Version:    0.0.2
## Installation Level:   Easy
## Installation Time:   ~3 Minutes
## Files To Edit:    includes/usercp_register.php
##                  language/lang_english/lang_main.php
##                  templates/subSilver/profile_add_body.tpl
## Included Files:   N/A
##
## License: http://opensource.org/licenses/gpl-license.php GNU General Public License v2
##############################################################
## For security purposes, please check: http://www.phpbb.com/mods/
## for the latest version of this MOD. Although MODs are checked
## before being allowed in the MODs Database there is no guarantee
## that there are no security problems within the MOD. No support
## will be given for MODs not found within the MODs Database which
## can be found at http://www.phpbb.com/mods/
##############################################################
## Author Notes:
##
##
## Support for this MOD can be obtained here:
## http://www.phpbb.com/community/viewtopic.php?f=16&t=552845
##
## Before installing this MOD, please visit the URI above to make sure that you are installing the latest version.
##
##
##############################################################
## MOD History:
##   2007-07-22 - Version 0.0.2
##            - More user friendly error
##   2007-01-01 - Version 0.0.1
##############################################################
## Before Adding This MOD To Your Forum, You Should Back Up All Files Related To This MOD
##############################################################

#
#-----[ DIY ]------------------------------------------
#    
This MOD requires that you choose an auth code that users will have to enter during registration.
This code should be a string of numbers, letters and/or symbols. Valid examples would be:
'y5i4b3m', '1739575', 'eyrmoskd', '!@#$%^&', '1a!2b@', etc.

Remember that you will have to display this code somewhere for users to find and be able to
explain where it is located on the registration page. Instead of using a random string, you can
use "The first two words in the description of the first forum on the index page" or "The first
two words in this board's description (under the title in the header)" or something similar.
Here is an example: http://www.marshalrusty.com/phpBB/spam/description.gif

If you wish to make it even simpler, you may change the $lang['rac_location'] (below) to a question,
such as "How many fingers do people have?" or "What color is the sky?" and make the RAC code the answer.
Here is an example of how this would look: http://www.marshalrusty.com/phpBB/spam/question.gif

If after some time you notice an increase in the number of spam registrations, bots may have been
adapted to the system. Simple change the auth code and/or its location to throw them off again.

Please note the messages after the word "Hint:" in the instructions below; they contain further
instructions.

#
#-----[ OPEN ]------------------------------------------
#    
includes/usercp_register.php

#
#-----[ FIND ]------------------------------------------
#
   else if ( $mode == 'register' )
   {

#
#-----[ AFTER, ADD ]------------------------------------------
# Hint: Change the 'qwerty12345' to the auth code that you want to use
#   If you want the code to be case sensitive, use the following instead of the first line (without the # in front):
#   if ($HTTP_POST_VARS['RAC'] != 'qwerty12345')
#
      // RAC MOD Begin
        if (strtolower($HTTP_POST_VARS['RAC']) != 'qwerty12345')

        {
         $error = TRUE;
         $error_msg .= ( ( isset($error_msg) ) ? '<br />' : '' ) . $lang['rac_incorrect'];
        }
      // RAC MOD End

#
#-----[ FIND ]------------------------------------------
#
      'L_CONFIRM_CODE_EXPLAIN'   => $lang['Confirm_code_explain'],

#
#-----[ AFTER, ADD ]------------------------------------------
#
      // RAC MOD Begin
      'L_RAC_CODE'       => $lang['rac_code'],
      'L_RAC_LOCATION'   => $lang['rac_location'],
      // RAC MOD End

#
#-----[ OPEN ]------------------------------------------
#
language/lang_english/lang_main.php

#
#-----[ FIND ]------------------------------------------
#
//
// That's all, Folks!
// -------------------------------------------------

#
#-----[ BEFORE, ADD ]------------------------------------------
# Hint: Change the third definition to say where the code will be displayed. The link is
#   there as a guidelines; you don't necessarily need to use it.
#   You may also change $lang['rac_location'] to a question, to which the code is the answer.
#   Examples: http://www.marshalrusty.com/phpBB/spam/description.gif and http://www.marshalrusty.com/phpBB/spam/question.gif
#
// RAC MOD Begin
$lang['rac_incorrect'] = 'The authorization code you have entered is incorrect. The location of the code should be stated on the registration page. Please try again.';
$lang['rac_code'] = 'Authorization Code';
//in the line below, you can use html etc. but leave the single quotes and if you use any apostrophies/single quotes, escape them like this \'
$lang['rac_location'] = 'Type the location of your RAC Code or instructions here';
// RAC MOD End

#
#-----[ OPEN ]------------------------------------------
#
templates/subSilver/profile_add_body.tpl

#
#-----[ FIND ]------------------------------------------
#
   <tr>
     <td class="row1"><span class="gen">{L_CONFIRM_PASSWORD}: * </span><br />
      <span class="gensmall">{L_PASSWORD_CONFIRM_IF_CHANGED}</span></td>
     <td class="row2">
      <input type="password" class="post" style="width: 200px" name="password_confirm" size="25" maxlength="32" value="{PASSWORD_CONFIRM}" />
     </td>
   </tr>

#
#-----[ AFTER, ADD ]------------------------------------------
#
   <!-- BEGIN switch_user_logged_out -->
   <tr>
     <td class="row1"><span class="gen">{L_RAC_CODE}: * </span><br />
      <span class="gensmall">{L_RAC_LOCATION}</span></td>
     <td class="row2">
      <input type="text" class="post" style="width: 200px" name="RAC" size="25" maxlength="32" />
     </td>
   </tr>
   <!-- END switch_user_logged_out -->


#
#-----[ SAVE/CLOSE ALL FILES ]------------------------------------------
#
# EoM


good luck,

robert
Back to top
circleofatlantis
Board Member



Joined: 13 Jul 2009

Posts: 13



PostPosted: Sat Mar 17, 2012 2:36 am 
Post subject: Re: How to disable spambot notification emails ?

Thanks for that, I'll check it out.

The existing mod is working fine, it was just the notifications that were bothering me. But its always useful to have an alternative for when the bots adapt.
Back to top
lumpy burgertushie
Board Member



Joined: 19 Nov 2008

Posts: 216


flag
PostPosted: Sat Mar 17, 2012 3:26 pm 
Post subject: Re: How to disable spambot notification emails ?

circleofatlantis wrote:
Thanks for that, I'll check it out.

The existing mod is working fine, it was just the notifications that were bothering me. But its always useful to have an alternative for when the bots adapt.

the point is that with the RAC MOD, you will never get the emails because the registration will never complete, there will be record of the registration attempt. it will simply be stopped dead.


robert
Back to top
circleofatlantis
Board Member



Joined: 13 Jul 2009

Posts: 13



PostPosted: Sun Mar 18, 2012 2:28 am 
Post subject: Re: How to disable spambot notification emails ?

lumpy burgertushie wrote:
the point is that with the RAC MOD, you will never get the emails because the registration will never complete, there will be record of the registration attempt. it will simply be stopped dead.


Thats what the existing mod does as well. Only it had an email notification added as well, now removed.
Back to top
Display posts from previous:   
Register or Login to Post    Index » MOD Requests  Previous TopicPrint TopicNext Topic
Page 1 of 1 All times are GMT
 
Jump to:  

Index • About • FAQ • Rules • Privacy • Search •  Register •  Login 
Not affiliated with or endorsed by the phpBB Group
Powered by phpBB2 © phpBB Group
Generated in 0.0234 seconds using 15 queries. (SQL 0.0019 Parse 0.0007 Other 0.0209)
phpBB Customizations by the phpBBDoctor.com
Template Design by DeLFlo and MomentsOfLight.com Moments of Light Logo