Post new topic Reply to topic  [ 9 posts ] 
Author Message
 Post Posted: Fri Dec 30, 2011 10:56 pm | Post subject: SMF - Disallow Users with Profile Info During Registration
 
Offline
User avatar

Joined: Sun Jun 20, 2010 12:50 pm
Posts: 388
Location: USA
I am working on hosting a message board using SMF, and apparently the default captcha settings aren't adequate at all - the spambots get through them quite easily.

I saw on another forum (I don't think it was WinBoards) that all accounts who filled in profile info during registration (which spambots always do) were not accepted. Thought that was a good idea but haven't found any way to do it with SMF. Is there a way?

For now I'll just turn up the CAPTCHA and/or try question-based stuff.


Top
 Profile  
Reply with quote  
  • 0

 Post Posted: Fri Dec 30, 2011 11:23 pm | Post subject: Re: SMF - Disallow Users with Profile Info During Registrati
 
Offline
User avatar

Joined: Fri Aug 27, 2004 5:11 pm
Posts: 2747
Location: I do stuff
I've always wanted to see KittenAuth implemented, maybe you could try that for a CAPTCHA? I don't know anything about SMF, though, can't advise if it's actually doable.


Top
 Profile  
Reply with quote  
  • 0

 Post Posted: Sat Dec 31, 2011 11:42 am | Post subject: Re: SMF - Disallow Users with Profile Info During Registrati
 
Offline

Joined: Wed Dec 21, 2011 3:12 pm
Posts: 15
Why don't you change the template so that the profile fields have the type 'hidden'?


Top
 Profile  
Reply with quote  
  • 0

 Post Posted: Sat Dec 31, 2011 12:34 pm | Post subject: Re: SMF - Disallow Users with Profile Info During Registrati
 
Offline
Peace Ownz
User avatar

Joined: Sat Jun 19, 2004 1:50 pm
Posts: 3970
And how exactly, does that stop spam registrations?


Top
 Profile  
Reply with quote  
  • 0

 Post Posted: Sat Dec 31, 2011 1:44 pm | Post subject: Re: SMF - Disallow Users with Profile Info During Registrati
 
Offline
User avatar

Joined: Fri Aug 27, 2004 5:11 pm
Posts: 2747
Location: I do stuff
If the hidden fields are filled out, then it's spam?


Top
 Profile  
Reply with quote  
  • 0

 Post Posted: Sat Dec 31, 2011 2:42 pm | Post subject: Re: SMF - Disallow Users with Profile Info During Registrati
 
Offline
Peace Ownz
User avatar

Joined: Sat Jun 19, 2004 1:50 pm
Posts: 3970
I thought he was suggesting to make all the profile fields hidden during registration, which didn't make any sense. Besides, some legit users fill out profile info during registration.

But if you made a hidden field that the spam bot would try to fill out... maybe. It's easy enough to do, but that depends on the PHP skills of the original poster.


Top
 Profile  
Reply with quote  
  • 0

 Post Posted: Sat Dec 31, 2011 9:16 pm | Post subject: Re: SMF - Disallow Users with Profile Info During Registrati
 
Offline
User avatar

Joined: Sun Jun 20, 2010 12:50 pm
Posts: 388
Location: USA
I didn't mean to hide them, though that is similar to what I was saying. I was saying to mark as spam all users who fill in profile info during registration. The fields are there for people to fill in - however, there should be a message telling legitimate users to wait until after registration to fill in their profile.

I've seen it once before and I thought it would be reasonable spam protection. This works because literally every spam bot fills in random profile info, avatar, etc. during registration, and the spambots won't read the message telling them not to.

I don't really have PHP skills. So I'll just forget about it :P


Top
 Profile  
Reply with quote  
  • 0

 Post Posted: Tue Jan 10, 2012 1:00 pm | Post subject: Re: SMF - Disallow Users with Profile Info During Registrati
 
Offline
User avatar

Joined: Fri Aug 27, 2004 5:11 pm
Posts: 2747
Location: I do stuff
Some interesting reading on CAPTCHAs I came across while doing some other research:

http://ux.stackexchange.com/questions/2 ... an-captcha
http://uxmovement.com/forms/captchas-vs ... tcha-wins/


Top
 Profile  
Reply with quote  
  • 0

 Post Posted: Tue Jan 10, 2012 7:27 pm | Post subject: Re: SMF - Disallow Users with Profile Info During Registrati
 
Offline
Peace Ownz
User avatar

Joined: Sat Jun 19, 2004 1:50 pm
Posts: 3970
Nice links nightice, but I find the comments section in the second link to be far more interesting than the article itself.


Top
 Profile  
Reply with quote  
  • 0

Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 9 posts ] 

Search for:
cron
Powered by phpBB
2003 - 2012 WinWorld
[ Time : 0.263s | 12 Queries | GZIP : On ]