[2.0.20] ConfusaBOT ACP

All new MODs released in our MOD Database will be announced in here. All support for released MODs needs to take place in here. No new MODs will be accepted into the MOD Database for phpBB2
Forum rules
READ: phpBB.com Board-Wide Rules and Regulations

On February 1, 2009 this forum will be set to read only as part of retiring of phpBB2.
Post Reply

Rating:

Excellent!
9
56%
Very Good
1
6%
Good
3
19%
Fair
1
6%
Poor
2
13%
 
Total votes: 16

n1h
Registered User
Posts: 5
Joined: Thu Nov 16, 2006 7:36 am
Location: venice, california
Contact:

still having problems

Post by n1h » Fri Nov 17, 2006 6:17 am

Ah... I see it does say clearly:

Code: Select all

## IMPORTANT!!!!!!!!!!!!!
## If you are using any templates other than subSilver, overall_header.tpl, admin/board_config_body.tpl, and admin/styles_edit_body.tpl in each of them will need to be modified, as well.
Unfortunately I have no idea how those files would need to be modified.
Anyway I switched my forum back to subSilver and uploaded my modified
templates/subSilver/admin/board_config_body.tpl
But it still doesn't work, it still takes me back to the agreement terms when I submit.

I also tried copying profile_add_body.tpl from subSilver to my template
but I'm confused again by that suggestion because the instructions don't say anything about modifying that file.

espicom
Registered User
Posts: 17905
Joined: Wed Dec 22, 2004 1:14 am
Location: Woodstock, IL

Re: still having problems

Post by espicom » Fri Nov 17, 2006 7:24 am

n1h wrote: Unfortunately I have no idea how those files would need to be modified.
Anyway I switched my forum back to subSilver and uploaded my modified
templates/subSilver/admin/board_config_body.tpl
But it still doesn't work, it still takes me back to the agreement terms when I submit.

I also tried copying profile_add_body.tpl from subSilver to my template
but I'm confused again by that suggestion because the instructions don't say anything about modifying that file.


My bad - the changes are to includes/usercp_register.php - the template stuff only applies to the admin portion. Copying the modified templates/subSilver/admin/board_config_body.tpl to your template would be all that is needed on that front.

It would seem that you missed this portion of the MOD to includes/usercp_register.php:

Code: Select all

#
#-----[ FIND ]------------------------------------------
# Partial line match. Actual line is much longer.
#
	$s_hidden_fields = '<input type="hidden" name="mode" value="
#
#-----[ IN-LINE FIND ]------------------------------------------
#
<input type="hidden" name="agreed" value="true" /><input type="hidden" name="coppa"
#
#-----[ IN-LINE REPLACE WITH ]---------------------------------------------
#
<input type="hidden" name="'.$board_config['agreed_var'].'" value="'.$board_config['agreed_val'].'" /><input type="hidden" name="'.$board_config['coppa_var'].'"
This sets the hidden variables used by the post... I had thought they were in the template, but they're not.
Jeff
Fixing 1016/1030/1034 Errors | (obsolete link) | MySQL 4.1/5.x Client Error | phpBBv2 Logo in ACP
Support requests via PM are ignored!
"To be fully alive is to feel that everything is possible." - Eric Hoffer

n1h
Registered User
Posts: 5
Joined: Thu Nov 16, 2006 7:36 am
Location: venice, california
Contact:

fixed

Post by n1h » Fri Nov 17, 2006 10:22 am

You are the man. That was indeed the bit of code that I was missing.
First I got it working with subSilver then I got it working with my old template.
Here's to hoping to foil at least a few bot registrations with my new variables.
Thank you very much for the help.

zentex
Registered User
Posts: 21
Joined: Thu Jul 14, 2005 1:58 pm
Location: Georgia

Post by zentex » Tue Nov 21, 2006 3:58 am

ok...I'm running a freshly upgraded 2.0.21 (from 2.0.17).

I installed this mod, and now when you click register you get a blank page and in the apache log there is this:

Code: Select all

PHP Parse error:  syntax error, unexpected T_CONSTANT_ENCAPSED_STRING in /usr/local/apache2/htdocs/chsc.us/forum_html/includes/usercp_register.php on line 64, referer: http://forums.chsc.us/index.php
Line 64:

Code: Select all

 "U_AGREE_UNDER13" => append_sid("profile.$phpEx?mode=register&". $board_config['agreed_var'] ."=". $board_config['agreed_val'] ."&".$board_config['coppa_var']."=true"))
I've searched, re-checked, re-done, etc etc and am at a total loss.

updated to add: when logged in, and you click on "profile" you get a blank page and the same error in the apache log.

espicom
Registered User
Posts: 17905
Joined: Wed Dec 22, 2004 1:14 am
Location: Woodstock, IL

Post by espicom » Tue Nov 21, 2006 10:32 pm

The error is probably in the line ABOVE this one.... an unclosed quote. Check line 60 through 63 to make sure all your quote characters are "balanced".
Jeff
Fixing 1016/1030/1034 Errors | (obsolete link) | MySQL 4.1/5.x Client Error | phpBBv2 Logo in ACP
Support requests via PM are ignored!
"To be fully alive is to feel that everything is possible." - Eric Hoffer

zentex
Registered User
Posts: 21
Joined: Thu Jul 14, 2005 1:58 pm
Location: Georgia

Post by zentex » Wed Nov 22, 2006 12:12 am

Code: Select all

function show_coppa()
{
        global $userdata, $template, $lang, $phpbb_root_path, $phpEx, $board_config;
        $template->set_filenames(array(
                'body' => 'agreement.tpl')
        );

        $template->assign_vars(array(
                'REGISTRATION' => $lang['Registration'],
                'AGREEMENT' => $lang['Reg_agreement'],
                "AGREE_OVER_13" => $lang['Agree_over_13'],
                "AGREE_UNDER_13" => $lang['Agree_under_13'],
                'DO_NOT_AGREE' => $lang['Agree_not'],
                "U_AGREE_OVER13" => append_sid("profile.$phpEx?mode=register&". $board_config['agreed_var'] ."=".$board_config ['agreed_val']"),
                "U_AGREE_UNDER13" => append_sid("profile.$phpEx?mode=register&". $board_config['agreed_var'] ."=". $board_config['agreed_val'] ."&".$board_config['coppa_var']."=true"))
        );

        $template->pparse('body');

}
everything in that function looks balanced to me...

zentex
Registered User
Posts: 21
Joined: Thu Jul 14, 2005 1:58 pm
Location: Georgia

Post by zentex » Wed Nov 22, 2006 4:21 am

ok...I found the issue

Code: Select all

#-----[ FIND ]------------------------------------------
# Partial line match. Actual line is much longer.
#
		"U_AGREE_OVER13" =>
#
#-----[ IN-LINE FIND ]------------------------------------------
#
&agreed=true"
#
#-----[ IN-LINE REPLACE WITH ]---------------------------------------------
#
&". $board_config['agreed_var'] ."=".$board_config['agreed_val']
the stuff to replace is missing a ." on the end...it should be

Code: Select all

&". $board_config['agreed_var'] ."=".$board_config['agreed_val']."
I added the ." (line 63 btw) and it started to work.

...but I wonder why I'm the only one to run into this?

espicom
Registered User
Posts: 17905
Joined: Wed Dec 22, 2004 1:14 am
Location: Woodstock, IL

Post by espicom » Wed Nov 22, 2006 6:07 am

You haven't fixed the problem - you've covered it up. According to my text editor (Ultraedit), the error is in this line:
"U_AGREE_OVER13" => append_sid("profile.$phpEx?mode=register&". $board_config['agreed_var'] ."=".$board_config ['agreed_val']"),


The extra quote is at the end of that line... and you balanced it by your addition, effectively removing the next line from the program.
Jeff
Fixing 1016/1030/1034 Errors | (obsolete link) | MySQL 4.1/5.x Client Error | phpBBv2 Logo in ACP
Support requests via PM are ignored!
"To be fully alive is to feel that everything is possible." - Eric Hoffer

yongkian
Registered User
Posts: 92
Joined: Sat Jul 17, 2004 1:44 pm
Location: Singapore

Post by yongkian » Wed Nov 22, 2006 6:14 am

after install this MOD...porn bot still can get through :(

zentex
Registered User
Posts: 21
Joined: Thu Jul 14, 2005 1:58 pm
Location: Georgia

Post by zentex » Wed Nov 22, 2006 12:33 pm

espicom wrote: You haven't fixed the problem - you've covered it up.


:oops: indeed

thank you for the help.

n1h
Registered User
Posts: 5
Joined: Thu Nov 16, 2006 7:36 am
Location: venice, california
Contact:

unfortunately didn't help very much

Post by n1h » Thu Nov 23, 2006 8:26 pm

well i'm glad i installed it and maybe it is stopping a couple
of bots so i'll leave it that way but i'm going to have to add
some more layers of anti-bot security 'cause about 10 a day
still get through. i'm going to try removing the website field
from the sign up page next i guess.

Grayson
Registered User
Posts: 24
Joined: Fri Feb 27, 2004 4:23 am
Location: Tupelo - Mississippi
Contact:

Post by Grayson » Sat Nov 25, 2006 1:42 am

I've installed the mod and it seems to work w/o any error. However, when test registering, it takes me to the user agreement. Clicking on under 13 OR over 13 links takes me back to the same user agreement page.

Therefore, no one will be able to register. What am I missing?

Thanks
G

PS: Solved! Figured out I had not inserted the MySQL statement into the correct DB. I had a previous DB go haywire and had to reinstall an older backup a few months ago. Found my error and all works fine now that I'm using the valid DB. It's been a whole five minutes and no spam!! Works so far. If it continues or not, I will update. Thanks!

Grayson
Registered User
Posts: 24
Joined: Fri Feb 27, 2004 4:23 am
Location: Tupelo - Mississippi
Contact:

Post by Grayson » Mon Nov 27, 2006 9:47 pm

Back again. About 4 hours after installing this mod correctly, I have had the first spam-bot register ... although they did not post.

I noticed another problem as well, my admin index page is messed up with bad links, etc. Anyone else had this problem?

cleaverX
Registered User
Posts: 18
Joined: Thu Dec 23, 2004 4:27 pm

Post by cleaverX » Thu Nov 30, 2006 8:30 pm

hi,

how come some bots do get through this mod?


I would like to write a 'mod' -i mean try it- for the registration process. I'm not very familiar with the phpbb code though. Anyone who has some experience with dealing with bots & spammers, could you give me some response if this would be a good idea?

-Idea 1: renaming the profile.php file, and changing the content of whatever links to this page.
-Idea 2: if you just add a text field to the registration process, and you ask users to type in a text when they register. In the registration process you check the text they typed in. This is the same as the captcha, but the bots will not be able to read what you have asked the user to do? Do they?
Imagine I ask:

Please type in the last word of the sentence above to check if you are a human.


The last word is of course a parameter which you can change. Would bots get throug? (Of course if the MOD gets famous, they might make a workaround too.)

Any reaction is welcome, sorry if I'm asking FAQ's, but I'm new to fighting bots.
Greetz

espicom
Registered User
Posts: 17905
Joined: Wed Dec 22, 2004 1:14 am
Location: Woodstock, IL

Post by espicom » Fri Dec 01, 2006 1:10 am

Any bot CAN go through this MOD; alone, it only blocks the stupid ones. As has been posted before, while this MOD was 100% effective in January 2005, when I first mentioned it. And its effectiveness by itself has been falling since then, because the bots have been getting smarter...

I monitor what gets input to our registration process, and about 60% of the recent spam registrations attempts have the default values for these variables in the POST... sometimes WITH the new ones we use. I even see some that have every permutation of the agreed/coppa variables that was posted in the Fighting spam registration bots topic over the past 22 months.

That's why my boards do not rely upon JUST this MOD, and why the original "agreed" is one of the triggers of the Instant Ban MOD.

Bots can get through just about anything. One of "the gang" of helpful people who hang out in the support area has been running tests over the past week on different MODs and their effectiveness against a particular bot that is very popular right now... and found that the two most effective (so far) are changing the Visual Confirmation image generator ([BETA] FreeCap Visual Confirmation 0.0.3) and this one. He's also testing several of the "humanizer" MODs, similar to your idea, and has not found any to be as effective as the FreeCap VC generator.
Jeff
Fixing 1016/1030/1034 Errors | (obsolete link) | MySQL 4.1/5.x Client Error | phpBBv2 Logo in ACP
Support requests via PM are ignored!
"To be fully alive is to feel that everything is possible." - Eric Hoffer

Post Reply

Return to “[2.0.x] MOD Database Releases”