Best way to secure a new board?

Get help with installation and running phpBB 3.2.x here. Please do not post bug reports, feature requests, or extension related questions here.
morkus
Registered User
Posts: 34
Joined: Fri May 25, 2018 11:52 am

Best way to secure a new board?

Post by morkus » Sat May 26, 2018 10:00 am

Getting ready to roll out my first phpBB forum.

Wondering which is the best way to keep trolls and the like out of the board:

1. Moderate the account setup, but let users have full access after that.

2. Allow users to register with login, but have the "new users" permission set so they're initially moderated (not sure exactly how new users are able to then post without moderation)

3. Other?

Obviously, I don't want to have to sit and click-to-allow things all day long. :)

--

This will be a community board so if someone got on to the board and posted unwanted content, it could spoil the rollout.

Look forward to any suggestions.

Thanks,

User avatar
Mick
Support Team Member
Support Team Member
Posts: 20132
Joined: Fri Aug 29, 2008 9:49 am
Location: Cardiff

Re: Best way to secure a new board?

Post by Mick » Sat May 26, 2018 10:06 am

Presumably you’re talking about spam? That being the case I suggest you follow Knowledge Base - How to configure Q&A CAPTCHA.. Make absolutely sure your Q&A can’t be Googled, this is important. Also, if you set the newly registered user group post threshold to one no new members will be able to post until you’ve approved their first post.
"The more connected we get the more alone we become" - Kyle Broflovski

There are no ‘threads’ in phpBB, they are topics.

morkus
Registered User
Posts: 34
Joined: Fri May 25, 2018 11:52 am

Re: Best way to secure a new board?

Post by morkus » Sat May 26, 2018 11:21 am

No, not spam. Really worried about some bad actor creating quick account access and then posting unwanted images or other unwanted content.

Perhaps if they register by email, this situation is less likely?

I could be overthinking this...

Thanks,

User avatar
stevemaury
Support Team Member
Support Team Member
Posts: 49557
Joined: Thu Nov 02, 2006 12:21 am
Location: The U.P.
Name: Steve
Contact:

Re: Best way to secure a new board?

Post by stevemaury » Sat May 26, 2018 3:30 pm

That is spam. What Mick said addresses the issue. There is no "quick account access". If you use a good Q&A CAPTCHA, set the New member post limit to one and do not allow Guest posting, you will have no problems.
For REALLY good and VERY inexpensive hosting CLICK HERE

I can stop all your spam. PM or email me.

All unsolicited PMs will be ignored.

morkus
Registered User
Posts: 34
Joined: Fri May 25, 2018 11:52 am

Re: Best way to secure a new board?

Post by morkus » Sat May 26, 2018 4:23 pm

My default board already has a hard-to-read captcha so I guess I'm good there.

Thanks! :)

User avatar
HiFiKabin
Community Team Member
Community Team Member
Posts: 3245
Joined: Wed May 14, 2014 9:10 am
Location: Swearing at the PC, UK
Name: James
Contact:

Re: Best way to secure a new board?

Post by HiFiKabin » Sat May 26, 2018 4:38 pm

morkus wrote:
Sat May 26, 2018 4:23 pm
My default board already has a hard-to-read captcha so I guess I'm good there.

Thanks! :)
Hard to read? If you mean the squiggly letters then you will get spammers.

See the following for advice

viewtopic.php?p=15020351#p15020351

Please visit Preventing Spam in phpBB3 for various options for fighting spam in phpBB.

How to configure Q&A
  1. Administration Control Panel (ACP) > Spambot countermeasures> Installed plugins > click the dropdown box and select Q&A (it will be greyed out)
  2. Click the configure button then click add
  3. Add your question and answer (you need a Q&A for each language you have installed) click submit
  4. Click "back to previous page" then click "back"
  5. Select Q&A from the dropdown box (again)
  6. Click submit at the bottom of the page.
  7. Done.

morkus
Registered User
Posts: 34
Joined: Fri May 25, 2018 11:52 am

Re: Best way to secure a new board?

Post by morkus » Sat May 26, 2018 5:13 pm

Gotcha. Thanks for persistence.

I created a question about something local to the area for the board. It's a question that's not directly Google-able since I didn't include the state.

I always thought the captcha stuff was good, but I appreciate the heads up on that. :)

Thanks again to all.

User avatar
Mick
Support Team Member
Support Team Member
Posts: 20132
Joined: Fri Aug 29, 2008 9:49 am
Location: Cardiff

Re: Best way to secure a new board?

Post by Mick » Sat May 26, 2018 5:23 pm

morkus wrote:
Sat May 26, 2018 5:13 pm
I always thought the captcha stuff was good
It was, back in the day you could just reply to a question “are you human?” yes or no and that was it but things advance. That’s why you have to be sneaky with spam bots. It can take them a while but they will crack whatever you do eventually.
"The more connected we get the more alone we become" - Kyle Broflovski

There are no ‘threads’ in phpBB, they are topics.

morkus
Registered User
Posts: 34
Joined: Fri May 25, 2018 11:52 am

Re: Best way to secure a new board?

Post by morkus » Sat May 26, 2018 5:33 pm

Wow. Did not know this.

I currently have all the spiders/robots items at their default settings. Well, I did enable "AdsBot [Google]" just because .... :shock:

Thanks again, Mick.

User avatar
stevemaury
Support Team Member
Support Team Member
Posts: 49557
Joined: Thu Nov 02, 2006 12:21 am
Location: The U.P.
Name: Steve
Contact:

Re: Best way to secure a new board?

Post by stevemaury » Sat May 26, 2018 5:33 pm

If you give us a link to your board, we can tell you if your question will work.
For REALLY good and VERY inexpensive hosting CLICK HERE

I can stop all your spam. PM or email me.

All unsolicited PMs will be ignored.

User avatar
thecoalman
Community Team Member
Community Team Member
Posts: 2797
Joined: Wed Dec 22, 2004 3:52 am
Location: Pennsylvania, U.S.A.
Contact:

Re: Best way to secure a new board?

Post by thecoalman » Sun May 27, 2018 8:20 am

morkus wrote:
Sat May 26, 2018 5:33 pm
Wow. Did not know this.

I currently have all the spiders/robots items at their default settings. Well, I did enable "AdsBot [Google]" just because .... :shock:

Thanks again, Mick.
The bots in the bots group are not the bots that will be spamming your forum. They are used by companies like google to index content for things like their search engine rslts. The Google adbots is specifically for adsense and used to index content for displaying ads on your site if you have an adsense account.

morkus
Registered User
Posts: 34
Joined: Fri May 25, 2018 11:52 am

Re: Best way to secure a new board?

Post by morkus » Sun May 27, 2018 10:45 am

Understood, but I really don't want Google in my knickers (or anywhere else), so to speak...

User avatar
Mick
Support Team Member
Support Team Member
Posts: 20132
Joined: Fri Aug 29, 2008 9:49 am
Location: Cardiff

Re: Best way to secure a new board?

Post by Mick » Sun May 27, 2018 10:50 am

Google bot = good (helps index your board)
Spam bot = bad (no good to man or beast)

If you don’t want the search bots to visit your board give the bots group a no access role.
"The more connected we get the more alone we become" - Kyle Broflovski

There are no ‘threads’ in phpBB, they are topics.

morkus
Registered User
Posts: 34
Joined: Fri May 25, 2018 11:52 am

Re: Best way to secure a new board?

Post by morkus » Sun May 27, 2018 11:50 am

Not sure how exactly do do that.

User avatar
stevemaury
Support Team Member
Support Team Member
Posts: 49557
Joined: Thu Nov 02, 2006 12:21 am
Location: The U.P.
Name: Steve
Contact:

Re: Best way to secure a new board?

Post by stevemaury » Sun May 27, 2018 1:56 pm

ACP, Permissions tab, Group forum permissions, Bots group, all forums, Role, No access.
stevemaury wrote:
Sat May 26, 2018 5:33 pm
If you give us a link to your board, we can tell you if your question will work.
For REALLY good and VERY inexpensive hosting CLICK HERE

I can stop all your spam. PM or email me.

All unsolicited PMs will be ignored.

Post Reply

Return to “[3.2.x] Support Forum”

Who is online

Users browsing this forum: geohei, invenio, kamaleon, shortmort37, static1635, stevemaury and 65 guests