Results 1 to 13 of 13
  1. #1
    ABW Adviser Panel Dynamoo's Avatar
    Join Date
    January 18th, 2005
    Location
    Opposite the Slough of Despond
    Posts
    5,465
    phpBB warning
    If you run phpBB you might want to read the this article and check for the username mentioned (I'm not going to post it here because it seems to be an enumeration method).

    If you do have this username, then you should probably ban it and the originating IP address. Then it's time to consider toughening up your phpBB installation. One thing I do is to password protect the admin folder at a web server level to add extra security, of course the latest patches are always a good idea. Proactively banning that user might be a good idea too.
    Innovative advertising with Slimeware Corporation and Telephore. Mail-order fuel with Petrol Direct.

  2. #2
    ABW Ambassador
    Join Date
    January 18th, 2005
    Posts
    1,608
    found, and deleted the username from my forum.

    however, after Funt signed-up, there were other suspicious usernames too that appeared. i have actually removed a lot of those already last week, but there were a few left.

    their websites are either ringtone, poker, no content (probably just to get your IP), and one was just a simple log-in to nowhere page (probably phishing)
    Last edited by waytogo; March 20th, 2006 at 09:53 AM.

  3. #3
    ABW Ambassador
    Join Date
    January 18th, 2005
    Posts
    1,608
    another voracious signer is jtfoe1974

    try searching for that in google.

  4. #4
    ABW Ambassador Trying to Win's Avatar
    Join Date
    January 7th, 2006
    Location
    Harrisburg, PA
    Posts
    503
    I've had so many problems with people hacking phpBB on my sites, that I have totally removed it. It's just not worth the trouble.
    Just a squirrel trying to get a nut, in the Internet jungle.

  5. #5
    2005 Linkshare Golden Link Award Winner  ecomcity's Avatar
    Join Date
    January 18th, 2005
    Location
    St Clair Shores MI.
    Posts
    17,328
    Need we ask if these forum Bot spammers are affiliates?
    Webmaster's... Mike and Charlie

    "What have you done today to put real value into a referral click...from a shoppers viewpoint!"

  6. #6
    Full Member felit0's Avatar
    Join Date
    January 18th, 2005
    Location
    Miami, FL
    Posts
    245
    I don't get anymore "bot" sign-ups on my phpbb forum ever since I enabled visual confirmation. Go to Administration>General Admin>Configuration>Enable Visual Confirmation. They should make that a default setting for new installations, alot of board owners don't even know about it.

  7. #7
    ABW Ambassador Trying to Win's Avatar
    Join Date
    January 7th, 2006
    Location
    Harrisburg, PA
    Posts
    503
    I've not only had many bot sign ups on phpBB, I've had it been down right hacked, title at the top changed, forum names changed etc.
    Just a squirrel trying to get a nut, in the Internet jungle.

  8. #8
    Member net2ride's Avatar
    Join Date
    August 11th, 2005
    Location
    Dallas, TX
    Posts
    59
    Thanks, very useful

  9. #9
    Web Ho - Design B!tch ~Michelle's Avatar
    Join Date
    January 18th, 2005
    Location
    Michigan
    Posts
    2,040
    Quote Originally Posted by felit0
    I don't get anymore "bot" sign-ups on my phpbb forum ever since I enabled visual confirmation. Go to Administration>General Admin>Configuration>Enable Visual Confirmation. They should make that a default setting for new installations, alot of board owners don't even know about it.
    I have had that done for quite some time and still get bot signups.

    I just wish there was a way to set is so the admin had to approve all sign ups.
    ~Michelle
    "All I ask is a chance to prove that money can't make me happy."
    "Work to become, not to acquire." -- Confucius

  10. #10
    ABW Ambassador
    Join Date
    January 18th, 2005
    Posts
    4,423
    Quote Originally Posted by ~Michelle
    I have had that done for quite some time and still get bot signups.

    I just wish there was a way to set is so the admin had to approve all sign ups.
    There is.

    admin->configuration
    Enable account activation None User Admin

    Choose admin.

  11. #11
    Web Ho - Design B!tch ~Michelle's Avatar
    Join Date
    January 18th, 2005
    Location
    Michigan
    Posts
    2,040
    Quote Originally Posted by chetf
    There is.

    admin->configuration
    Enable account activation None User Admin

    Choose admin.
    I have it set to that, but when someone signs up, I get the notification and everything, but they still show up in the memberlist without me approving them. I have to contantly go in and delete them.
    ~Michelle
    "All I ask is a chance to prove that money can't make me happy."
    "Work to become, not to acquire." -- Confucius

  12. #12
    ABW Ambassador
    Join Date
    January 18th, 2005
    Posts
    4,423
    Ahh gotcha. I think I have the line change to only show confirmed members in the member list, if you want it i can post it when i get home.

    Chet

  13. #13
    MasterMike HardwareGeek's Avatar
    Join Date
    January 18th, 2005
    Posts
    3,810
    you get what you pay for

  14. Newsletter Signup

+ Reply to Thread

Similar Threads

  1. Is it Possible phpbb to Yabb
    By Packy in forum Midnight Cafe'
    Replies: 0
    Last Post: December 7th, 2007, 02:12 PM
  2. phpbb or vbulletin or ?
    By Zdig in forum Midnight Cafe'
    Replies: 12
    Last Post: December 22nd, 2006, 03:30 AM
  3. Need help, PHPBB just got hacked
    By Affiliate Ian in forum Midnight Cafe'
    Replies: 16
    Last Post: August 30th, 2005, 03:54 AM
  4. PHPBB Integration?
    By tenemag in forum Programming / Datafeeds / Tools
    Replies: 3
    Last Post: March 29th, 2005, 01:37 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •