New members are evading a ban for their mail domain

Nuke Cadet Joined: Feb 02, 2007 Posts: 8

I have set my forum to require user validation via email, and I used the forum control panel to ban the email address *@mail.ru

However I am still plagued by daily new user accounts using the email addresses from mail.ru

After a few days if these accounts are not deleted they post spam comments on my front page articles.

Is there something wrong with my install that allows these spammers to evade the mail ban?

Support Mod Joined: Oct 19, 2004 Posts: 1032 Location: UK

Do you have sentinel installed?

If you do why not just add @mail.ru to the string blocker, that ought to sufficiently block the user from signing up with the @mail.ru email address.

If you dont have sentinel installed (I would recomend you do anyway) then you could try adding the email address to the usercheck function.

Nuke Cadet Joined: Feb 02, 2007 Posts: 8

No, I do not have that tool installed, I assumed a default installation would be able to block new members from joining if they use a mail domain that is on the banlist.

Support Mod Joined: Oct 19, 2004 Posts: 1032 Location: UK

Usually yes, however it seems that is not working.

Either of those methods ought to solve that issue.

Nuke Cadet Joined: Feb 02, 2007 Posts: 8

Usercheck Function. Sorry for the beginner question, but where is this function found?

Posted: Fri Feb 02, 2007 9:06 am

See http://www.karakas-online.de/forum/viewtopic.php?t=4797 where this is discussed and solutions offered.

Nuke Cadet Joined: Feb 02, 2007 Posts: 8

I'm quite certain the suggestions are very effective when implemented as described. Unfortunately I'm a windows guy and my site is hosted for me.

If I understand correctly I'm just out of luck if I am attempting to work with the administrative control panels that are available from within nuke?

Nuke Cadet Joined: Feb 02, 2007 Posts: 8

It appears that most of the domains are finally being effectively banned.

I suspect that the bot is creating dozens of registrations at a time and only activating them a few at a time.

Is there some way I can flush the cache of pending account registrations?

Support Mod Joined: Oct 19, 2004 Posts: 1032 Location: UK

the accounts that are yet to be confirmed are located in the nuke_users_temp table.

Nuke Cadet Joined: Feb 02, 2007 Posts: 8

phpnuke-hosting wrote:

the accounts that are yet to be confirmed are located in the nuke_users_temp table.

Where is this table located?

I've wandered thru the directories via FTP and have not located it yet.

Posted: Mon Apr 16, 2007 1:31 am

eaglescouter wrote:

phpnuke-hosting wrote:

the accounts that are yet to be confirmed are located in the nuke_users_temp table.

Where is this table located?

I've wandered thru the directories via FTP and have not located it yet.

Your database

Nuke Cadet Joined: Feb 02, 2007 Posts: 8

Ok, I admit I'm a noob.

How do I access this database? I cannot find it in the admin control panel.

Site Admin Joined: Aug 17, 2003 Posts: 12383

You'll need to use phpMyAdmin
See: http://www.nukecops.com/PHP-Nuke_phpmyadmin2.html

Posted: Tue Jun 26, 2007 4:06 pm

Code:

<?
require"mainfile.php";
global $user_prefix;
?>
<table width=100%>
<tr><td>userid</td><td>username</td></tr>
<?
$ankabt=mysql_query("select * from ".$user_prefix."_temp order by id desc");
while($saho=mysql_fetch_assoc($ankabt)) {
?>
<tr><td><?=$saho[user_id];?></td><td><?=$saho[username];?></td></tr>
<? } ?>
</table>

this file save a user_temp.php
run this file, see all user_temp