HaQue
Forum Moderator
Posts: 224
Joined: Mon Jan 12, 2015 7:56 pm

spammers

Mon Jan 26, 2015 4:42 am

So I just banned 3 users and deleted around 30 posts of spam. I think maybe they are using an exploit in phpBB or somehow getting around restrictions.

User avatar
pclab
Forum Moderator
Posts: 1710
Joined: Tue Jan 13, 2015 4:55 pm
Contact: Website Facebook

Re: spammers

Mon Jan 26, 2015 7:37 am

I have done to 1 also this morning...
www.pclab.com.pt
facebook.com/PCLAB.Assistencia.Tecnica

User avatar
Jared
Forum Admin
Posts: 3706
Joined: Mon Jan 12, 2015 12:32 pm
Location: Providence, RI
Contact: Website Facebook Twitter Skype YouTube Google+

Re: spammers

Mon Jan 26, 2015 8:09 am

They must be using an exploit. Which surprises me, it's the latest version of PHPBB. These user accounts are brand new, and shouldn't be able to post without moderation.

User avatar
lcoughey
Forum Moderator
Posts: 639
Joined: Mon Jan 12, 2015 12:46 pm
Location: Ontario, Canada
Contact: Website Facebook Twitter Google+

Re: spammers

Mon Jan 26, 2015 8:52 am

I have the newest version too...and they are getting caught by my settings.

HaQue
Forum Moderator
Posts: 224
Joined: Mon Jan 12, 2015 7:56 pm

Re: spammers

Mon Jan 26, 2015 8:54 am

another one, just banned user first now deleting posts

HaQue
Forum Moderator
Posts: 224
Joined: Mon Jan 12, 2015 7:56 pm

Re: spammers

Mon Jan 26, 2015 8:56 am

are you able to go to your hosting control panel and see what files are logged as accessd or something? Been a while since I tried tracking someones access to my websites, but there should be some indication of it

User avatar
Jared
Forum Admin
Posts: 3706
Joined: Mon Jan 12, 2015 12:32 pm
Location: Providence, RI
Contact: Website Facebook Twitter Skype YouTube Google+

Re: spammers

Mon Jan 26, 2015 11:14 am

Yeah, it looks like somehow the "new users" feature which forces their posts to be moderated is turned off again. I know I had enabled it, but then the other day it was off, so I turned it back on. Now it's turned off again (I just tested it too).

We'll eventually figure this out.

User avatar
Jared
Forum Admin
Posts: 3706
Joined: Mon Jan 12, 2015 12:32 pm
Location: Providence, RI
Contact: Website Facebook Twitter Skype YouTube Google+

Re: spammers

Mon Jan 26, 2015 11:29 am

Ok, I think I figured out what's going on. When I set the new users group permissions, I set "post without moderator permission" to "no" however it needed to be set to "never" or they can still get the posts through somehow.

Hopefully this resolves it finally.

HaQue
Forum Moderator
Posts: 224
Joined: Mon Jan 12, 2015 7:56 pm

Re: spammers

Tue Jan 27, 2015 8:12 am

seems that the current spambots are using a very similar algo for all their bot-users.

one of the Facebook, Twitter, Skype, YouTube, Google+ fields is always username plus 2 capitol letters.

if there was some way of scripting in using the username as a substring mask for each of those fields then maybe you could ban the account straight away. I don't know how easy it is to do on phpbb though.

User avatar
pclab
Forum Moderator
Posts: 1710
Joined: Tue Jan 13, 2015 4:55 pm
Contact: Website Facebook

Re: spammers

Tue Jan 27, 2015 10:26 am

I have banned 2 more today....
www.pclab.com.pt
facebook.com/PCLAB.Assistencia.Tecnica

Return to “Forum Issues, Suggestions, Etc.”

Who is online

Users browsing this forum: No registered users and 0 guests