Page 2 of 3

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Posted: Sun Apr 15, 2018 6:35 pm
by Mick
If you put anything on the net, it’s too late.

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Posted: Tue Apr 17, 2018 10:18 am
by HiFiKabin
1.0.0-RC4 now available Image

Additional anti-SPAMbot feature added

To Update from previous version:
  • Download the latest release and unzip it.
  • Disable Obscure Registration Code in the ACP
  • Delete obscureregistrationcode folder from the server
  • Upload the folder hifikabin to root/ext/
  • Enable it in the ACP
  • Go to ACP>Extensions>Obscure Registration Code and change "ChangeMe" to something unique as described in the instructions
NOTE: If you are updating from RC1 or earlier, please disable and delete data before installing this version

This version has an added feature which removes the potential issue mentioned by martti in his posts above.

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Posted: Tue Apr 17, 2018 10:58 am
by martti
Isn't the code somewhere on Github so it's easily to see the changes (diffs/commits)?

I still see this in overall_footer_copyright_append.html

Code: Select all

{% if not S_USER_LOGGED_IN and not S_IS_BOT %}
<input class="toggle-box" id="orc" type="checkbox" >
<label for="orc">{{ lang('REGISTRATIONCODE') }}</label>
<div id="{{( OBSCUREREGISTRATIONCODE_DIV )}}" class="{{( OBSCUREREGISTRATIONCODE_DIV )}}">
	<script>
		var orc = '{{( OBSCUREREGISTRATIONCODE )|escape('js')}}'
		var nbs = '\u2003'
		var ld = '\u26bf'
		var dl = '\u0020'
		document.write(ld + nbs + orc + nbs + dl); 
	</script>
	<noscript>
		{{ lang('NOSCRIPT')}}
	</noscript>
</div>
{% endif %}
The concept doesn't hold I'm afraid.

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Posted: Tue Apr 17, 2018 11:10 am
by HiFiKabin
martti wrote:
Tue Apr 17, 2018 10:58 am
Isn't the code somewhere on Github so it's easily to see the changes (diffs/commits)?
I am afraid GitHub and myself do not get on

All I can say is it needs real life testing not code examination. You say my Obscure Contact Us is not SPAMproof yet I have has NO SPAM emails in the many (3+) years I have been using it, as well as no reports of SPAM from the 2000+ downloads. So my conclusion has to be that it works.

Would it work as well if everyone was using it? Probably not in the same way the RAC mod didn't work after it became more popular.

SPAM prevention is a never ending battle and the more options there are the harder it will be for a SPAMbot writer to allow for them all.

Since I have been working on this extension I have had it live on my fora (and Mick has been testing it as well)

Total SPAM signups? Zero. Yes I know its a small sample and therefore not representative which is why it needs further testing, and hence its place here.

You obviously do not like the concept (as is your right) but others do. ANY anti SPAM solution can be broken. I am not saying its perfect (in fact I state that in the FAQ) but its another option.

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Posted: Tue Apr 17, 2018 2:36 pm
by remoss
Thanks for the update!

Don't know if it's even possible, but would it be nice to only see the link with "Show Registration Code" text only on the registration page: www.[mysite].com/ucp.php?mode=register ?

Just an idea :idea:

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Posted: Tue Apr 17, 2018 3:12 pm
by stevemaury
It may be needed for guest posting or too many login attempts.

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Posted: Tue Apr 17, 2018 4:02 pm
by HiFiKabin
stevemaury wrote:
Tue Apr 17, 2018 3:12 pm
It may be needed for guest posting or too many login attempts.
... and that is one of the reasons that I have now got the 'Show Registration Code' text in 'normal' font/size as opposed to how it was in the first version.

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Posted: Tue Apr 17, 2018 4:26 pm
by remoss
Ah, oke, no problem!

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Posted: Wed Apr 18, 2018 12:14 pm
by HiFiKabin
1.0.0-RC5 now available Image

Second Additional anti-SPAMbot feature added

To Update from previous version:
  • Download the latest release and unzip it.
  • Disable Obscure Registration Code in the ACP
  • Delete obscureregistrationcode folder from the server
  • Upload the folder hifikabin to root/ext/
  • Enable it in the ACP
  • Go to ACP>Extensions>Obscure Registration Code and change "ChangeMe" to something unique as described in the instructions
NOTE: If you are updating from RC1 or earlier, please disable and delete data before installing this version

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Posted: Thu Apr 19, 2018 7:49 am
by remoss
Nice! could you tell how these "Additional SPAMbot Security" layers work? So how/why do they increase the SPAMbot resistance?

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Posted: Thu Apr 19, 2018 9:17 am
by HiFiKabin
A SPAMbot obviously can not read but can be programmed to look certain for things, either by looking in a particular <div> or by the name of something within that div

If the div and contents name is a random string (as is now in the ext) then the BOT can not know what it is looking for. If the code does get programmed into a bot, then just change it and (again) they will have no idea what to look for.

I am not saying its perfect (or will always stop SPAMbots) but in the 10+ days its been on test (in its various forms) , myself and others have not had a nibble from a SPAMbot.

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Posted: Thu Apr 19, 2018 9:31 am
by david63
Have you considered generating a "random" div id each time the page is loaded?

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Posted: Thu Apr 19, 2018 10:43 am
by HiFiKabin
Mick actually suggested the same thing a couple of hours ago, and its something that has passed through my head as well. No idea how to do it right now but I will be looking so see how viable it would be.

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Posted: Thu Apr 19, 2018 10:55 am
by remoss
HiFiKabin wrote:
Thu Apr 19, 2018 9:17 am
A SPAMbot obviously can not read but can be programmed to look certain for things, either by looking in a particular <div> or by the name of something within that div

If the div and contents name is a random string (as is now in the ext) then the BOT can not know what it is looking for. If the code does get programmed into a bot, then just change it and (again) they will have no idea what to look for.

I am not saying its perfect (or will always stop SPAMbots) but in the 10+ days its been on test (in its various forms) , myself and others have not had a nibble from a SPAMbot.
Clear, thanks for explaining, James!

Re: [3.1][3.2][RC] Obscure Registration Code (SPAM stopper)

Posted: Thu Apr 19, 2018 11:34 am
by david63
HiFiKabin wrote:
Thu Apr 19, 2018 10:43 am
No idea how to do it right now
... but Mr Google does :D