Heh, wouldn't it be fun if we had a crowdsourced spammer database just for NodeBB forums... spam on one, get banned from every one in existence 😆 ...
Yeah they still get through somehow, lol.
So for every 6 or 7 real people that sign up, I get 1 bot.
We need to be able to block certain email addresses and certain usernames using wildcards. What do you guys think? Also in the ACP we should have the ability to search by email address for example
@sina.com, and we should be able to mass purge all of those users.
Perhaps post 0.5.5+
Yep, removed about 100 spam account registrations. Not a single post. They might just create accounts now..
...and then one day they start a massive spamming attack against all nodebb installations
That sounds pretty evil. :rage1: ...but not likely, unless you don't have your account verifications settings checked in the ACP.
Looks like @bentael needs to npm publish the latest version that supports the regFormEntry.
@psychobunny updated the plugin to latest from the repo, registration should work now.
Glad you're thorough @a_5mith, we probably wouldn't have noticed for months
@psychobunny Once you've got an account, it's rare you go back to the Registration Process, but I needed a throwaway account on my site to test the blog commenting.
I've had about 400 bots register over the weekend
@Scuzz is your plugin on?
Should be lol. I haven't disabled anything.
What portions of the spam plugin do you use? Honeypot and captcha? Check your details are still there and disable and re enable the plugin etc.
@a_5mith Just Honeypot at the moment because the captcha was not compatible with the v0.4.3 version of nodebb the last time i tried.
There's a current issue I made yesterday, not sure if the plugins been updated yet.
@a_5mith Okay, so I'm a bit confused -- is the plugin alright, or does it need updating?
It's possible that if spam-be-gone was updated to be 0.5.0 compatible, it would break compatibility with v0.4.3, which means forums on those versions would need to install a lower version of spam-be-gone...
Think I'll spend some time today on a Q&A plugin for the registration form. It's probably about time that one was built for NodeBB
It's possible that if spam-be-gone was updated to be 0.5.0 compatible, it would break compatibility with v0.4.3,
I looked over his code, it should work with both before and after the change for captcha to regFormEntry
Ah yeah, good point.
hey gaiz, sorry still in Lebanon, slow connection.
anyways, im confused.
@psychobunny then people might have latest vanilla which only has regFormEntry and spam-be-gone sends in captcha in the latest published version. No captcha will show up in that case. When @bentael publishes latest version it should be fine.
spam-be-gone sends in the regFormEntry in its latest and it was already published 15 days ago. are u using 0.2.1 ?
The only scenario where I think it might not show up is if you're using firstname.lastname@example.org, nodebb 0.5.0-2 (which sends in
regFormEntry ) but an older version of vanilla, which uses still uses
captcha in its template
rm -rf node_modules npm install npm install nodebb-plugin-spam-be-gone