Page 1 of 17

[MODDB] Security Question

Posted: Sun Jan 21, 2007 9:30 am
by James N
MOD Title: Security Question

MOD Description: This mod asks a question during registration needs some rational thought put in to the answer, thus stopping a spambot. In addition it hides the profile fields during registration. So a human spammer who never intends to confirm his membership can not leave a spam URL in any of the fields. Also, a wrong answer re directs you to the index page.

The question and answer are configerable in the ACP to any you choose

MOD Version: 1.0.0

MOD Download: http://www.photosbyjames.net/security_q ... _1.0.0.zip

Thanks to the author of the VIP MOD, which inspired me to come up with this idea, and to CoC who helped me with the SQL coding and making it MOD compliant.


I have been running the non ACP configerable version on my forum for 4+ months and not had one spambot join the forum. Having the question and answer configerable from the ACP means that the answer need never appears on the forum. The answer can be numerical or text, although it is case sensitive.

It will install with easymod

I am afraid I am unable to have a demo board for you to try, but the screenshots below show how it looks.

Image

Image

EDIT:- I have changed the position of the switch to make it look a lot neater. Latest version is downloadable from the above link

FAQ

~~~~~

Q How do I read the MOD file?
A Right click, and open it in any text editor

~~~~~

Q What files do I edit to do this?

Code: Select all

INSERT INTO phpbb_config (config_name, config_value) VALUES ('securityquestion','How many days in a year?');
INSERT INTO phpbb_config (config_name, config_value) VALUES ('securityanswer','365');
A Go to your php myadmin. Most likely http://www.yoursitename.com/forum/phpmyadmin
Enter your SQL user name and password.
Select your database from the drop down menu on the left. Then just click the SQL tab. Then you will get an empty SQL query window.
Cut and paste

Code: Select all

INSERT INTO phpbb_config (config_name, config_value) VALUES ('securityquestion','How many days in a year?');
INSERT INTO phpbb_config (config_name, config_value) VALUES ('securityanswer','365');
in to the window,
press go.
If you click on phpbb_config and browse through it, on the last page you will see the new rows in alphabetical order. Then just log out.

~~~~~


Q The question and answer fields are empty in the ACP. What do I do?
A See answer above

~~~~~

Q Will this MOD work with styles other than subSilver?
A Yes, just do the same edits to admin/board_config_body.tpl and profile_add_body.tpl in the style(s) you want as are listed to edit in the subSilver files.

~~~~~

Q What versions of phpBB will it work on?
A I have only tested it on 2.0.21 and later. It should work on earlier versions, but you are better off up dating your forum first, then install this MOD

edit reason:- FAQ added
edit reason:- Correction

Posted: Sun Jan 21, 2007 10:26 am
by kber

Code: Select all

The page cannot be found

Posted: Sun Jan 21, 2007 10:31 am
by James N
kber wrote:

Code: Select all

The page cannot be found


My bad. Sorted it now.

Posted: Sun Jan 21, 2007 11:09 pm
by deejaybet
kool mod :) got it submitted now and everything even better :)

Posted: Mon Jan 22, 2007 8:59 am
by James N
deejaybet wrote: kool mod :) got it submitted now and everything even better :)


Thanks. I submittes it yesterday :D

Posted: Wed Jan 24, 2007 9:50 am
by KevC
Looks like a nice alternative to the VIP MOD. Allows some scope if the bots crack the vip :)

Posted: Wed Jan 24, 2007 8:48 pm
by RATT
Whats the purpose in this bit of code in the mod?

Code: Select all

#
#-----[ FIND ]--------------------------------------
#

<tr> 
     <td class="row1"><span class="gen">{L_ICQ_NUMBER}:</span></td>     
     
# 
#-----[ BEFORE, ADD ]------------------------------------------
# 

   <!-- BEGIN switch_user_logged_in -->

#
#-----[ FIND ]------------------------------------------
#   
      <textarea name="signature" style="width: 300px" rows="6" cols="30" class="post">{SIGNATURE}</textarea>
     </td>
   </tr>   
   
# 
#-----[ AFTER, ADD ]------------------------------------------
# 

   <!-- END switch_user_logged_in -->

Posted: Wed Jan 24, 2007 8:58 pm
by James N
RATT wrote: Whats the purpose in this bit of code in the mod?



Its hides

ICQ Number:
AIM Address:
MSN Messenger:
Yahoo Messenger:
Website:
Location:
Occupation:
Interests:
Signature:

from the registration page, but allows them to a registered user. The idea is human spammers who never intend to confirm the membership cant leave spam URL's there.

Posted: Wed Jan 24, 2007 9:03 pm
by deejaybet
hey may i ask a question about your screenshots?

well i am anyway :)
what theme are you using for your forum in the screenshot?

Posted: Wed Jan 24, 2007 9:05 pm
by James N
deejaybet wrote: hey may i ask a question about your screenshots?

well i am anyway :)
what theme are you using for your forum in the screenshot?


Its a colour tweeked subSilver.

Posted: Wed Jan 24, 2007 9:32 pm
by deejaybet
aw right... can u send me the css then :)

Posted: Fri Jan 26, 2007 1:46 pm
by James N
I have changed the position of the switch to make the registration page look a lot neater. Latest version is downloadable from the link in the first post.

Any feedback would be more than welcome

Posted: Sat Jan 27, 2007 7:07 pm
by asif2000
I like this mod. How hard would it be to change the mod so so that it would just add the security question and NOT hide the ICQ Number, AIM Address, MSN Messenger, Yahoo Messenger, etc. during registration?

Thanks!!

Posted: Sat Jan 27, 2007 7:19 pm
by James N
Simple enough to do. Just omit the following code from the MOD (line 215 onwards)

Code: Select all

   <!-- BEGIN switch_user_logged_in -->

#
#-----[ FIND ]------------------------------------------
#
      <textarea name="signature" style="width: 300px" rows="6" cols="30" class="post">{SIGNATURE}</textarea>
     </td>
   </tr>

#
#-----[ AFTER, ADD ]------------------------------------------
#

   <!-- END switch_user_logged_in -->
That will leave the Public Profile fields intact. Although if you use the MOD as posted, the member can just add those fields once they have logged on to the forum.

Posted: Sun Jan 28, 2007 9:39 pm
by rgATL
Hey,

Nice mod! How does it differ from MagMo's question mod? ( http://www.phpbb.com/phpBB/viewtopic.php?t=383305 )
Why install one versus the other?

I'm am just getting killed by spam on my forum, and I'm trying to pick the right solution to fight it.

Also, can EasyMod install your mod without hiding the profile info? How can I make it do so (just delete those lines?)?

Thanks,
rg.