[ABD] No more spambots

[jalaln]

MOD Title: No more spambots.
MOD Description: Blocks registrations from timezone UTC - 12 (Baker Island Time) that is used by almost all spambots.
MOD Version: RC 1.0.0

MOD Download:

Code: Select all

#
#-----[ OPEN ]------------------------------------------
#
includes/ucp/ucp_register.php

#
#-----[ FIND ]------------------------------------------
#

$data = array(
			'username'			=> utf8_normalize_nfc(request_var('username', '', true)),
			'new_password'		=> request_var('new_password', '', true),
			'password_confirm'	=> request_var('password_confirm', '', true),
			'email'				=> strtolower(request_var('email', '')),
			'email_confirm'		=> strtolower(request_var('email_confirm', '')),
			'confirm_code'		=> request_var('confirm_code', ''),
			'lang'				=> basename(request_var('lang', $user->lang_name)),
			'tz'				=> request_var('tz', (float) $timezone),
		);

#
#----[ AFTER, ADD ]------------------------------------------
#

			if ($data['tz'] == -12.00)
			{
				die('Die, bot! Die.');
			}

#
#-----[ SAVE/CLOSE ALL FILES ]------------------------------------------
#
# EoM

Notes:
DON'T WORRY ABOUT BLOCKING UTC-12.

No human habitations are in this time zone.

UTC-12 is a nautical time zone comprising the high seas between 180°W and 172°30'W longitude.
Subtract twelve hours from Coordinated Universal Time to obtain the time for this zone.
Ships using this time are the last to begin each calendar day.

But, why is it used by all spambots? Well, because they are coded to select the first option in any dropdown box.

People can still select UTC-12 after they register, in their profiles.

Now you can unban most of your blocked IPs, disallowed names, blocked domains...

I've been using this MOD since 19 June 2007 on phpBB2, and since converting to phpBB3. I have never ever had a single spambot. I have no other anti-spambots MODs installed and visual confirmation turned off.

Enjoy!

NOTE: Same MOD for phpBB2: http://www.phpbb.com/community/viewtopi ... 6&t=555959

[vxchev]

Thanks

[jalaln]

Thanks

You're welcome!

I converted to phpBB3 yesterday and 4 spambots registered - I really don't want to have any captcha in the registration page so I was a bit frustrated but hey, I said let's check their timezones, hope they registered GMT-12 like in phpBB2 ... and yes!

[igorw]

Hi,

nice idea. I have a suggestion though. First of all, warn the normal user not to pick that option, by adding a notice to the language file.

Secondly, this here:

Code: Select all

die('Die, bot! Die.');

Should use trigger_error(), and it should go into a language string. So a german would get: "Stirb, bot! Stirb."

[r1chardyoung]

Script added - thank you

[jalaln]

eviL<3: The goal of this MOD is to stop spambots in the quickest and easiest way possible (only 2 lines of codes to add and 1 file to edit). No one will choose UTC-12 but only bots. Secondly, the die function could be left empty:

Code: Select all

if ($data['tz'] == '-12.00')
 {
  die();
 }

[elazard]

hello
just a little question :
are you sure that bots register with UTC-12 ? i mean it seems weird that bot identify themselves that way

[jalaln]

hello
just a little question :
are you sure that bots register with UTC-12 ? i mean it seems weird that bot identify themselves that way

Yes. All spambots (at least that I know of) register UTC-12 because they are coded to select the first option in any dropdown box. And luckily, the first option is UTC-12 which is a nautical time zone where no human habitations are there.

[igorw]

eviL<3: The goal of this MOD is to stop spambots in the quickest and easiest way possible (only 2 lines of codes to add and 1 file to edit). No one will choose UTC-12 but only bots. Secondly, the die function could be left empty:

Code: Select all

if ($data['tz'] == '-12.00')
 {
  die();
 }

The easiest way possible is not always the best... if a user (for whatever reason) chooses UTC-12, you may want to show him something nicer than a blank page.

Also, phpBB3 uses exit; instead of die; Or even better: exit_handler();. Also, $data['tz'] is a float, so you should not have quotes around -12.00 (allthough having quotes would also work, but it's not so clean).

[*Capmaster*]

Brilliant. So simple, yet so effective!

Nice work!!!

I had captcha turned on, but I don't really want to discourage some from joining (there are those who won't bother with captcha). Now I can turn captcha off

[jalaln]

eviL<3 - I don't see any problem using the die function.

As for what you suggested, the code could be edited to this:

Code: Select all

    if ($data['tz'] == -12.00) // quotes removed
    {
      die("Please do not select timezone UTC-12 as this is used by spambots. However, if you do live in this timezone, please select it after you register from your UCP. Thanks.");  // nicer message
    }

[*Capmaster*]

Thanks jalaln. That's certainly nicer than wishing they would expire

Although, if I was certain only the spammers would see it, I would strive to make it much, much nastier - perhaps something involving their unnatural, unwholesome fondness for tubercular livestock I HATE spammers with a glowing passion

I've changed mine to your suggestion above

[jalaln]

The same MOD for phpBB2 has some tips, like redirecting to another website or pages that may crash your PC or make it looks like the registration has successfully completed, other tricks like blocking multiple timezones, etc. Check out the topic in the first post.

[Gremlinn]

This is an interesting idea. I'm now curious to see that time zone I have written another solution which seems to do the trick as well. Perhaps double protection and install both! (check my signature for my mod).

I think I will try this one in addition to mine.

[*Capmaster*]

On my phpBB2 forum I had random math, wordmatch and graphic tests to screen out the spammer scum, and while I'm sure it worked since the spammers stopped cold, I suspect it also kept away some members who didn't want registration to be as difficult as their SAT tests

That's the beauty of this mod - it works without any added inconvenience to the new members