@KevC: We tried Q&A before, it doesn't work period. I guess you need to change the questions often which asks for more maintenance. Google reCAPTCHA is way more better and works just fine. Anyway, it's not even the problem, we are not talking about bots but humans that just register manually and then using a script to spam. Newly registered users group where their posts cannot be seen? I fail to understand how it's useful, a new member wants their post to be seen so it can be replied. Like I said before, it's not about restricting active members, they will never posts as much an an automatic script, no real user will ever see that message. See the calculation I posted to @juliokr,
@warmweer: Yes a brute force attack if succesful is very bad, yes it's worse than a user posting messages constantly. And yes there's solution to both of them.
@Jodi-86 That's a very good alternative with the first 2 posts that needs approval, the only problem like I said is that I don't log in daily, if a user post and I come back 5 days later, it's not nice to the user. An activation email code could work better in my case if I receive an email and I could just hit reply and send it to the user, I'll have to check that, it's just not as automatic as I'd like it to be, both for me and the new user.
@AmigoJack You just made a good point, the max # of posts per day could be done by groups or by user instead of being global, so newly registered users could be like maximum X posts a day (I'd personally set it at 3) and regular members would have a limit of 1000 or so, that would work so good. Yes, like you said, the automatic script is probably trying to post every 3 seconds and not waiting a full minute, if it's logged somewhere, I could make a script that will detect it and do an appropriate action, problem is that it is a shared hosting account, I think the apache logs are only visibile in cPanel and I would have to code something home-made. It could work though but lots of work, it would be better to be integrated in phpBB. No we're not using moderation queue, the forum is as much as automatic as I can without me doing anything and it works just fine as it is right now except for the rare multi-posts-spam, I don't really mind the occasional spammer who just post once and leave.
As for anyone thinking this is still a stupid idea, well... other forums have it!
https://xenforo.com/community/resources ... imit.1919/