[MODDB] Security Question

A place for MOD Authors to post and receive feedback on MODs still in development. No MODs within this forum should be used within a live environment! No new topics are allowed in this forum.
Forum rules
READ: phpBB.com Board-Wide Rules and Regulations

IMPORTANT: MOD Development Forum rules

On February 1, 2009 this forum will be set to read only as part of retiring of phpBB2.
Locked
James N
Registered User
Posts: 1737
Joined: Sat May 20, 2006 12:57 pm
Contact:

[MODDB] Security Question

Post by James N » Sun Jan 21, 2007 9:30 am

MOD Title: Security Question

MOD Description: This mod asks a question during registration needs some rational thought put in to the answer, thus stopping a spambot. In addition it hides the profile fields during registration. So a human spammer who never intends to confirm his membership can not leave a spam URL in any of the fields. Also, a wrong answer re directs you to the index page.

The question and answer are configerable in the ACP to any you choose

MOD Version: 1.0.0

MOD Download: http://www.photosbyjames.net/security_q ... _1.0.0.zip

Thanks to the author of the VIP MOD, which inspired me to come up with this idea, and to CoC who helped me with the SQL coding and making it MOD compliant.


I have been running the non ACP configerable version on my forum for 4+ months and not had one spambot join the forum. Having the question and answer configerable from the ACP means that the answer need never appears on the forum. The answer can be numerical or text, although it is case sensitive.

It will install with easymod

I am afraid I am unable to have a demo board for you to try, but the screenshots below show how it looks.

Image

Image

EDIT:- I have changed the position of the switch to make it look a lot neater. Latest version is downloadable from the above link

FAQ

~~~~~

Q How do I read the MOD file?
A Right click, and open it in any text editor

~~~~~

Q What files do I edit to do this?

Code: Select all

INSERT INTO phpbb_config (config_name, config_value) VALUES ('securityquestion','How many days in a year?');
INSERT INTO phpbb_config (config_name, config_value) VALUES ('securityanswer','365');
A Go to your php myadmin. Most likely http://www.yoursitename.com/forum/phpmyadmin
Enter your SQL user name and password.
Select your database from the drop down menu on the left. Then just click the SQL tab. Then you will get an empty SQL query window.
Cut and paste

Code: Select all

INSERT INTO phpbb_config (config_name, config_value) VALUES ('securityquestion','How many days in a year?');
INSERT INTO phpbb_config (config_name, config_value) VALUES ('securityanswer','365');
in to the window,
press go.
If you click on phpbb_config and browse through it, on the last page you will see the new rows in alphabetical order. Then just log out.

~~~~~


Q The question and answer fields are empty in the ACP. What do I do?
A See answer above

~~~~~

Q Will this MOD work with styles other than subSilver?
A Yes, just do the same edits to admin/board_config_body.tpl and profile_add_body.tpl in the style(s) you want as are listed to edit in the subSilver files.

~~~~~

Q What versions of phpBB will it work on?
A I have only tested it on 2.0.21 and later. It should work on earlier versions, but you are better off up dating your forum first, then install this MOD

edit reason:- FAQ added
edit reason:- Correction
Last edited by James N on Sat Jun 09, 2007 5:29 pm, edited 8 times in total.

User avatar
kber
Registered User
Posts: 986
Joined: Sun May 07, 2006 9:22 am
Location: Egypt
Contact:

Post by kber » Sun Jan 21, 2007 10:26 am

Code: Select all

The page cannot be found

James N
Registered User
Posts: 1737
Joined: Sat May 20, 2006 12:57 pm
Contact:

Post by James N » Sun Jan 21, 2007 10:31 am

kber wrote:

Code: Select all

The page cannot be found


My bad. Sorted it now.

deejaybet
Registered User
Posts: 1814
Joined: Thu Dec 08, 2005 2:01 pm
Location: Derry, Northern Ireland
Contact:

Post by deejaybet » Sun Jan 21, 2007 11:09 pm

kool mod :) got it submitted now and everything even better :)

James N
Registered User
Posts: 1737
Joined: Sat May 20, 2006 12:57 pm
Contact:

Post by James N » Mon Jan 22, 2007 8:59 am

deejaybet wrote: kool mod :) got it submitted now and everything even better :)


Thanks. I submittes it yesterday :D

User avatar
KevC
Support Team Member
Support Team Member
Posts: 68332
Joined: Fri Jun 04, 2004 10:44 am
Location: Oxford, UK
Contact:

Post by KevC » Wed Jan 24, 2007 9:50 am

Looks like a nice alternative to the VIP MOD. Allows some scope if the bots crack the vip :)
-:|:- Support Request Template -:|:-
Image
Cheap UK Hosting
"In the land of the blind the little green bloke with no pupils is king - init!"

User avatar
RATT
Registered User
Posts: 734
Joined: Fri Aug 19, 2005 6:27 am

Post by RATT » Wed Jan 24, 2007 8:48 pm

Whats the purpose in this bit of code in the mod?

Code: Select all

#
#-----[ FIND ]--------------------------------------
#

<tr> 
     <td class="row1"><span class="gen">{L_ICQ_NUMBER}:</span></td>     
     
# 
#-----[ BEFORE, ADD ]------------------------------------------
# 

   <!-- BEGIN switch_user_logged_in -->

#
#-----[ FIND ]------------------------------------------
#   
      <textarea name="signature" style="width: 300px" rows="6" cols="30" class="post">{SIGNATURE}</textarea>
     </td>
   </tr>   
   
# 
#-----[ AFTER, ADD ]------------------------------------------
# 

   <!-- END switch_user_logged_in -->

James N
Registered User
Posts: 1737
Joined: Sat May 20, 2006 12:57 pm
Contact:

Post by James N » Wed Jan 24, 2007 8:58 pm

RATT wrote: Whats the purpose in this bit of code in the mod?



Its hides

ICQ Number:
AIM Address:
MSN Messenger:
Yahoo Messenger:
Website:
Location:
Occupation:
Interests:
Signature:

from the registration page, but allows them to a registered user. The idea is human spammers who never intend to confirm the membership cant leave spam URL's there.

deejaybet
Registered User
Posts: 1814
Joined: Thu Dec 08, 2005 2:01 pm
Location: Derry, Northern Ireland
Contact:

Post by deejaybet » Wed Jan 24, 2007 9:03 pm

hey may i ask a question about your screenshots?

well i am anyway :)
what theme are you using for your forum in the screenshot?

James N
Registered User
Posts: 1737
Joined: Sat May 20, 2006 12:57 pm
Contact:

Post by James N » Wed Jan 24, 2007 9:05 pm

deejaybet wrote: hey may i ask a question about your screenshots?

well i am anyway :)
what theme are you using for your forum in the screenshot?


Its a colour tweeked subSilver.

deejaybet
Registered User
Posts: 1814
Joined: Thu Dec 08, 2005 2:01 pm
Location: Derry, Northern Ireland
Contact:

Post by deejaybet » Wed Jan 24, 2007 9:32 pm

aw right... can u send me the css then :)

James N
Registered User
Posts: 1737
Joined: Sat May 20, 2006 12:57 pm
Contact:

Post by James N » Fri Jan 26, 2007 1:46 pm

I have changed the position of the switch to make the registration page look a lot neater. Latest version is downloadable from the link in the first post.

Any feedback would be more than welcome

asif2000
Registered User
Posts: 25
Joined: Fri Feb 25, 2005 7:16 pm

Post by asif2000 » Sat Jan 27, 2007 7:07 pm

I like this mod. How hard would it be to change the mod so so that it would just add the security question and NOT hide the ICQ Number, AIM Address, MSN Messenger, Yahoo Messenger, etc. during registration?

Thanks!!

James N
Registered User
Posts: 1737
Joined: Sat May 20, 2006 12:57 pm
Contact:

Post by James N » Sat Jan 27, 2007 7:19 pm

Simple enough to do. Just omit the following code from the MOD (line 215 onwards)

Code: Select all

   <!-- BEGIN switch_user_logged_in -->

#
#-----[ FIND ]------------------------------------------
#
      <textarea name="signature" style="width: 300px" rows="6" cols="30" class="post">{SIGNATURE}</textarea>
     </td>
   </tr>

#
#-----[ AFTER, ADD ]------------------------------------------
#

   <!-- END switch_user_logged_in -->
That will leave the Public Profile fields intact. Although if you use the MOD as posted, the member can just add those fields once they have logged on to the forum.

rgATL
Registered User
Posts: 27
Joined: Mon Nov 13, 2006 9:37 pm

Post by rgATL » Sun Jan 28, 2007 9:39 pm

Hey,

Nice mod! How does it differ from MagMo's question mod? ( http://www.phpbb.com/phpBB/viewtopic.php?t=383305 )
Why install one versus the other?

I'm am just getting killed by spam on my forum, and I'm trying to pick the right solution to fight it.

Also, can EasyMod install your mod without hiding the profile info? How can I make it do so (just delete those lines?)?

Thanks,
rg.

Locked

Return to “[2.0.x] MODs in Development”

Who is online

Users browsing this forum: No registered users and 18 guests