[3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

A place for Extension Authors to post and receive feedback on Extensions still in development. No Extensions within this forum should be used within a live environment!
Ideas Centre
Forum rules
READ: phpBB.com Board-Wide Rules and Regulations

IMPORTANT: Extensions Development rules

IMPORTANT FOR NEEDED EVENTS!!!
If you need an event for your extension please read this for the steps to follow to request the event(s)
User avatar
Mick
Support Team Member
Support Team Member
Posts: 20110
Joined: Fri Aug 29, 2008 9:49 am
Location: Cardiff

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Post by Mick » Sun Apr 15, 2018 6:35 pm

If you put anything on the net, it’s too late.
"The more connected we get the more alone we become" - Kyle Broflovski

There are no ‘threads’ in phpBB, they are topics.

User avatar
HiFiKabin
Community Team Member
Community Team Member
Posts: 3244
Joined: Wed May 14, 2014 9:10 am
Location: Swearing at the PC, UK
Name: James
Contact:

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Post by HiFiKabin » Tue Apr 17, 2018 10:18 am

1.0.0-RC4 now available Image

Additional anti-SPAMbot feature added

To Update from previous version:
  • Download the latest release and unzip it.
  • Disable Obscure Registration Code in the ACP
  • Delete obscureregistrationcode folder from the server
  • Upload the folder hifikabin to root/ext/
  • Enable it in the ACP
  • Go to ACP>Extensions>Obscure Registration Code and change "ChangeMe" to something unique as described in the instructions
NOTE: If you are updating from RC1 or earlier, please disable and delete data before installing this version

This version has an added feature which removes the potential issue mentioned by martti in his posts above.

User avatar
martti
Registered User
Posts: 651
Joined: Thu Jul 31, 2014 8:23 am
Location: Belgium

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Post by martti » Tue Apr 17, 2018 10:58 am

Isn't the code somewhere on Github so it's easily to see the changes (diffs/commits)?

I still see this in overall_footer_copyright_append.html

Code: Select all

{% if not S_USER_LOGGED_IN and not S_IS_BOT %}
<input class="toggle-box" id="orc" type="checkbox" >
<label for="orc">{{ lang('REGISTRATIONCODE') }}</label>
<div id="{{( OBSCUREREGISTRATIONCODE_DIV )}}" class="{{( OBSCUREREGISTRATIONCODE_DIV )}}">
	<script>
		var orc = '{{( OBSCUREREGISTRATIONCODE )|escape('js')}}'
		var nbs = '\u2003'
		var ld = '\u26bf'
		var dl = '\u0020'
		document.write(ld + nbs + orc + nbs + dl); 
	</script>
	<noscript>
		{{ lang('NOSCRIPT')}}
	</noscript>
</div>
{% endif %}
The concept doesn't hold I'm afraid.

User avatar
HiFiKabin
Community Team Member
Community Team Member
Posts: 3244
Joined: Wed May 14, 2014 9:10 am
Location: Swearing at the PC, UK
Name: James
Contact:

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Post by HiFiKabin » Tue Apr 17, 2018 11:10 am

martti wrote:
Tue Apr 17, 2018 10:58 am
Isn't the code somewhere on Github so it's easily to see the changes (diffs/commits)?
I am afraid GitHub and myself do not get on

All I can say is it needs real life testing not code examination. You say my Obscure Contact Us is not SPAMproof yet I have has NO SPAM emails in the many (3+) years I have been using it, as well as no reports of SPAM from the 2000+ downloads. So my conclusion has to be that it works.

Would it work as well if everyone was using it? Probably not in the same way the RAC mod didn't work after it became more popular.

SPAM prevention is a never ending battle and the more options there are the harder it will be for a SPAMbot writer to allow for them all.

Since I have been working on this extension I have had it live on my fora (and Mick has been testing it as well)

Total SPAM signups? Zero. Yes I know its a small sample and therefore not representative which is why it needs further testing, and hence its place here.

You obviously do not like the concept (as is your right) but others do. ANY anti SPAM solution can be broken. I am not saying its perfect (in fact I state that in the FAQ) but its another option.

User avatar
remoss
Registered User
Posts: 95
Joined: Wed Jul 08, 2015 2:12 pm
Location: The Netherlands
Name: René
Contact:

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Post by remoss » Tue Apr 17, 2018 2:36 pm

Thanks for the update!

Don't know if it's even possible, but would it be nice to only see the link with "Show Registration Code" text only on the registration page: www.[mysite].com/ucp.php?mode=register ?

Just an idea :idea:

User avatar
stevemaury
Support Team Member
Support Team Member
Posts: 49556
Joined: Thu Nov 02, 2006 12:21 am
Location: The U.P.
Name: Steve
Contact:

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Post by stevemaury » Tue Apr 17, 2018 3:12 pm

It may be needed for guest posting or too many login attempts.
For REALLY good and VERY inexpensive hosting CLICK HERE

I can stop all your spam. PM or email me.

All unsolicited PMs will be ignored.

User avatar
HiFiKabin
Community Team Member
Community Team Member
Posts: 3244
Joined: Wed May 14, 2014 9:10 am
Location: Swearing at the PC, UK
Name: James
Contact:

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Post by HiFiKabin » Tue Apr 17, 2018 4:02 pm

stevemaury wrote:
Tue Apr 17, 2018 3:12 pm
It may be needed for guest posting or too many login attempts.
... and that is one of the reasons that I have now got the 'Show Registration Code' text in 'normal' font/size as opposed to how it was in the first version.

User avatar
remoss
Registered User
Posts: 95
Joined: Wed Jul 08, 2015 2:12 pm
Location: The Netherlands
Name: René
Contact:

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Post by remoss » Tue Apr 17, 2018 4:26 pm

Ah, oke, no problem!

User avatar
HiFiKabin
Community Team Member
Community Team Member
Posts: 3244
Joined: Wed May 14, 2014 9:10 am
Location: Swearing at the PC, UK
Name: James
Contact:

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Post by HiFiKabin » Wed Apr 18, 2018 12:14 pm

1.0.0-RC5 now available Image

Second Additional anti-SPAMbot feature added

To Update from previous version:
  • Download the latest release and unzip it.
  • Disable Obscure Registration Code in the ACP
  • Delete obscureregistrationcode folder from the server
  • Upload the folder hifikabin to root/ext/
  • Enable it in the ACP
  • Go to ACP>Extensions>Obscure Registration Code and change "ChangeMe" to something unique as described in the instructions
NOTE: If you are updating from RC1 or earlier, please disable and delete data before installing this version

User avatar
remoss
Registered User
Posts: 95
Joined: Wed Jul 08, 2015 2:12 pm
Location: The Netherlands
Name: René
Contact:

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Post by remoss » Thu Apr 19, 2018 7:49 am

Nice! could you tell how these "Additional SPAMbot Security" layers work? So how/why do they increase the SPAMbot resistance?

User avatar
HiFiKabin
Community Team Member
Community Team Member
Posts: 3244
Joined: Wed May 14, 2014 9:10 am
Location: Swearing at the PC, UK
Name: James
Contact:

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Post by HiFiKabin » Thu Apr 19, 2018 9:17 am

A SPAMbot obviously can not read but can be programmed to look certain for things, either by looking in a particular <div> or by the name of something within that div

If the div and contents name is a random string (as is now in the ext) then the BOT can not know what it is looking for. If the code does get programmed into a bot, then just change it and (again) they will have no idea what to look for.

I am not saying its perfect (or will always stop SPAMbots) but in the 10+ days its been on test (in its various forms) , myself and others have not had a nibble from a SPAMbot.

User avatar
david63
Jr. Extension Validator
Posts: 14724
Joined: Thu Dec 19, 2002 8:08 am
Location: Lancashire, UK
Name: David Wood
Contact:

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Post by david63 » Thu Apr 19, 2018 9:31 am

Have you considered generating a "random" div id each time the page is loaded?
David
Remember: You only know what you know and - you don't know what you don't know!
My CDB Contributions | How to install an extension
I will not be accepting translations for any of my extensions in Github - please post any translations in the appropriate topic.
No support requests via PM or email as they will be ignored

User avatar
HiFiKabin
Community Team Member
Community Team Member
Posts: 3244
Joined: Wed May 14, 2014 9:10 am
Location: Swearing at the PC, UK
Name: James
Contact:

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Post by HiFiKabin » Thu Apr 19, 2018 10:43 am

Mick actually suggested the same thing a couple of hours ago, and its something that has passed through my head as well. No idea how to do it right now but I will be looking so see how viable it would be.

User avatar
remoss
Registered User
Posts: 95
Joined: Wed Jul 08, 2015 2:12 pm
Location: The Netherlands
Name: René
Contact:

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Post by remoss » Thu Apr 19, 2018 10:55 am

HiFiKabin wrote:
Thu Apr 19, 2018 9:17 am
A SPAMbot obviously can not read but can be programmed to look certain for things, either by looking in a particular <div> or by the name of something within that div

If the div and contents name is a random string (as is now in the ext) then the BOT can not know what it is looking for. If the code does get programmed into a bot, then just change it and (again) they will have no idea what to look for.

I am not saying its perfect (or will always stop SPAMbots) but in the 10+ days its been on test (in its various forms) , myself and others have not had a nibble from a SPAMbot.
Clear, thanks for explaining, James!

User avatar
david63
Jr. Extension Validator
Posts: 14724
Joined: Thu Dec 19, 2002 8:08 am
Location: Lancashire, UK
Name: David Wood
Contact:

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Post by david63 » Thu Apr 19, 2018 11:34 am

HiFiKabin wrote:
Thu Apr 19, 2018 10:43 am
No idea how to do it right now
... but Mr Google does :D
David
Remember: You only know what you know and - you don't know what you don't know!
My CDB Contributions | How to install an extension
I will not be accepting translations for any of my extensions in Github - please post any translations in the appropriate topic.
No support requests via PM or email as they will be ignored

Post Reply

Return to “Extensions in Development”

Who is online

Users browsing this forum: No registered users and 25 guests