Spam be gone plugin.

hek

Yep, removed about 100 spam account registrations. Not a single post. They might just create accounts now..

conspiracy theory
...and then one day they start a massive spamming attack against all nodebb installations

a_5mith

@hek The only thing I can think of is the plugin runs AFTER they've had the account created. At that point they're banned, but as user delete isn't actually in yet. It just leaves them there.

Or the conspiracy theory is real.

Nicekiwi

I can't seem to get this plugin working, I've installed it (I think, there were errors about it needing a version of nod ebb-lavander-theme and nodebb-vanilla-theme that it couldn't get on version 0.4.x, but it shows up in ACP after I editing packages.json) and I've added the API keys and enabled all the options. But nothing comes up on the regos page (Which is now broken completely) :(.

trevor

Yeah they still get through somehow, lol.
So for every 6 or 7 real people that sign up, I get 1 bot.

We need to be able to block certain email addresses and certain usernames using wildcards. What do you guys think? Also in the ACP we should have the ability to search by email address for example @sina.com, and we should be able to mass purge all of those users.

Perhaps post 0.5.5+

@hek said:

Yep, removed about 100 spam account registrations. Not a single post. They might just create accounts now..

conspiracy theory
...and then one day they start a massive spamming attack against all nodebb installations

That sounds pretty evil. :rage1: ...but not likely, unless you don't have your account verifications settings checked in the ACP.

a_5mith

@bentael plugin doesn't work with 0.5.0-1, doesn't appear on the registration page, so registering gives error wrong captcha every time. @julian, might want to disable captcha until this is fixed. It stops people being able to register.

<baris>

Looks like @bentael needs to npm publish the latest version that supports the regFormEntry.

<baris>

@psychobunny updated the plugin to latest from the repo, registration should work now.

psychobunny

Glad you're thorough @a_5mith, we probably wouldn't have noticed for months

a_5mith

@psychobunny Once you've got an account, it's rare you go back to the Registration Process, but I needed a throwaway account on my site to test the blog commenting.

Scuzz

I've had about 400 bots register over the weekend

a_5mith

@Scuzz is your plugin on?

Scuzz

Should be lol. I haven't disabled anything.

a_5mith

What portions of the spam plugin do you use? Honeypot and captcha? Check your details are still there and disable and re enable the plugin etc.

Scuzz

@a_5mith Just Honeypot at the moment because the captcha was not compatible with the v0.4.3 version of nodebb the last time i tried.

a_5mith

There's a current issue I made yesterday, not sure if the plugins been updated yet.

julian

@a_5mith Okay, so I'm a bit confused -- is the plugin alright, or does it need updating?

It's possible that if spam-be-gone was updated to be 0.5.0 compatible, it would break compatibility with v0.4.3, which means forums on those versions would need to install a lower version of spam-be-gone...

a_5mith

@julian I believe it has, according to Baris' post - seems I missed it.

psychobunny

Think I'll spend some time today on a Q&A plugin for the registration form. It's probably about time that one was built for NodeBB

psychobunny

okay, done: https://community.nodebb.org/topic/2187/question-and-answer-plugin-for-the-registration-form

EDIT: @julian

It's possible that if spam-be-gone was updated to be 0.5.0 compatible, it would break compatibility with v0.4.3,

I looked over his code, it should work with both before and after the change for captcha to regFormEntry

<baris>

@psychobunny then people might have latest vanilla which only has regFormEntry and spam-be-gone sends in captcha in the latest published version. No captcha will show up in that case. When @bentael publishes latest version it should be fine.