Cor Posted November 28, 2019 Report Share Posted November 28, 2019 Hi, I have copied it except for this part 8 hours ago, shakamonkey88 said: //Google reCaptcha //updated to Google noCaptcha 1/15 $resp = null; $reCaptcha = new ReCaptcha(RECAPTCHA_PRIVATE_KEY); // Was there a reCAPTCHA response? if ($_POST["g-recaptcha-response"]) { $resp = $reCaptcha->verifyResponse( $_SERVER["REMOTE_ADDR"], $_POST["g-recaptcha-response"] ); } //check if reCaptcha response was valid if ($resp == null) { $error = true; $this->set('captcha_error', 'reCaptcha Validation Error'); } //end Google reCaptcha that gave an error 🙂 I then tried to register with an E-mail adres that was used for the spam and it still just register despite the outcome was if you put the url in another browser Quote <response success="true"> <type>email</type> <appears>yes</appears> <lastseen>2019-11-28 03:26:30</lastseen> <frequency>1</frequency> <type>ip</type> <appears>no</appears> <frequency>0</frequency> </response> So I am a little lost now 🙄 Regards, Cor Quote Link to comment Share on other sites More sharing options...
KenG Posted July 24, 2020 Report Share Posted July 24, 2020 Added as well and checking. Quote Link to comment Share on other sites More sharing options...
flyalaska Posted July 24, 2020 Report Share Posted July 24, 2020 I been using it for years. You get an email when a registration is blocked. Quote Link to comment Share on other sites More sharing options...
KenG Posted July 27, 2020 Report Share Posted July 27, 2020 This has yet to catch someone, however Stop Forum Spam also produce a list, https://www.stopforumspam.com/downloads. I grabbed the ip4 and ip6 180 day version and uploaded them to my deny list. (All 330,000.) I checked my logs and I can see where the BOTs have been knocking on my door at a rate of a few dozen times per minute and denied entry. A few other things I considered. Checking the firstname and lastname for spaces or a url , I am just not sure how to write that into the registration.php module. I guess this nuclear option of just ban a boat load of IP addresses will work for now at least until phpvms7 is ready. Quote Link to comment Share on other sites More sharing options...
Cor Posted August 1, 2020 Report Share Posted August 1, 2020 A lot of registrations is done by automatic scripts and location is always Afghanistan. Is there a code that checks the location and if this is Afghanistan the registration will be blocked. Regards, Cor Quote Link to comment Share on other sites More sharing options...
Strider Posted August 1, 2020 Report Share Posted August 1, 2020 If this catches the bots then you don't need code for that, recaptcha should stop those bots registering, as they can't only fill out forms, not perform a recaptcha test. Quote Link to comment Share on other sites More sharing options...
KenG Posted August 1, 2020 Report Share Posted August 1, 2020 Recaptcha v2 has been busted a while back. It only keeps out the less sophisticated bots. Quote Link to comment Share on other sites More sharing options...
flyalaska Posted August 2, 2020 Report Share Posted August 2, 2020 On 7/31/2020 at 8:44 PM, Cor said: A lot of registrations is done by automatic scripts and location is always Afghanistan. Is there a code that checks the location and if this is Afghanistan the registration will be blocked. Regards, Cor I think Afghanistan is registred alot because its the default country on registration. Quote Link to comment Share on other sites More sharing options...
Administrators ProAvia Posted August 2, 2020 Administrators Report Share Posted August 2, 2020 16 minutes ago, flyalaska said: I think Afghanistan is registred alot because its the default country on registration. BINGO!!! Look in your server logs and find the IP addresses behind these registrations - and if you choose, block them. Quote Link to comment Share on other sites More sharing options...
Cor Posted August 3, 2020 Report Share Posted August 3, 2020 7 hours ago, ProAvia said: BINGO!!! Look in your server logs and find the IP addresses behind these registrations - and if you choose, block them. That is a solution if you have 1 a week orso, but if you have around 20 till 40 a week, you get a little bit tired of it and I am looking for a way that if people "choosing" Afghanistan that it will be treated as spam. I already blocked a range of IP addresses it getting ridiculous Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.