Page 1 of 1

Hacking Attempt?

Posted: Sun Sep 26, 2004 3:26 pm
by Nitrofox125
I've had a problem on my forums with strange users registering. these include usernames like body-jewelry, klad, drug-test, and Vikary. Both of my forums have had this problem, and I've been hard pressed to keep up with deleting these users as they register. Now, I look on here, and I see nothing more than body-jewelry. Looking in the memberlist, it looks like this activity has been going on for at least several days on this forum, too (there are maybe 5 legit users on the first page of the memberlist when sorted by joined date, desc). I'm not sure what the purpose is exactly of these registrations, but I think it needs to be looked into...... I was reading posts on phpBB.com, and there's a problem with automated registrations as Admin users, I'm not sure if that's related.

Posted: Sun Sep 26, 2004 3:39 pm
by DigiJo
sounds to me like a new way of spaming, checkor had the same prob at the serverops forums.
solution: regsitration only approved by admin.

Posted: Sun Sep 26, 2004 3:44 pm
by Nitrofox125
None of them have actually posted yet.... orrr is this a way to access the memberlist? Isn't that open to the public anyway?

Posted: Sun Sep 26, 2004 4:17 pm
by fliptw
don't you require email-authorization on your boards? you should turn it on.

Also, enable the ability to send emails thru the board, like how we do it here.

Posted: Sun Sep 26, 2004 4:35 pm
by SSX-Thunderbird
You're getting spambots registering on your boards. You can generate an authorization code via images and require the user to enter said code upon registration. That will stop them from registering altogether and make you not have to delete their accounts.

Posted: Sun Sep 26, 2004 5:00 pm
by Nitrofox125
Alright.... is there a mod to do that or do I have to write it myself?

And E-mail confirm didn't work, they still seemed to register anyway.

Posted: Sun Sep 26, 2004 5:31 pm
by SSX-Thunderbird
E-mail confirmation won't stop registration. But they can't use the accounts otherwise.

There is a mod included with phpBB for that, but if you've got mods installed, you might have a difficult time installing it.

Posted: Sun Sep 26, 2004 9:39 pm
by MD-2389
fliptw wrote:don't you require email-authorization on your boards? you should turn it on.

Also, enable the ability to send emails thru the board, like how we do it here.
And make profiles register view only.