Phpbb CAPTCHA
Sep 22, 2007Can I know is the latest version of phpbb still vulnerable to bots signing up? I had given up using phpbb for sometime. Thinking of using it again but I really fear those bots.
View 3 RepliesCan I know is the latest version of phpbb still vulnerable to bots signing up? I had given up using phpbb for sometime. Thinking of using it again but I really fear those bots.
View 3 RepliesIt seeems that captcha is on its way out now that more applications are able to "read" captcha images. Since I like trying to stay a step ahead, what do you think of this concept and do you think it will work.
Just a note, it is not completed at this time as I'm still coding it. You can keep refreshing the page to see the others. This is still strictly a work in progress (WIP).
I have this setup...
* For some, I have 2 rows of numbers/letters. The script will expect only one row to be re-typed.
* Using the 2 rows setup from above, the script could also ask for the letters in column 1 to be re-typed. There are 4 columns.
* Thers also one for where the script will generate a 8 character string, but it will ask for letters with a specified color.
How well do you think this will thwart such applications using OCR capabilities.?
Demo:
[url]
Just a note:
* That site is run out of my house specifically for development purposes so if you access it and get parse errors, or no loads... you know a possible reason why the script will be up and down.
* Remember... It's not done, I'm going to add grid lines around the lettering for the columns and rows and possibly make the text larger.
* Also right now, the colors only return as one color... Soon, each letter will be given a random color.
i transfered website (use capcha) to my vps, then after transfer captcha this website not working.
what wrong ? should i to install what software? my vps use cpanel for custumers and use centos.
On 10-22-2007, 02:43 PM, "infuseweb" asked:
Quote:
TITLE: Server-side captcha scripts
Does anyone know of any language-neutral captcha scripts that can be run on the server-side and your customers can access via includes or what-not? I'd like to offer some sort of captcha solution to my customers to protect their web forms.
Then, on 10-22-2007, 05:27 PM, "domainworldaccess" replied:
Quote:
bestwebforms.com
Never used it. Heard it is nice. About $30 for up to 50 sites...
(There were no other replies in that thread.)
Are there any readers here who have tried using the paid solution offered by bestwebforms.com? When I visited the site, it seemed that their CAPTCHA graphics files looked a little primitive. Since I have not downloaded their package, I do not know how well it works, or how effective it might be in discouraging web form spamming.
They say that one only needs to insert a short JavaScript on the web page in order to implement their pre-formatted forms. But what if one wishes to apply their CAPTCHA solution to a custom-designed form and lay-out that is already in use (i.e.: currently running without CAPTCHA)?
It would be terrific if any readers could reply with a list of their favorite sources for CAPTCHA scripts, particularly those which can be easily implemented without extensive knowledge of perl or other programming experience.
Assuming one has good HTML and basic script editing capability, which scripts would you suggest? Do they generate the CAPTCHA graphics on-the-fly, or do they depend on a static library of existing .gif files?
Have you tested the script(s) yourself, and arrived at any conclusions on its/their efficacy in combatting web form spam, while still permitting reasonable access by humans with various levels of visual acuity, i.e.: the ability to discern different colors, or contrast between the characters and background?
Since I've read that there may be a number of effective anti-CAPTCHA schemes used by spammers out there (which are able to automatically decode or read the obscured characters with some sort of OCR (Optical Character Recognition) technology, I would like to know whether the whole CAPTCHA approach is now considered to be an exercise in futility.
For example, I noticed that Network Solutions had been using CAPTCHA for a time on their WHOIS search page, but later abandoned it. I'm assuming they may have concluded that it was hindering more valid users from performing searches, than it was effective in stopping spam submissions.
A while back, I did read some forum posts which suggested wrapping the form action in JavaScript, in order to foil certain automated spambots. However, after implementing that solution, I have not found it to be entirely effective. Of course, I have no way of knowing whether the comment spam that we continue to get now was generated by a human or a spambot.
Finally, it seems that our web host's Spam Assassin software, while it is pretty decent at detecting spam in regular e-mail, does nothing to filter spam in web forms whose input is delivered by e-mail. I don't understand why this is, since it still must pass through the mail server in order to be delivered to me.
I ordered a new server and recomplied apache to upgrade apache to apache 2 and to install GD
GD is installed but all captcha images are blurry. Can anyone help?
you can check screenshot here
[url]
how much ram do i need for my site (currently on local shared hosting which offtenly highload because of my site), using cpanel vps (cause i don't understand other control panel)
I'm using phpBB2 Forum with few mods and total of 17.800+ member, 300MB Mysql DB, with user online between 100 - 120 at peak hours.
here's my alexa traffic link:
[url]
my site is www.modifikasi.com
I have just started a discussion website using phpBB, with over 3000 forums. PhP memory is becoming a problem. My current host provides 16M. As I know 32M is recommeded by phpBB. I asked my current host to increase the memory but found out it's really costly.
View 5 Replies View RelatedMods, if this topic does not belong there - please forgive me and move it where it does belong
I have a question about forums. I am going to have a website based on Typo3 cms. The host is almost found. The site will have its forum and I want it to be as secure as possible. Unfortunately, I cannot invest $ into paid forums, like vbulletin.
The question is, which forum is more secure and which one will become the biggest obstacle for hackers / spambots - phpbb or Typo3 forum?
a host for less than $15 a month that can host a phpbb client with likely around 150-400 members. The site will have little media, mostly pictures if anything, nothing fancy. So what is the best for this?
View 15 Replies View Relatedi not sure what goin on, my phpbb display tis msg when i navigate inside the forum (IIS6.0, windows 2k3)
This msg
your browser does not support meta redirection please click HERE to be redirected
My current phpbb Installation is 3.0.1 and i want to upgrade it to latest 3.0.4. However as you know, automatic upgrade is available only for 3.0.2 to 3.0.4 and 3.0.3 to 3.0.4. So iam attempting to upgrade 3.0.1 to 3.0.2 and then auto upgrade 3.0.2 to 3.0.4.
I have downloaded and extracted the 3.0.2 source. I have moved the install folder of 3.0.2 to root where my phpbb has been installed. I then used the url domain.com/phpbb/install and the browser based conversion/upgradation has been invoked.
However iam having serious trouble in providing the board path. whatever i have specified, it returns the error --
Could not find path to your former board. Please check your settings and try again.
» ../.. was specified as the source path.
We are currently running a phpBB forum on Dreamhost shared hosting and have been getting a lot of Internal Server Errors, so it's time to move to a new host.
We generally have around 200-300 members online (within the last 30 mins). We are using around 2.8TB/month of bandwidth currently. We get around 135,000 visits per month and 470,000 pageviews.
Dreamhost use their own way of measuring database usage..
Quote:
We've developed a unit of measure that helps to track database performance that we call the "conuery":
(25 * connections) + queries = Your database's conuery usage
Our database disk usage us 24mb, we are averaging around 100,000 database connections per day, around 85,000 queries per day and our "Conuery" is around 3 MCn per day (this means nothing to me either lol).
I have found a VPS package with directspace - 2x Intel Quad Core Xeon, 50GB Storage, 2Gb RAM, 2.5GB Burst Ram and 5TB of monthly bandwidth, for $35/month.
Is this likely to be an adequate solution for our needs? We would be running both the database and web services for phpBB from this box.
Also, can anyone give any hints on the best (and most seamless way) to migrate? I'm thinking that we'll get the new host to install all the services and get the box up and running, then I can ftp the files to the new server and export/import the databases. Then perform a (301?) redirect on the old host, pointing to the new IP address until the DNS is updated.
I realise that I'll need to update the config.php for phpbb with the new database details etc, along with the database details for our wordpress implementation and update the server details in the board configuration.
I wanted to create a phpBB forum without having to pay so I found a website and got it hosted. You can find it HERE: [removed]
I wanted to add on a "Downloads" section but I don't believe this is possible... Does anyone know of another free website that lets you host a phpBB forum and a web page or two?
I am in the process of cleaning one old unused phpBB technical forum. As of now the forum is full of spam posting and junk users. I did upgrade it to the latest version, applied a few security tools to prevent spam users from registering. It seems they aren't that much effective. I still get around 50 new spam posting a day.
Do you have any suggestions/tools to help me in getting up the database cleaned. Do you prefer migrating to another forum software. If yes can you recommend some tool for that?
Current BB: readybb.com/cindysommer
Current host: readyBB
My technical skills: only enough to be dangerous
Thanks in advance to anyone who can help.
My current host is not satisfactory. Support is practically non-existant. I need to know if there is such a thing as a host that will provide transfer services as I do not have the technical ability to do it myself.
I would think the ideal situation would be to copy everything to the new host first, but as much as I've read and read about this for months, I still do not trust myself to do it.
We have 2 users that have forums (phpbb) and we receive tons of rebounded mails everyday from people registering with fake mails.. I have a feeling it's a spam script or something..
Here's an example of a rebounded mail: ....
What minimum VPS specs should I be looking for to support a PHPBB3 forum that uses 100GB/mth bandwidth and has 50 concurrent users at peak times (measured by PHPBB, so not real-time concurrent)?
And are there any suggestions for inexpensive ($30 or less) options that would be worth trying? Have never used a VPS before.
If not, are there any shared hosting providers that specialize in hosting message boards like PHPBB?
My dedicated server has only one site hosted in it, and we have a forum (SMF), but it seems that it cant handle the traffic on peek hours.
Dual Processor Dual Core Intel Woodcrest 5140
4 Total 2.33 GHz Cores
Dual 1333 MHz Front-side Bus (FSB)
4 MB Shared L2 Cache
8 GB 667 MHz FB-DIMM Memory (Fully Buffered)
2 x 250 GB SATA HD in Hardware RAID 1
I've talked with several people and all said that this server is enough to handle such traffic. So the problem might be on the forum software.
I've already installed eAccelerator and tweaked everything, but it still hangs when spikes occur.
Do you think that phpBB will handle such traffic better?
768MB VPS with DirectAdmin. I will be using phpBB, Joomla, and MediWiki and would like to install an opcode cacher. The 3 most popular ones appear to be: APC, xcache, and eAccelerator.
wouldn't be able to install an opcode cacher on my own without instructions I can just copy and paste into the command line. So my priorities are that it's easy to install/update, it doesn't take manual tweaking to get it working properly, and it's known to have less issues. With phpBB, Joomla, and MediaWiki in mind, which opcode cacher should I go with?
I am running phpbb 3.0.12 installed from Plesk. In Plesk it is showing me that there is an upgrade available to version 3.1.2-15 however when I Re-Check the version in phpbb it says that I already have the latest version 3.0.12. That's a little weird.
The problem is when I upgrade to 3.1.2-15 in Plesk, it will mess with the whole installation. The forum page will redirect in circles to /install/index.php which doesn't even exist and I can't do anything except revert to before the upgrade.
So my questions are: Why does Plesk show a version 3.1.2-15 but phpbb says the latest one is 3.0.12? How does the upgrade process from Plesk work? I expect it to automatically do everything, or why else would I want to let Plesk upgrade?