Page 1 of 1

Forum registration security

Posted: Jan 21st, 2011 10:13 am
by rbryce1
Tim: I am the ADMIN for our Corvette Club's forum, and, due to span registrations, I have had to actually make it mandatory that I approve all new registrations. There is either new software or people so darn persistant that they are taking the time to register and log onto forums which are even using the random coding security. I delete about 10-15 bogus entries per day. It doesn't even work to block their IP, because they have access to hundreds of IP addresses. If you find a good way to stop this, please let me know. I am also using phpBB for a forum program.

Re: Forum registration security

Posted: Jan 21st, 2011 8:39 pm
by MaineVette
I know what you mean. Foturnately I haven't had too many issues with spammers yet. But, as the membership of this forum grows, I suspect it will become more and more of an issue.

I don't think you'll ever be able to fully address the people who manually go through the effort of entering the captcha code and then following through with the activation e-mail. However, for me those measures have been very successful in stopping the automated bots. In the past year or so this forum has been up I've only had to ban about a dozen accounts which I don't think is too bad.

If it helps, here's a summary of my current setup as it pertains to account setup:

Running phpBB v.3.07-PL1 (I know, due for an update)

Under user registration settings:
Account actiation: By user
E-mail address re-use: not allowed
Enable visual confirmation for registrations: yes
Registration attempts: 5
Enable COPPA: No

Under visual confirmation settings
Enable visual confirmation for registrations: Enabled
Enable visual confirmation for guest postings: Enabled
Enable users to refresh the confirmation image: Enabled
GD CAPTCHA: YEs
GD CAPTCHA foreground noise:No
GD CAPTCHA background noise x-axis: 20
GD CAPTCHA background noise y-axis: 20
GD CAPTCHA wave distortion: No
Add 3D-noise objects: No
Use different fonts: New Shapes

What's the forum address and which version of phpBB are you running? If you wan't I can create any account and provide you with my thoughts.

Re: Forum registration security

Posted: Feb 2nd, 2011 3:37 pm
by nwav8tor
A sad commentary on today's state of affairs regarding spammers...

Here are you guys trying to help fellow vette lovers out and you have to jump through all those hoops just trying to keep trash off your forums.

Thanks ever so much for all your trouble!

Paul

Re: Forum registration security

Posted: Feb 3rd, 2011 5:21 pm
by rbryce1
My forum is actually a little more restrictive than yours. I have also added custom fields that normally only peiople who understand corvettes can fill out intelligently, and this has worked very well in identifying real corvette people vs. spammers. When I ask for your Corvette Club name (or enter none) and i get an entry like JDIIEEE, my guess it is either not a valid club or it is one who's members I really don't want on the forum anyway. It has made identifying the real useres and the spammers easier, but still requires monitoring and deleting.

But it is worth it.