Page 1 of 2

Best way to secure a new board?

Posted: Sat May 26, 2018 10:00 am
by morkus
Getting ready to roll out my first phpBB forum.

Wondering which is the best way to keep trolls and the like out of the board:

1. Moderate the account setup, but let users have full access after that.

2. Allow users to register with login, but have the "new users" permission set so they're initially moderated (not sure exactly how new users are able to then post without moderation)

3. Other?

Obviously, I don't want to have to sit and click-to-allow things all day long. :)

--

This will be a community board so if someone got on to the board and posted unwanted content, it could spoil the rollout.

Look forward to any suggestions.

Thanks,

Re: Best way to secure a new board?

Posted: Sat May 26, 2018 10:06 am
by Mick
Presumably you’re talking about spam? That being the case I suggest you follow Knowledge Base - How to configure Q&A CAPTCHA.. Make absolutely sure your Q&A can’t be Googled, this is important. Also, if you set the newly registered user group post threshold to one no new members will be able to post until you’ve approved their first post.

Re: Best way to secure a new board?

Posted: Sat May 26, 2018 11:21 am
by morkus
No, not spam. Really worried about some bad actor creating quick account access and then posting unwanted images or other unwanted content.

Perhaps if they register by email, this situation is less likely?

I could be overthinking this...

Thanks,

Re: Best way to secure a new board?

Posted: Sat May 26, 2018 3:30 pm
by stevemaury
That is spam. What Mick said addresses the issue. There is no "quick account access". If you use a good Q&A CAPTCHA, set the New member post limit to one and do not allow Guest posting, you will have no problems.

Re: Best way to secure a new board?

Posted: Sat May 26, 2018 4:23 pm
by morkus
My default board already has a hard-to-read captcha so I guess I'm good there.

Thanks! :)

Re: Best way to secure a new board?

Posted: Sat May 26, 2018 4:38 pm
by HiFiKabin
morkus wrote:
Sat May 26, 2018 4:23 pm
My default board already has a hard-to-read captcha so I guess I'm good there.

Thanks! :)
Hard to read? If you mean the squiggly letters then you will get spammers.

See the following for advice

viewtopic.php?p=15020351#p15020351

Please visit Preventing Spam in phpBB3 for various options for fighting spam in phpBB.

How to configure Q&A
  1. Administration Control Panel (ACP) > Spambot countermeasures> Installed plugins > click the dropdown box and select Q&A (it will be greyed out)
  2. Click the configure button then click add
  3. Add your question and answer (you need a Q&A for each language you have installed) click submit
  4. Click "back to previous page" then click "back"
  5. Select Q&A from the dropdown box (again)
  6. Click submit at the bottom of the page.
  7. Done.

Re: Best way to secure a new board?

Posted: Sat May 26, 2018 5:13 pm
by morkus
Gotcha. Thanks for persistence.

I created a question about something local to the area for the board. It's a question that's not directly Google-able since I didn't include the state.

I always thought the captcha stuff was good, but I appreciate the heads up on that. :)

Thanks again to all.

Re: Best way to secure a new board?

Posted: Sat May 26, 2018 5:23 pm
by Mick
morkus wrote:
Sat May 26, 2018 5:13 pm
I always thought the captcha stuff was good
It was, back in the day you could just reply to a question “are you human?” yes or no and that was it but things advance. That’s why you have to be sneaky with spam bots. It can take them a while but they will crack whatever you do eventually.

Re: Best way to secure a new board?

Posted: Sat May 26, 2018 5:33 pm
by morkus
Wow. Did not know this.

I currently have all the spiders/robots items at their default settings. Well, I did enable "AdsBot [Google]" just because .... :shock:

Thanks again, Mick.

Re: Best way to secure a new board?

Posted: Sat May 26, 2018 5:33 pm
by stevemaury
If you give us a link to your board, we can tell you if your question will work.

Re: Best way to secure a new board?

Posted: Sun May 27, 2018 8:20 am
by thecoalman
morkus wrote:
Sat May 26, 2018 5:33 pm
Wow. Did not know this.

I currently have all the spiders/robots items at their default settings. Well, I did enable "AdsBot [Google]" just because .... :shock:

Thanks again, Mick.
The bots in the bots group are not the bots that will be spamming your forum. They are used by companies like google to index content for things like their search engine rslts. The Google adbots is specifically for adsense and used to index content for displaying ads on your site if you have an adsense account.

Re: Best way to secure a new board?

Posted: Sun May 27, 2018 10:45 am
by morkus
Understood, but I really don't want Google in my knickers (or anywhere else), so to speak...

Re: Best way to secure a new board?

Posted: Sun May 27, 2018 10:50 am
by Mick
Google bot = good (helps index your board)
Spam bot = bad (no good to man or beast)

If you don’t want the search bots to visit your board give the bots group a no access role.

Re: Best way to secure a new board?

Posted: Sun May 27, 2018 11:50 am
by morkus
Not sure how exactly do do that.

Re: Best way to secure a new board?

Posted: Sun May 27, 2018 1:56 pm
by stevemaury
ACP, Permissions tab, Group forum permissions, Bots group, all forums, Role, No access.
stevemaury wrote:
Sat May 26, 2018 5:33 pm
If you give us a link to your board, we can tell you if your question will work.