Ban all gmail "multiple dot" users

Get help with installation and running phpBB 3.3.x here. Please do not post bug reports, feature requests, or extension related questions here.
vatreni
Registered User
Posts: 39
Joined: Sat Jul 16, 2022 1:07 pm

Ban all gmail "multiple dot" users

Post by vatreni »

Current: 3.3.9
Planned 3.3.11

My query is a follow-up on viewtopic.php?t=2167909 from many years ago.

I have a Q&A spambot question in place, but this isn't stopping real (shady) people signing up with
[email protected]
[email protected]
etc etc

Banning by IP, email and even country (I have Filter by country extension) isn't working as they are obviously using VPNs to keep popping up all over.

I don't want to make the Q&A question so difficult as to be ungoogleable, so I'm wondering if the idea to ban

*.*.*.*@gmail.com
or even
*.*.*@gmail.com

still works, as I don't know any genuine gmail users who have more than one dot, so happy to rule out any gmail address with 2 dots or more.
User avatar
Mick
Support Team Member
Support Team Member
Posts: 26829
Joined: Fri Aug 29, 2008 9:49 am

Re: Ban all gmail "multiple dot" users

Post by Mick »

Can you post a link to your board please?
  • "The more connected we get the more alone we become” - Kyle Broflovski© 🇬🇧
User avatar
thecoalman
Community Team Member
Community Team Member
Posts: 6305
Joined: Wed Dec 22, 2004 3:52 am
Location: Pennsylvania, U.S.A.

Re: Ban all gmail "multiple dot" users

Post by thecoalman »

There is no way to do this with phpBB, you'd need a extension or some custom code.

For custom code search for the function function validate_user_email in /includes/functions_user.php
“Results! Why, man, I have gotten a lot of results! I have found several thousand things that won’t work.”

Attributed - Thomas Edison
User avatar
Mick
Support Team Member
Support Team Member
Posts: 26829
Joined: Fri Aug 29, 2008 9:49 am

Re: Ban all gmail "multiple dot" users

Post by Mick »

vatreni wrote: Wed Mar 27, 2024 3:19 pmI don't want to make the Q&A question so difficult as to be ungoogleable
Thats exactly what it needs to be, ungoogleable, I found the correct answer to your Q&A first hit, if I can so can the bots and that’s where your spam is coming from.
  • "The more connected we get the more alone we become” - Kyle Broflovski© 🇬🇧
exemplary1
Registered User
Posts: 195
Joined: Mon Feb 05, 2024 11:41 am

Re: Ban all gmail "multiple dot" users

Post by exemplary1 »

vatreni wrote: Wed Mar 27, 2024 3:19 pm
I don't want to make the Q&A question so difficult as to be ungoogleable, so I'm wondering if the idea to ban
For Q&A, you can create difficult/random multiple Q&A, create a post where all Question-Answers are and provide a link on registration form to it, if your forum is visible without registering. So user can open the post to find answers. No need of Googling.
User avatar
warmweer
Jr. Extension Validator
Posts: 11660
Joined: Fri Jul 04, 2003 6:34 am
Location: Van Allen Bel ... gium

Re: Ban all gmail "multiple dot" users

Post by warmweer »

exemplary1 wrote: Thu Mar 28, 2024 6:36 am ...
For Q&A, you can create difficult/random multiple Q&A, create a post where all Question-Answers are and provide a link on registration form to it, if your forum is visible without registering. So user can open the post to find answers. No need of Googling.
You've lost me there.
I thought the point was to prevent/minimise spam registrations, not to reduce the efficacy of antispam measures :roll: :?:
Spelling is freeware, which means you can use it for free.
On the other hand, it is not open source, which means you cannot change it or publish it in a modified form.


Time flies like an arrow, but fruit flies like a banana.
exemplary1
Registered User
Posts: 195
Joined: Mon Feb 05, 2024 11:41 am

Re: Ban all gmail "multiple dot" users

Post by exemplary1 »

warmweer wrote: Thu Mar 28, 2024 7:04 am
exemplary1 wrote: Thu Mar 28, 2024 6:36 am ...
For Q&A, you can create difficult/random multiple Q&A, create a post where all Question-Answers are and provide a link on registration form to it, if your forum is visible without registering. So user can open the post to find answers. No need of Googling.
You've lost me there.
I thought the point was to prevent/minimise spam registrations, not to reduce the efficacy of antispam measures :roll: :?:
I was thinking about stopping auto-bots capable of finding answer from AI (chatgpt like). Some of the bots might have capability of googling the answer.
Yes, it can be programmed to open link and get answer, too. But its less likely someone doing for just one forum.
One can scramble the answer to make it difficult for bot.
User avatar
warmweer
Jr. Extension Validator
Posts: 11660
Joined: Fri Jul 04, 2003 6:34 am
Location: Van Allen Bel ... gium

Re: Ban all gmail "multiple dot" users

Post by warmweer »

Just about anything visible to the public is also visible to bots (bots are recognised by the user_agent >>> unknown user_agent = Guest and the spambots change user_agent regularly).

Also you're making it a piece of cake for human spammers by providing the answer to the QA.
Spelling is freeware, which means you can use it for free.
On the other hand, it is not open source, which means you cannot change it or publish it in a modified form.


Time flies like an arrow, but fruit flies like a banana.
User avatar
Kailey
Community Team Leader
Community Team Leader
Posts: 3886
Joined: Mon Sep 01, 2014 1:00 am
Location: sudo rm -rf /
Name: Kailey Snay

Re: Ban all gmail "multiple dot" users

Post by Kailey »

exemplary1 wrote: Thu Mar 28, 2024 6:36 am For Q&A, you can create difficult/random multiple Q&A, create a post where all Question-Answers are and provide a link on registration form to it, if your forum is visible without registering. So user can open the post to find answers. No need of Googling.
That's really problematic advice.

A good, single Q&A will stop spam registrations and if they do happen to break the Q&A, simply change the Q&A. Multiple Q&A questions make it difficult to track down which one allowed the successful registration. There are also multiple anti-spam extensions that can assist in stopping spam.
Kailey Snay - Community Team Leader
Knowledge Base | Documentation | Community rules
If you have any questions about the rules/customs of this website, feel free to send me a PM.

My little corner of the world | Administrator @ phpBB Modders
exemplary1
Registered User
Posts: 195
Joined: Mon Feb 05, 2024 11:41 am

Re: Ban all gmail "multiple dot" users

Post by exemplary1 »

I was in impression that multiple QA is a better choice (Actually I do have multiple QAs, but my forum is yet to get some decent traffic, so no spamming problem yet).
But for tracking purpose, of course, not a good idea.
vatreni
Registered User
Posts: 39
Joined: Sat Jul 16, 2022 1:07 pm

Re: Ban all gmail "multiple dot" users

Post by vatreni »

I presume you all run forum(s).

A forum for enthusiasts of ABCDE should be reasonably accessible and open to people who are mildly interested in ABCDE as well as those who know it intimately. How on earth would you propose I find a question whose answer is known to this cohort, but not to google or ai?

Let's give an example ABCDE. The Triumph Dolomite. Note this isn't my forum but happens to be a phpbb forum with a Q&A. How many wheel nuts does a Dolomite have in total?

This is googleable and chatgpt-able in seconds. What ungoogleable question would you suggest that would let genuine people in, but keep out spammers? I can't think of one.
User avatar
KevC
Support Team Member
Support Team Member
Posts: 72565
Joined: Fri Jun 04, 2004 10:44 am
Location: Oxford, UK

Re: Ban all gmail "multiple dot" users

Post by KevC »

You can ask a question about something in the logo. You can ask for a word somewhere on a page, like the first word of the first forum etc. Those kinds of questions need some understanding and logic of how to work out the answer. AI is not so good at those.
-:|:- Support Request Template -:|:-
Image
"Step up to red alert. Sir, are you absolutely sure? It does mean changing the bulb"
User avatar
Mick
Support Team Member
Support Team Member
Posts: 26829
Joined: Fri Aug 29, 2008 9:49 am

Re: Ban all gmail "multiple dot" users

Post by Mick »

vatreni wrote: Thu Mar 28, 2024 4:36 pmHow many wheel nuts does a Dolomite have
This is easy for a bot, first try one, nope, try two, no, try three, doubtful, try four - Bingo I’m in!!
  • "The more connected we get the more alone we become” - Kyle Broflovski© 🇬🇧
exemplary1
Registered User
Posts: 195
Joined: Mon Feb 05, 2024 11:41 am

Re: Ban all gmail "multiple dot" users

Post by exemplary1 »

vatreni wrote: Thu Mar 28, 2024 4:36 pm What ungoogleable question would you suggest that would let genuine people in, but keep out spammers? I can't think of one.
Here,
viewtopic.php?p=15996874#p15996874

Also one my question is, what is the name of my website ? Although being a new forum, I dont have much traffic, I would remove the question if my forum suddenly starts getting spams.
User avatar
KevC
Support Team Member
Support Team Member
Posts: 72565
Joined: Fri Jun 04, 2004 10:44 am
Location: Oxford, UK

Re: Ban all gmail "multiple dot" users

Post by KevC »

exemplary1 wrote: Thu Mar 28, 2024 6:15 pm Here,
viewtopic.php?p=15996874#p15996874
If that question works for you that's fine but as you can see from the AI responses, there isn't ONE definitive answer that 'most' people might think of.

Hopefully the website name question works ok but again there's some ambiguity for people answering. Do you mean (for example) http://www.tropicalfishemporium.com, or www.tropicalfishemporium.com, or Tropical Fish Emporium or THE tropical fish emporium, or tropical fish, etc etc.
-:|:- Support Request Template -:|:-
Image
"Step up to red alert. Sir, are you absolutely sure? It does mean changing the bulb"

Return to “[3.3.x] Support Forum”