Sub Menu
Links Menu
Online Users

In total there are 304 users online :: 3 registered, 0 hidden and 301 guests

Most users ever online was 1091 on Wed Aug 16, 2023 5:27 pm

Registered users: Bing [Bot], Google [Bot], Majestic-12 [Bot] based on users active over the past 60 minutes

Somebody trying to lock all accounts

Support for IntegraMOD 141

Moderator: Integra Moderator

Somebody trying to lock all accounts

PostAuthor: looser9 » Mon Feb 14, 2011 10:32 am

Hi guys,

now that I have solved my other problem ( http://www.integramod.com/forum/viewtop ... 168#p37168 ) I see that there is a new one!

Somebody is trying to sabotage my board by locking all accounts that there are.

This person has a lot of different IP-addresses.

How can I prevent this someone from locking all my accounts?

Yours, looser9

looser9
Members
Members
 
Posts: 64
Likes: 0 post
Liked in: 0 post
Joined: Sat Dec 22, 2007 3:29 am
Cash on hand: 0.00

Re: Somebody trying to lock all accounts

PostAuthor: looser9 » Mon Feb 14, 2011 12:40 pm

Can I somehow change the locking of an account to just get it locked for let ´s say 15 minutes?

Yours, Looser9

looser9
Members
Members
 
Posts: 64
Likes: 0 post
Liked in: 0 post
Joined: Sat Dec 22, 2007 3:29 am
Cash on hand: 0.00

Re: Somebody trying to lock all accounts

PostAuthor: Helter » Mon Feb 14, 2011 8:52 pm

you need to hide your memberlist from guests and make all forums that guests can post in hidden from guests. This is an epidemic of bots. They are trying to brute force member accounts so they can add their links to your members signatures. It is going on on most all forum software systems. If they cannot view member names, then they have no accounts to try to hack.
Ive requested Teelks help in porting an anti spambot mod because he is the master of PCP.
Always use Protection
Image


Please do not PM for support
User avatar
Helter
Administrator
Administrator
 
Posts: 4167
Likes: 0 post
Liked in: 0 post
Images: 0
Joined: Sat Mar 11, 2006 3:46 pm
Cash on hand: 172.60
Location: Seattle Wa
IntegraMOD version: IM 3

Re: Somebody trying to lock all accounts

PostAuthor: looser9 » Tue Feb 15, 2011 1:08 am

"HelterSkelter" wrote:you need to hide your memberlist from guests and make all forums that guests can post in hidden from guests. This is an epidemic of bots. They are trying to brute force member accounts so they can add their links to your members signatures. It is going on on most all forum software systems. If they cannot view member names, then they have no accounts to try to hack.
Ive requested Teelks help in porting an anti spambot mod because he is the master of PCP.


Thanks for the help...

How can I hide the memeberlist?

Yours, looser9

looser9
Members
Members
 
Posts: 64
Likes: 0 post
Liked in: 0 post
Joined: Sat Dec 22, 2007 3:29 am
Cash on hand: 0.00

Re: Somebody trying to lock all accounts

PostAuthor: Helter » Tue Feb 15, 2011 4:36 am

forums that guests can post in hidden from guests

sorry, I meant
forums that members can post in hidden from guests

Ill post how to hide the member list tonight after work
Always use Protection
Image


Please do not PM for support
User avatar
Helter
Administrator
Administrator
 
Posts: 4167
Likes: 0 post
Liked in: 0 post
Images: 0
Joined: Sat Mar 11, 2006 3:46 pm
Cash on hand: 172.60
Location: Seattle Wa
IntegraMOD version: IM 3

Re: Somebody trying to lock all accounts

PostAuthor: looser9 » Sat Feb 19, 2011 4:34 am

"HelterSkelter" wrote:
forums that guests can post in hidden from guests

sorry, I meant
forums that members can post in hidden from guests

Ill post how to hide the member list tonight after work



Anything new here?

Yours, looser9

looser9
Members
Members
 
Posts: 64
Likes: 0 post
Liked in: 0 post
Joined: Sat Dec 22, 2007 3:29 am
Cash on hand: 0.00

Re: Somebody trying to lock all accounts

PostAuthor: Helter » Sat Feb 19, 2011 11:43 am

This requires a manual edit.
OPEN
root/memberlist.php
FIND
Code: Select all
//
// Start session management
//
$userdata = session_pagestart($user_ip, PAGE_VIEWMEMBERS);
init_userprefs($userdata);
//
// End session management
//

AFTER, ADD
Code: Select all
if ( !$userdata['session_logged_in'] )
{
redirect(append_sid("login.$phpEx?redirect=memberlist.$phpEx", true));
}


this will redirect guests to login who try to view your memberlist
Always use Protection
Image


Please do not PM for support
User avatar
Helter
Administrator
Administrator
 
Posts: 4167
Likes: 0 post
Liked in: 0 post
Images: 0
Joined: Sat Mar 11, 2006 3:46 pm
Cash on hand: 172.60
Location: Seattle Wa
IntegraMOD version: IM 3

Re: Somebody trying to lock all accounts

PostAuthor: looser9 » Sat Feb 19, 2011 1:30 pm

"HelterSkelter" wrote:This requires a manual edit.
OPEN
root/memberlist.php
FIND
Code: Select all
//
// Start session management
//
$userdata = session_pagestart($user_ip, PAGE_VIEWMEMBERS);
init_userprefs($userdata);
//
// End session management
//

AFTER, ADD
Code: Select all
if ( !$userdata['session_logged_in'] )
{
redirect(append_sid("login.$phpEx?redirect=memberlist.$phpEx", true));
}


this will redirect guests to login who try to view your memberlist



Thanks...I ´ll report back if it helped <img>

Yours, looser9

looser9
Members
Members
 
Posts: 64
Likes: 0 post
Liked in: 0 post
Joined: Sat Dec 22, 2007 3:29 am
Cash on hand: 0.00

Re: Somebody trying to lock all accounts

PostAuthor: looser9 » Wed Feb 23, 2011 7:28 am

It worked for a couple of days but suddenly today the attacks have restarted!

What can that be?

Yours, looser9

looser9
Members
Members
 
Posts: 64
Likes: 0 post
Liked in: 0 post
Joined: Sat Dec 22, 2007 3:29 am
Cash on hand: 0.00

Re: Somebody trying to lock all accounts

PostAuthor: Helter » Wed Feb 23, 2011 3:02 pm

Teelk is porting a mod that should help stop attacks from known spammer ips and emails
Always use Protection
Image


Please do not PM for support
User avatar
Helter
Administrator
Administrator
 
Posts: 4167
Likes: 0 post
Liked in: 0 post
Images: 0
Joined: Sat Mar 11, 2006 3:46 pm
Cash on hand: 172.60
Location: Seattle Wa
IntegraMOD version: IM 3

Re: Somebody trying to lock all accounts

PostAuthor: looser9 » Thu Feb 24, 2011 3:45 am

"HelterSkelter" wrote:Teelk is porting a mod that should help stop attacks from known spammer ips and emails


Thanks guys!

Will it be available for IM 141 or just for the new IM3? <img>

Yours, looser9

P.S.: I am so looking forward to updating to IM3!

looser9
Members
Members
 
Posts: 64
Likes: 0 post
Liked in: 0 post
Joined: Sat Dec 22, 2007 3:29 am
Cash on hand: 0.00

Re: Somebody trying to lock all accounts

PostAuthor: Southern Man » Thu Feb 24, 2011 2:18 pm

I am having this problem too so will report on how the answer helps
[marq=right][url=http]TheLambrits.co.uk[/url][/marq]
User avatar
Southern Man
Members
Members
 
Posts: 48
Likes: 0 post
Liked in: 0 post
Joined: Thu Apr 27, 2006 4:30 am
Cash on hand: 0.00

Re: Somebody trying to lock all accounts

PostAuthor: Helter » Thu Feb 24, 2011 4:13 pm

i think most people with any type of forum are having this problem and the mod Teelk is working on is for IM141
Always use Protection
Image


Please do not PM for support
User avatar
Helter
Administrator
Administrator
 
Posts: 4167
Likes: 0 post
Liked in: 0 post
Images: 0
Joined: Sat Mar 11, 2006 3:46 pm
Cash on hand: 172.60
Location: Seattle Wa
IntegraMOD version: IM 3

Re: Somebody trying to lock all accounts

PostAuthor: Teelk » Thu Feb 24, 2011 9:49 pm

Just a note that I am integrating several MODs into one as well as updating existing security related MODs. One MOD in particular I hope will squash the spammers. This is why it's taking me a bit of time, not to mention the 3 day flu I just got over... <img>
User avatar
Teelk
Dev Team
Dev Team
 
Posts: 1309
Likes: 0 post
Liked in: 0 post
Joined: Tue Mar 14, 2006 5:25 pm
Cash on hand: 0.00
Location: Canada

Re: Somebody trying to lock all accounts

PostAuthor: Helter » Fri Feb 25, 2011 5:48 am

Glad you're over it. I've been fighting a nasty cold for a few days. Sure makes it tough to get anything accomplished

[ Post made via Mobile Device ]
Always use Protection
Image


Please do not PM for support
User avatar
Helter
Administrator
Administrator
 
Posts: 4167
Likes: 0 post
Liked in: 0 post
Images: 0
Joined: Sat Mar 11, 2006 3:46 pm
Cash on hand: 172.60
Location: Seattle Wa
IntegraMOD version: IM 3

Next

Return to IntegraMOD 141

Who is online

Registered users: Bing [Bot], Google [Bot], Majestic-12 [Bot]