NodeBB not protected against "bot registration"

[ffmad]

hi !

it seems my forum is attacked by someone creating 1 account /hour or more

http://www.cryptofr.com/users/latest

as you can see, there is weird pseudo & fake email

could you add a Captcha or something else to register only "humans" ?

[A Former User]

Personally, I use this: https://github.com/akhoury/nodebb-plugin-spam-be-gone

Open your terminal and run:

npm install nodebb-plugin-spam-be-gone

Activate it, restart NodeBB - then fill it in with an Akismet key, a Project Honeypot Key, and a Recaptcha Key.

Seems to catch almost everything.

[ffmad]

@Ted said:

Personally, I use this: https://github.com/akhoury/nodebb-plugin-spam-be-gone

Open your terminal and run:

npm install nodebb-plugin-spam-be-gone

Activate it, restart NodeBB - then fill it in with an Akismet key, a Project Honeypot Key, and a Recaptcha Key.

Seems to catch almost everything.

thank you !!

[julian]

@ffmad Please let us know if any bots end up getting through spam-be-gone. It's worked well for those who are using it, but sometimes some still get through.

There's no defence against manual spammers from asia though

[ffmad]

@julian said:

@ffmad Please let us know if any bots end up getting through spam-be-gone. It's worked well for those who are using it, but sometimes some still get through.

There's no defence against manual spammers from asia though

i will.

Something weird appeared since i've installed the plugin :

i can't see anything

301 Moved Permanently

(www.cryptofr.com)

[A Former User]

@ffmad, I saw this on your homepage. Sorry, I do not know French

I would guess to clear your browser's cache.

[ffmad]

@Ted said:

@ffmad, I saw this on your homepage. Sorry, I do not know French

it's just some custom html text i've put with widgets

can you see the full connect page ?

[ffmad]

@Ted said:

I would guess to clear your browser's cache.

i have done that immediatly after seing the bug

maybe i will have to reset everything

[A Former User]

@ffmad, works fine for me. Appears to be just you. Try clearing your cache and reconnecting.

[ffmad]

@Ted http://www.cryptofr.com/login

what do you see in this page ?

[A Former User]

@ffmad

Hmm try disabling the plugin.

Did you activate features without inserting an API key?

[ffmad]

@Ted said:

@ffmad

Hmm try disabling the plugin.

Did you activate features without inserting an API key?

i've activated only the captcha api

[A Former User]

I'm unsure, as I've never only ran just the Captcha API. Disable the plugin and see what happens next.

[a_5mith]

You've restarted NodeBB too?

[ffmad]

@a_5mith said:

You've restarted NodeBB too?

yeah

[ffmad]

@ffmad said:

@a_5mith said:

You've restarted NodeBB too?

yeah

i've reset everything, it's looking better

[Scuzz]

There is also a registration question plugin that adds a custom question on the registration page. I found that in conjunction with spam be gone works really well.

[A Former User]

@ffmad, that's good to hear.

@Scuzz, I'll be sure to keep it in mind if need be later on. Thanks for bringing it to my attention.

[Couby]

Hi, same problem with my nBB.

spam-be-gone installed.

I'm not familiar with honeypot and I don't find obvious the way to obtain a Key.
Is it possible to have some tips for that one ?

[a_5mith]

@Frédéric-Coubard said:

Hi, same problem with my nBB.

spam-be-gone installed.

I'm not familiar with honeypot and I don't find obvious the way to obtain a Key.
Is it possible to have some tips for that one ?

Sign up for an account, then click this link, it will take you to a captcha form, enter the captcha form, and you'll get a 12 character access key, put that into the Honeypot settings in the plugin.