Page 1 of 1

Captcha for signups [Done]

PostPosted: Sun Jul 05, 2009 10:14 am
by mibi
Concise description:
  • CC should place a captcha on the home page sifnup form

Specifics:
  • uh, get a good captcha, like re-captcha, and make it a requirement of the signup

This will improve the following aspects of the site:
  • It will reduce the number of spam bots that signup and post spam in the forums
  • it will reduce the number of other nefarious bots that just signup on every form on the net, taking up usernames, as well as server resources.

Re: Captcha for signups

PostPosted: Sun Jul 05, 2009 10:38 am
by slowreactor
Considering that I just saw a spambot :o :shock: , that would actually be a great idea.

Re: Captcha for signups

PostPosted: Sun Jul 05, 2009 11:38 am
by Woodruff
mibi wrote:Concise description:
  • CC should place a captcha on the home page sifnup form

Specifics:
  • uh, get a good captcha, like re-captcha, and make it a requirement of the signup

This will improve the following aspects of the site:
  • It will reduce the number of spam bots that signup and post spam in the forums
  • it will reduce the number of other nefarious bots that just signup on every form on the net, taking up usernames, as well as server resources.


What's a captcha...is that the "numbers that have to be manually entered to match what's on the screen" thing? If so, they use that for e-tickets already, so it should be easy to implement.

Re: Captcha for signups

PostPosted: Sun Jul 05, 2009 4:54 pm
by wcaclimbing
Woodruff wrote:What's a captcha...is that the "numbers that have to be manually entered to match what's on the screen" thing? If so, they use that for e-tickets already, so it should be easy to implement.



That is correct.

Re: Captcha for signups

PostPosted: Sun Jul 05, 2009 5:08 pm
by the.killing.44

Re: Captcha for signups

PostPosted: Sun Jul 05, 2009 5:55 pm
by e_i_pi
The whole annoyance-bot thing is a double-whammy at the moment. Not only are captcha-recognising bots better, but there's also a rash of real 'users' from China who are creating accounts for heavens knows what purpose on phpBB3 forums. I'm having to delete a fake user about once a week on my forums, and my site barely rates on the register

Re: Captcha for signups

PostPosted: Sun Jul 05, 2009 10:29 pm
by Woodruff
e_i_pi wrote:The whole annoyance-bot thing is a double-whammy at the moment. Not only are captcha-recognising bots better, but there's also a rash of real 'users' from China who are creating accounts for heavens knows what purpose on phpBB3 forums. I'm having to delete a fake user about once a week on my forums, and my site barely rates on the register


Out of curiousity, how are you able to determine what is a "fake user" and what is a "legitimate user"?

Re: Captcha for signups

PostPosted: Sun Jul 05, 2009 10:36 pm
by e_i_pi
Woodruff wrote:
e_i_pi wrote:The whole annoyance-bot thing is a double-whammy at the moment. Not only are captcha-recognising bots better, but there's also a rash of real 'users' from China who are creating accounts for heavens knows what purpose on phpBB3 forums. I'm having to delete a fake user about once a week on my forums, and my site barely rates on the register


Out of curiousity, how are you able to determine what is a "fake user" and what is a "legitimate user"?

Well, when they sign up from a Chinese mail server, and login from Moldova, then spam the site with this message...

sdfhjghjs
sdfhjghjs
sdfhjghjs
sdfhjghjs
sdfhjghjs


...in every single thread, you can pretty safely assume they are a fake user.

Re: Captcha for signups

PostPosted: Mon Jul 06, 2009 1:18 am
by wcaclimbing
Woodruff wrote:
e_i_pi wrote:The whole annoyance-bot thing is a double-whammy at the moment. Not only are captcha-recognising bots better, but there's also a rash of real 'users' from China who are creating accounts for heavens knows what purpose on phpBB3 forums. I'm having to delete a fake user about once a week on my forums, and my site barely rates on the register


Out of curiousity, how are you able to determine what is a "fake user" and what is a "legitimate user"?


Or when they come in, set their 'website' as an advertisement, and post huge text walls with nothing but links to viagra websites, you can be pretty sure they're not legitimate users.

Re: Captcha for signups

PostPosted: Mon Jul 06, 2009 1:56 am
by e_i_pi
What the hell is viagra? You're spelling it wrong wca, it's "v1agra". :roll:

Re: Captcha for signups

PostPosted: Mon Jul 06, 2009 2:30 am
by 4myGod
I left some forums up for about a year, nobody knew about it... I went back a year later and there was a couple thousand users and millions of posts. Porn, viagra, penis enlargers, breast enlargers. I hit the jackpot.

Re: Captcha for signups

PostPosted: Mon Jul 06, 2009 1:05 pm
by AndyDufresne
Lack is currently doing some updating inregards spambots, so we'll see how well that works first.


--Andy

Re: Captcha for signups

PostPosted: Mon Jul 06, 2009 6:49 pm
by Woodruff
AndyDufresne wrote:Lack is currently doing some updating inregards spambots, so we'll see how well that works first.


But if it's already being used on the site (for e-tickets), wouldn't it be perfectly simple to use the same code for the new users?

Re: Captcha for signups

PostPosted: Tue Jul 14, 2009 3:59 pm
by lackattack
As e_i_pi said, it seems most of these spam accounts are in fact humans - if they can click an activation email link they could definitely complete a captcha.

The good news is that I just finished coding our Anti-Spam Bot today. It should intercept any advertising spam and immediately website ban the user (permanently :twisted: ).

Unfortunately I can't reveal the logic here for the spammers might see how to get around it!

Re: Captcha for signups [Done]

PostPosted: Tue Jul 14, 2009 4:00 pm
by Kotaro
Thanks Lack !

Re: Captcha for signups

PostPosted: Tue Jul 14, 2009 4:53 pm
by Strife
lackattack wrote:As e_i_pi said, it seems most of these spam accounts are in fact humans - if they can click an activation email link they could definitely complete a captcha.

The good news is that I just finished coding our Anti-Spam Bot today. It should intercept any advertising spam and immediately website ban the user (permanently :twisted: ).

Unfortunately I can't reveal the logic here for the spammers might see how to get around it!

Code: Select all
if (ip != lackattack) {
   accountStatus = banned;
}
:?