Hacking Attempt?

Nitrofox125 · Post by **Nitrofox125** » Sun Sep 26, 2004 3:26 pm

I've had a problem on my forums with strange users registering. these include usernames like body-jewelry, klad, drug-test, and Vikary. Both of my forums have had this problem, and I've been hard pressed to keep up with deleting these users as they register. Now, I look on here, and I see nothing more than body-jewelry. Looking in the memberlist, it looks like this activity has been going on for at least several days on this forum, too (there are maybe 5 legit users on the first page of the memberlist when sorted by joined date, desc). I'm not sure what the purpose is exactly of these registrations, but I think it needs to be looked into...... I was reading posts on phpBB.com, and there's a problem with automated registrations as Admin users, I'm not sure if that's related.

DigiJo · Post by **DigiJo** » Sun Sep 26, 2004 3:39 pm

sounds to me like a new way of spaming, checkor had the same prob at the serverops forums.
solution: regsitration only approved by admin.

Nitrofox125 · Post by **Nitrofox125** » Sun Sep 26, 2004 3:44 pm

None of them have actually posted yet.... orrr is this a way to access the memberlist? Isn't that open to the public anyway?

fliptw · Post by **fliptw** » Sun Sep 26, 2004 4:17 pm

don't you require email-authorization on your boards? you should turn it on.

Also, enable the ability to send emails thru the board, like how we do it here.

SSX-Thunderbird · Post by **SSX-Thunderbird** » Sun Sep 26, 2004 4:35 pm

You're getting spambots registering on your boards. You can generate an authorization code via images and require the user to enter said code upon registration. That will stop them from registering altogether and make you not have to delete their accounts.

Nitrofox125 · Post by **Nitrofox125** » Sun Sep 26, 2004 5:00 pm

Alright.... is there a mod to do that or do I have to write it myself?

And E-mail confirm didn't work, they still seemed to register anyway.

SSX-Thunderbird · Post by **SSX-Thunderbird** » Sun Sep 26, 2004 5:31 pm

E-mail confirmation won't stop registration. But they can't use the accounts otherwise.

There is a mod included with phpBB for that, but if you've got mods installed, you might have a difficult time installing it.

MD-2389 · Post by **MD-2389** » Sun Sep 26, 2004 9:39 pm

fliptw wrote:don't you require email-authorization on your boards? you should turn it on.

Also, enable the ability to send emails thru the board, like how we do it here.

And make profiles register view only.