Spam on my PHPBB Board!

This is an archive of the phpBB 2.0.x support forum. Support for phpBB2 has now ended.
Forum rules
Following phpBB2's EoL, this forum is now archived for reference purposes only.
Please see the following announcement for more information: viewtopic.php?f=14&t=1385785
Locked
rocco.g
Registered User
Posts: 58
Joined: Sat Apr 03, 2004 9:29 am

Spam on my PHPBB Board!

Post by rocco.g »

hi!

i have phpBB 2.0.6 installed on my server... everything worked fine since one month ago!


Since then, a lot of spammer users sign in my forum and post a lot of (porno) spam messages with only a series of links and no text!

their nicks have strange numbers and letters, i think they use a program that generate random nicknames to sign in phpBB forums... do u think is it possible?

what i can do in order to solve the problem?
rocco.g
Registered User
Posts: 58
Joined: Sat Apr 03, 2004 9:29 am

Post by rocco.g »

i just read another topic with the same problem...


i try to install the antispam mod, so!


i hope it will work!
User avatar
KevC
Support Team Member
Support Team Member
Posts: 70397
Joined: Fri Jun 04, 2004 10:44 am
Location: Oxford, UK
Contact:

Re: Spam on my PHPBB Board!

Post by KevC »

rocco.g wrote: hi!

i have phpBB 2.0.6


Forget your spam MOD for the moment. UPDATE!

You're 14 versions out of date. A few spam bots are the least of your problems right now.

http://www.phpbb.com/kb/article.php?article_id=271

Updating will add visual confirmation to your registration which will stop a lot of the bots anyway.
-:|:- Support Request Template -:|:-
Image
Cheap UK Hosting
"In the land of the blind the little green bloke with no pupils is king - init!"
rocco.g
Registered User
Posts: 58
Joined: Sat Apr 03, 2004 9:29 am

Re: Spam on my PHPBB Board!

Post by rocco.g »

Kevin Clark wrote:
rocco.g wrote:hi!

i have phpBB 2.0.6


Forget your spam MOD for the moment. UPDATE!

You're 14 versions out of date. A few spam bots are the least of your problems right now.

http://www.phpbb.com/kb/article.php?article_id=271

Updating will add visual confirmation to your registration which will stop a lot of the bots anyway.


the problem is that i can't update my phpBB2 bacause it's too long and dangerous! i think! :(
User avatar
KevC
Support Team Member
Support Team Member
Posts: 70397
Joined: Fri Jun 04, 2004 10:44 am
Location: Oxford, UK
Contact:

Post by KevC »

Would you rather try something which might be tricky unless you try or lose the whole forum to some hackers?

If you have no MODs installed on your forum the update is really easy.
-:|:- Support Request Template -:|:-
Image
Cheap UK Hosting
"In the land of the blind the little green bloke with no pupils is king - init!"
rocco.g
Registered User
Posts: 58
Joined: Sat Apr 03, 2004 9:29 am

Post by rocco.g »

the problem is that i have at least three or four mods installed on my phpBB2 and so i don't know if it is possible to do a correct upgrade without losing anything... :(
User avatar
pentapenguin
Former Team Member
Posts: 11030
Joined: Thu Jul 01, 2004 4:15 am
Location: GA, USA

Post by pentapenguin »

As Kevin Clark said, you need to either update your forum or you will risk loosing your entire site. Since you are running such an old version, I would recommend the following:
  1. Download the latest version of phpBB. (Download the "Full Package" ZIP file.)
  2. Unzip the package. (If you need a ZIP program, use the free 7-Zip program.)
  3. On your website, make a full backup of all files and the database. (Either download the files via FTP or look for a backup program in your hosting control panel.)
  4. Once you have made a backup, delete all phpBB related files on your site except for config.php
  5. Upload the new phpBB files except for config.php, contrib directory, and the docs directory.
  6. Go to yoursite.com/<phpBB-install-path-here>/install/update_to_latest.php and follow the instructions.
  7. Once you are done there, delete the install directory on your site.
  8. Finally, reapply any MODs or styles.
For a more detailed explanation, see the Re-install / Update phpBB article in our Knowledge Base.

Thread Moved to Support
Support Resources: Support Request Template
If you need professional assistance with your board, please contact me for my reasonable rates.
kingscott
Registered User
Posts: 15
Joined: Fri Aug 27, 2004 2:48 am
Contact:

Post by kingscott »

You are risking a awfull lot simply because you don't want to do the work of upgrading.
rocco.g
Registered User
Posts: 58
Joined: Sat Apr 03, 2004 9:29 am

Post by rocco.g »

i have to study a lot because i'm during the period of my university exams :(


however, i try to follow ur advices, guys!

i'll do this tomorrow!


but i would like to undestand something before to do it...

i have MODs installed..

so i have to backup all my data and all my sql database, then i have to upload the latest version of phpBB2 by using always my old config.php file...
but before to follow the instructions i have to clean all the tables created with my previous MODs?

but i risk to lose all my old sql db?


is it really dangerous to leave my phpBB2 forum at the version 2.0.6? :(



(can i use a full modded-version of the latest phpBB2? so i don't have to install again my previous MODs)


p.s. sorry for my english... :(
User avatar
Lumpy Burgertushie
Registered User
Posts: 68495
Joined: Mon May 02, 2005 3:11 am
Contact:

Post by Lumpy Burgertushie »

sure , you can use a premodded version. however,
first, you would not get support for it here.

second, you may not find one with just the MODs you want.
third, they are very prone to be insecure and not kept up to date like the version get from here.

now, to upgrade your current board. It would be better to start fresh and only install the MODs that you really want and /or need.

however, there is a way to upgrade the files manually or with easymod.
you would use the MOD style upgrade found here:
Mod Updates


none of this will affect your data because it is separate from the phpbb files.

not upgrading is very risky and you stand to lose everything. You have to be really trying, before you can lose everything while upgrading.

robert
I'm baaaaaccckkkk. still doing work on donation basis. PM your needs.

Premium phpBB 3.3 Styles by PlanetStyles.net

If nobody is in the forest, does a tree really fall?
yellowishjazz
Registered User
Posts: 8
Joined: Sun Jun 04, 2006 3:48 am

Post by yellowishjazz »

I had the same problem on my forum last year. I hope you can get it fixed.
rocco.g
Registered User
Posts: 58
Joined: Sat Apr 03, 2004 9:29 am

Post by rocco.g »

ok...

i started the upgrade process ;)



but i have some problems... i'll post them in the correct forum section...


thanks to all!
dizzy05
Registered User
Posts: 26
Joined: Tue Jul 26, 2005 12:54 pm

Post by dizzy05 »

ok i am also having probs with bots reg and leaving links to porn sites etc my version is 2.0.18 and i have read and read and read all your advice and explinations on how to do it in the knowledge section and it all seems complicated and risky ..... and those that have done it have had probs after ...but like you say also above i dont want my site hacked ...BUT...

first i have no idea if my site as a MOD! or what one is
second alot of the explinations go right over my head. its not a matter of not wanting to do the work i just dont knw were to start or how ......why cant the update be like a msn update were u download it and it overwrites itself!!! lol :P www.dizzys-rottweilers.co.uk
jane x dizzy
LVZ
Registered User
Posts: 27
Joined: Fri Apr 30, 2004 7:35 pm
Location: Las Vegas
Contact:

Post by LVZ »

A simple quick fix for older 2.0.1x versions:

When I removed the web site URL field from registratation, URL spammers were still registering. These had to be 'bots' that could bypass my registration page. So, I made sure that any registration with a URL was AUTOMATICALLY killed by changing two files:

File #1: templates/subSilver/profile_add_body.tpl --- at about line 100, just comment out (or delete) website & location.

Code: Select all

<!--	<tr> 
	  <td class="row1"><span class="gen">{L_WEBSITE}:</span></td>
	  <td class="row2"> 
		<input type="text" class="post"style="width: 200px"  name="website" size="25" maxlength="255" value="{WEBSITE}" />
	  </td>
	</tr>
	<tr> 
	  <td class="row1"><span class="gen">{L_LOCATION}:</span></td>
	  <td class="row2"> 
		<input type="text" class="post"style="width: 200px"  name="location" size="25" maxlength="100" value="{LOCATION}" />
	  </td>
	</tr>
-->
File #2: includes/functions_validate.php --- about line 190, insert this kill code (start at echo):

Code: Select all

	if ($website != "")
	{
            echo "DIE, SPAMMER, DIE !!!\r\n";
            $website = 'spammer - no URL website addresses allowed';
            mysql_close(); ob_clean(); exit();
Locked

Return to “2.0.x Support Forum”