Go Back   EQEmulator Home > EQEmulator Forums > General > General::General Discussion

General::General Discussion General discussion about EverQuest(tm), EQEMu, and related topics.
Do not post support topics here.

Reply
 
Thread Tools Display Modes
  #1  
Old 09-24-2007, 04:25 PM
Lalolyen
Banned
 
Join Date: Aug 2007
Location: Sneeking up behind a admin IRL
Posts: 169
Default

In my petition systems under the DEV forum, grab the registration form from that, there is a place in there that has a form field and an inclusion for two other files in the security_image directory...

He he the info has been on the forums for quite some time =P

Tying it to the forums is a good idea... But... Make sure you lock the forum reg down with some kind of image verification...

I've found that email verification sometimes isn't enough, just like with Captcha, however the both combined is actually a ferece machine against spammers =P.

Also I stated in another forum, no one customized a bot specifically to attack our wiki...

That spam I see is the same spam that use to pollute MediaWiki for months till they put up an captcha =).

Here is what they are doing..

1. The spam the registration (so auto-banning anyone whom trys to register more than 2x in 5 mins would suffice).

2. Spamming pages and following linkes from the wiki.. One thing I use to love is how those guys would use php to make a 10 mb html page to do nothing but read out fake emails for spam harvesters =).. They would harvest it, but when it was plugged into the spam bot, he he he he... It wasn't pretty for the spammer..

I'm proposing we use the same system... Get a couple of links going on the wiki that are to domains that do not exist (or links to the same directory that do not exist) and let the spam bots have a hay day with that =).

Can you guys get an IP capture? If so, look in your phone book for the local FBI office and print out the info, along with the destoryed pages, and ask to file changes on destruction of property (it works I've done it 3 times before on hackers). This forum, the data therein, and the wiki is legally property of the community... ANY community leader can have charges filed, free to you.

Very last resort, if you cannot get the FBI to respond let me know... I have several friends that likes bragging about thier pcs and would love to show the community what a Denial of Service attack does to the IP address you tell them was spamming the wiki =).
Reply With Quote
  #2  
Old 09-24-2007, 06:06 PM
boogerific
Sarnak
 
Join Date: May 2005
Location: Northwestern USA
Posts: 83
Default

Just an FYI post here.

I just finished deleting spam from a lot wiki pages. Eqbuilder plus a few others had nothing but spam and I'm pretty sure there was info in those previously. I don't know if it matters, but I also noticed that the spammers are taking over ownership of the wiki pages.
Reply With Quote
  #3  
Old 09-24-2007, 07:14 PM
gernblan
Discordant
 
Join Date: Aug 2006
Posts: 394
Default

The wiki is the ONLY form of documentation there is for much of the features of the emu.

I would think this would be an insanely large priority to fix.

At LEAST put in a captcha system or something.... please!
__________________
--
Keelyeh
Owner, ServerOp and Developer
Jest 4 Server
Linux (Jest3 runs on Fedora, our Dev servers usually run on Ubuntu and/or Gentoo), OC-12 Connection = Hella Fast
Reply With Quote
  #4  
Old 09-24-2007, 11:22 PM
Docs
Sarnak
 
Join Date: Dec 2005
Posts: 30
Default

I agree, losing critical information is not a good thing.
Reply With Quote
  #5  
Old 09-24-2007, 11:33 PM
Lalolyen
Banned
 
Join Date: Aug 2007
Location: Sneeking up behind a admin IRL
Posts: 169
Default

Ok I'm creating a captcha system just for the wiki...

I'll post it here in a few... if the admins take to it... thats their thing...
Reply With Quote
  #6  
Old 09-24-2007, 11:45 PM
Lalolyen
Banned
 
Join Date: Aug 2007
Location: Sneeking up behind a admin IRL
Posts: 169
Default

Simple instructions...

1. Upload the files in the zip to the directory where the wiki registration page is from http://emu.norrath.info/upload_files.zip

2. Check the form submit, and in the php file that the wiki submits to.. add the following:

Code:
require_once("securimage.php");
$img = new Securimage();
$valid = $img->check($_POST['code']);
3. Wrap the if condition around the entire php code that acceps the form data:

Code:
if ($valid == "true") {
wraping code here
} else {
echo("F***ing spammer!");
}
4. Edit the html on the form to add the following fields:

Code:
<img src="securimage_show.php?sid=<? md5(uniqid(time())) ?>">
<input type="text" name="code">
There ya go =) Problem solved =P
Reply With Quote
  #7  
Old 09-27-2007, 04:02 PM
fathernitwit
Developer
 
Join Date: Jul 2004
Posts: 773
Default

thanks... installed... hope it helps.

I am still interested in hearing why you think that the day of the month field did not require people to cutsomize their bots to attack it...
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

   

All times are GMT -4. The time now is 08:15 PM.


 

Everquest is a registered trademark of Daybreak Game Company LLC.
EQEmulator is not associated or affiliated in any way with Daybreak Game Company LLC.
Except where otherwise noted, this site is licensed under a Creative Commons License.
       
Powered by vBulletin®, Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.
Template by Bluepearl Design and vBulletin Templates - Ver3.3