Forums

Unfortunately no one can be told what FluxBB is - you have to see it for yourself.

You are not logged in.

Announcement

FluxBB 1.5.6 and 1.4.12 released

These releases fix a security issue - please update your forums! Download links: v1.5.6 | v1.4.12

#1 2012-09-10 14:25:20

rilwis
Member
Registered: 2012-09-10
Posts: 7

Fighting with SPAM, still lose?

Hi,

I love FluxBB because of its simplicity. But I have a big problem with SPAM. Each days, my forum receives some spam registrations, threads and posts. I've applied some methods (below) but still see spams. Please help me.

Here's what I've done:

To prevent spam registrations
- Installed reCaptcha mod
- Enable Verify registrations

To prevent spam posts
- Installed Bad Behavior mod. This mod works perfectly, and in its stats, I see it prevents lots of spam posts

And here's one of my spam email: n.fl.sje.sdd.d2@gmail.com. I don't think it's real, but why it passed my reCaptcha registration? and even the verification process?

This is my biggest problem with FluxBB. My forum is small, but after 1 year, it may be big, and SPAM is my most concern.

I hope I can find help here, where FluxBB community is a big community itself.

Thank you very much.

Offline

#2 2012-09-10 23:39:26

Newman
Member
Registered: 2011-11-05
Posts: 343

Re: Fighting with SPAM, still lose?

Nice guide, +1 Rep.

Offline

#3 2012-09-11 01:10:35

rilwis
Member
Registered: 2012-09-10
Posts: 7

Re: Fighting with SPAM, still lose?

Oh, I didn't intend to write a guide, but glad you like it.

Anybody have a good solution for this?

Offline

#4 2012-09-11 04:57:00

Studio384
Developer
From: Belgium
Registered: 2012-04-11
Posts: 615
Website

Re: Fighting with SPAM, still lose?

Try this one: http://fluxbb.org/resources/mods/very-s … istration/

The updates in version 1.5 are more for spam by real human, but it's true that FluxBB needs to be more protect from spam by bots.


FluxBB Community Benelux - ModernBB 3.1
Profile Plus: A new FluxBB profile interface

Offline

#5 2012-09-11 18:53:44

Gil
Member
From: France
Registered: 2008-05-10
Posts: 157
Website

Re: Fighting with SPAM, still lose?

Studio384 wrote:

Try this one: http://fluxbb.org/resources/mods/very-s … istration/

The updates in version 1.5 are more for spam by real human, but it's true that FluxBB needs to be more protect from spam by bots.

Even with VSABR, I recommend to use customized and not so easy questions, something like the one explained here: http://fluxbb.org/forums/viewtopic.php?pid=47854#p47854. It won't avoid manual spammer registrations, but it should avoid bot spammer registrations.

  • Without VSABR: 4 registrations per hour (and some spam posts per day from these "users")

  • With VSABR and provided questions: exactly the same result

  • With VSABR and customized questions: two weeks without any bot registration

Offline

#6 2012-09-12 01:11:10

rilwis
Member
Registered: 2012-09-10
Posts: 7

Re: Fighting with SPAM, still lose?

Thank you!

I just want to compare the VSABR with reCaptcha, what do you think VSABR better than reCaptcha?

Offline

#7 2012-09-12 07:30:56

Jack
Member
Registered: 2010-12-24
Posts: 445
Website

Re: Fighting with SPAM, still lose?

I tried both with bad results (maybe i should try some hard questions with "Very simple anti bot" but...)... I'm quite demoralized.. sad


Sorry I don't speak English smile
FluxBB Italy

Offline

#8 2012-09-21 20:45:47

RiskyRango
New member
Registered: 2012-09-21
Posts: 2

Re: Fighting with SPAM, still lose?

Just installed FluxBB myself and installed a couple of mods to help stop the spam but to no avail sadly.

I've only just installed FluxBB but get atleast 1-2 new spam users an hour.

Last edited by RiskyRango (2012-09-21 22:17:07)

Offline

#9 2012-09-22 03:00:34

rilwis
Member
Registered: 2012-09-10
Posts: 7

Re: Fighting with SPAM, still lose?

I'm not 100% sure but I received less spam these days, even I didn't do anything more than what I said above. But anyway, that is not an effective way to stop spamming. Still looking for another better solution.

Offline

#10 2012-09-25 11:31:24

iatkrox
Member
From: US
Registered: 2012-03-03
Posts: 89

Re: Fighting with SPAM, still lose?

I think it's better to add email verification and also,account may active after admin approve. wink
These two things can really hurts spams !


While most are dreaming of success, winners wake-up and work hard to achieve it.

Offline

#11 2012-10-07 13:31:09

hydn
Member
Registered: 2012-10-06
Posts: 22

Re: Fighting with SPAM, still lose?

Signup for Cloudflare - its free = Spam problem solved! smile

Offline

#12 2012-10-09 19:39:19

teeiger
Member
Registered: 2012-10-09
Posts: 9

Re: Fighting with SPAM, still lose?

You guys might wana try this captcha

nucaptcha.com/

Offline

#13 2012-10-10 13:38:10

adaur
Developer
From: France
Registered: 2010-01-07
Posts: 675
Website

Re: Fighting with SPAM, still lose?

hydn wrote:

Signup for Cloudflare - its free = Spam problem solved! smile

Indeed, it is also nice as a CDN. However, it might put your website down rarely with the free version. Try it - it is free of charge and can be disabled in 2 minutes.

I use StopForumSpam for my forum and it is working great: http://fluxbb.fr/forums/viewtopic.php?p … 11#p107911 but there is some false positives hmm

Last edited by adaur (2012-10-10 13:39:32)


Please excuse my bad english, I'm french tongue.

Offline

#14 2012-10-17 17:37:27

hydn
Member
Registered: 2012-10-06
Posts: 22

Re: Fighting with SPAM, still lose?

Can someone re-post how to integrate stopforumspam.com? Is there a how-to in english?

THnaks

Offline

#15 2012-10-18 15:46:02

adaur
Developer
From: France
Registered: 2010-01-07
Posts: 675
Website

Re: Fighting with SPAM, still lose?

Quick translation: in the end of include/functions.php, add

function CheckIfSpambot($emailAddress, $ipAddress, $userName, $debug = false)
{
 
// *********************************
// Code originally written by Smurf_Minions (http://guildwarsholland.nl/)
// Original Source: http://guildwarsholland.nl/phphulp/testspambot.php
//
// Modified by Brendan Erskine (http://sysadminspot.com/)
// Last Modified: 8 May 2010
// Revision Number: 2.0
// *********************************
 
  // Initiate and declare spambot/errorDetected as false - as we're just getting started
  $spambot = false;
  $errorDetected = false;
 
  // -------------
  // Check email address
  // -------------
 
  if ($emailAddress != "")
  {
    $xml_string = file_get_contents("http://www.stopforumspam.com/api?email=" . urlencode($emailAddress));
    $xml = new SimpleXMLElement($xml_string);
 
    if ($xml->appears == "yes") // Was the result was registered
    {
      $spambot = true; // Check failed. Result indicates dangerous.
    }
    elseif ($xml->appears == "no") // Check passed. Result returned safe.
    {
      $spambot = false; // Check passed. Result returned safe.
    }
    else
    {
      $errorDetected = true; // Test returned neither positive or negative result. Service might be down?
    }
  }
 
  // -------------
  // Check IP Address
  // -------------
  if ($spambot != true && $ipAddress != "")
  {
    $xml_string = file_get_contents("http://www.stopforumspam.com/api?ip=" . urlencode($ipAddress));
    $xml = new SimpleXMLElement($xml_string);
 
    if ($xml->appears == "yes") // Was the result was registered
    {
      $spambot = true; // Check failed. Result indicates dangerous.
    }
    elseif ($xml->appears == "no") // Check passed. Result returned safe.
    {
      $spambot = false; // Check passed. Result returned safe.
    }
    else
    {
      $errorDetected = true; // Test returned neither positive or negative result. Service might be down?
    }
  }
 
  // -------------
  // Check Username
  // -------------
  if ($spambot != true && $userName != "")
  {
    $xml_string = file_get_contents("http://www.stopforumspam.com/api?username=" . urlencode($userName));
    $xml = new SimpleXMLElement($xml_string);
 
    if ($xml->appears == "yes") // Was the result was registered
    {
      $spambot = true; // Check failed. Result indicates dangerous.
    }
    elseif ($xml->appears == "no") // Check passed. Result returned safe.
    {
      $spambot = false; // Check passed. Result returned safe.
    }
    else
    {
      $errorDetected = true; // Test returned neither positive or negative result. Service might be down?
    }
  }
 
  // To debug function, call it with the debug flag as true and instead the function will return whether or not an error was detected, rather than the test result.
  if ($debug == true)
  {
    return $errorDetected; // If enabled, return whether or not an error was detected
  }
  else
  {
    return $spambot; // Return test results as either true/false or 1/0
  }
}

In register.php, before

	// Did everything go according to plan?
	if (empty($errors))
	{

add

	$bot_check = CheckIfSpambot($email1, get_remote_address(), $username);
	if ($bot_check == true)
		message('You're a bad bot :-)');

There must be a way to do something cleaner, but this works just fine.


Please excuse my bad english, I'm french tongue.

Offline

#16 2012-10-18 20:28:40

Koos
Member
Registered: 2008-05-09
Posts: 106
Website

Re: Fighting with SPAM, still lose?

I was looking for a spam solution for PunRes and discovered that the FluxBB forum uses a Honeypot + StopForumSpam combo. I created a mod based on the patch Reines shared here: http://fluxbb.org/forums/viewtopic.php?pid=34379#p34379

Since installing it there has not been a single spam registration. About 150-200 spam registration attempts are blocked per day. The Honeypot blocks almost 100% of the bots. And the StopForumSpam as Reines mentioned serves as a second barrier against human spammers.

Here are some posts by Reines explaining how it works:

http://fluxbb.org/forums/viewtopic.php?pid=43297#p43297
http://fluxbb.org/forums/viewtopic.php?pid=34372#p34372
http://fluxbb.org/forums/viewtopic.php?id=5263
http://fluxbb.org/forums/viewtopic.php?pid=31641#p31641

I have already created the mod for PunBB 1.2/FluxBB 1.2. I will try to update it for FluxBB 1.5 and release it here over the weekend if I get a chance.

Offline

#17 2012-11-01 09:52:16

rilwis
Member
Registered: 2012-09-10
Posts: 7

Re: Fighting with SPAM, still lose?

Hi Koos,

Looks like that is a good method! I'll try it (if you can put your mode only, that's great!). My forum is getting lots of spams again sad

Offline

#18 2012-11-05 22:55:39

Koos
Member
Registered: 2008-05-09
Posts: 106
Website

Re: Fighting with SPAM, still lose?

I finally got around creating this mod. It can be downloaded here: http://fluxbb.org/resources/mods/honeyp … mspam-mod/

Offline

#19 2012-11-06 01:10:32

rilwis
Member
Registered: 2012-09-10
Posts: 7

Re: Fighting with SPAM, still lose?

That's great, Koos. I'm using your method (with manually patching files). Everyday I summit to StopForumSpam 150-200 spams sad.

Looks like the manual spam in my forum is the trouble. The spammers have signature + website link. Do you have any method that prevent such spammers, like filter content with Akismet for example?

Offline

#20 2012-11-06 18:47:33

Koos
Member
Registered: 2008-05-09
Posts: 106
Website

Re: Fighting with SPAM, still lose?

As Reines mentioned here:

Reines wrote:

At the moment we get maybe 1 or 2 users per day passing through the filters, which I manually delete by searching for users with URLs in their signatures but 0 posts. 1 or 2 per day means we're looking at >99% success rate, which isn't bad at all considering the system is totally hidden to any legitimate users.

That's why I included a "Search for users with URLs in their signatures but 0 posts" function in the mod's admin cp. These users can then be manually deleted and reported to the StopForumSpam database by selecting the "Delete user & report spam" option when deleting users.

Offline

#21 2012-11-07 01:14:39

rilwis
Member
Registered: 2012-09-10
Posts: 7

Re: Fighting with SPAM, still lose?

That's a good idea. I'll try it. Thanks!

Offline

#22 2012-11-09 09:58:58

BarbJones
Member
Registered: 2012-11-09
Posts: 7

Re: Fighting with SPAM, still lose?

Spams have been the headache of most webmasters for a longtime. No matter what you do, spammers and fraudsters would find a way to breach in.

The best one can do is adopt certain precautionary measures, with this you can reduce the numbers to a great extent.

So what are those measures that can help keep forum spams under control ?

Bad Behavior (bad-behavior.ioerror.us/) - It's a system that a forum owner can install. It can help block known spammers and bots from accessing your site in the first place. This can work as the first hurdle for spammers to register onto a forum website.

Human Detection Systems – This is nothing by a captcha which now comes in different types. This can ideally help  check if the registrant is a human or some automated bot. These systems stop almost all bots, but are easy for human spammers to get through.

Email Verification – This is also supposed to be one of the highly effective mediums to avoid spammers much before they can start sprinkling rubbish links all across the site. This system requires an authentic email address to which an email with a verification link is posted which a user needs to confirm. The system is highly effective against automated spam-bots but fails attimes with human spammers wanting to register, especially with the proliferation of free email account systems. In that case, you may disallow users registering onto the forum using free email extensions like gmail, yahoo, live etc.

Signature Limits -  About 99% of spammers put a spam link in their signature.  This is how they quickly spam the system even without posting. Implementing a limit over post count, registration age, etc. can help you manage human spam to a great degree.

URL Posting Limits –  I don't think that I'll need to describe much about it.

Lastly, Active Moderation -  Now, this is something that can deliver 100% efficiency to the efforts of spam control.

One may choose to implement multiple ways to avoid spam to achieve better efficiency.


Barb from WHUK - Best Web Hosting UK Company since 2001
VPS Hosting UK | Cloud Web Hosting

Offline

Board footer

Powered by FluxBB 1.5.6