Page 1 of 2

Somebody trying to lock all accounts

PostPosted: Mon Feb 14, 2011 10:32 am
Author: looser9
Hi guys,

now that I have solved my other problem ( http://www.integramod.com/forum/viewtop ... 168#p37168 ) I see that there is a new one!

Somebody is trying to sabotage my board by locking all accounts that there are.

This person has a lot of different IP-addresses.

How can I prevent this someone from locking all my accounts?

Yours, looser9

Re: Somebody trying to lock all accounts

PostPosted: Mon Feb 14, 2011 12:40 pm
Author: looser9
Can I somehow change the locking of an account to just get it locked for let ´s say 15 minutes?

Yours, Looser9

Re: Somebody trying to lock all accounts

PostPosted: Mon Feb 14, 2011 8:52 pm
Author: Helter
you need to hide your memberlist from guests and make all forums that guests can post in hidden from guests. This is an epidemic of bots. They are trying to brute force member accounts so they can add their links to your members signatures. It is going on on most all forum software systems. If they cannot view member names, then they have no accounts to try to hack.
Ive requested Teelks help in porting an anti spambot mod because he is the master of PCP.

Re: Somebody trying to lock all accounts

PostPosted: Tue Feb 15, 2011 1:08 am
Author: looser9
"HelterSkelter" wrote:you need to hide your memberlist from guests and make all forums that guests can post in hidden from guests. This is an epidemic of bots. They are trying to brute force member accounts so they can add their links to your members signatures. It is going on on most all forum software systems. If they cannot view member names, then they have no accounts to try to hack.
Ive requested Teelks help in porting an anti spambot mod because he is the master of PCP.


Thanks for the help...

How can I hide the memeberlist?

Yours, looser9

Re: Somebody trying to lock all accounts

PostPosted: Tue Feb 15, 2011 4:36 am
Author: Helter
forums that guests can post in hidden from guests

sorry, I meant
forums that members can post in hidden from guests

Ill post how to hide the member list tonight after work

Re: Somebody trying to lock all accounts

PostPosted: Sat Feb 19, 2011 4:34 am
Author: looser9
"HelterSkelter" wrote:
forums that guests can post in hidden from guests

sorry, I meant
forums that members can post in hidden from guests

Ill post how to hide the member list tonight after work



Anything new here?

Yours, looser9

Re: Somebody trying to lock all accounts

PostPosted: Sat Feb 19, 2011 11:43 am
Author: Helter
This requires a manual edit.
OPEN
root/memberlist.php
FIND
Code: Select all
//
// Start session management
//
$userdata = session_pagestart($user_ip, PAGE_VIEWMEMBERS);
init_userprefs($userdata);
//
// End session management
//

AFTER, ADD
Code: Select all
if ( !$userdata['session_logged_in'] )
{
redirect(append_sid("login.$phpEx?redirect=memberlist.$phpEx", true));
}


this will redirect guests to login who try to view your memberlist

Re: Somebody trying to lock all accounts

PostPosted: Sat Feb 19, 2011 1:30 pm
Author: looser9
"HelterSkelter" wrote:This requires a manual edit.
OPEN
root/memberlist.php
FIND
Code: Select all
//
// Start session management
//
$userdata = session_pagestart($user_ip, PAGE_VIEWMEMBERS);
init_userprefs($userdata);
//
// End session management
//

AFTER, ADD
Code: Select all
if ( !$userdata['session_logged_in'] )
{
redirect(append_sid("login.$phpEx?redirect=memberlist.$phpEx", true));
}


this will redirect guests to login who try to view your memberlist



Thanks...I ´ll report back if it helped <img>

Yours, looser9

Re: Somebody trying to lock all accounts

PostPosted: Wed Feb 23, 2011 7:28 am
Author: looser9
It worked for a couple of days but suddenly today the attacks have restarted!

What can that be?

Yours, looser9

Re: Somebody trying to lock all accounts

PostPosted: Wed Feb 23, 2011 3:02 pm
Author: Helter
Teelk is porting a mod that should help stop attacks from known spammer ips and emails

Re: Somebody trying to lock all accounts

PostPosted: Thu Feb 24, 2011 3:45 am
Author: looser9
"HelterSkelter" wrote:Teelk is porting a mod that should help stop attacks from known spammer ips and emails


Thanks guys!

Will it be available for IM 141 or just for the new IM3? <img>

Yours, looser9

P.S.: I am so looking forward to updating to IM3!

Re: Somebody trying to lock all accounts

PostPosted: Thu Feb 24, 2011 2:18 pm
Author: Southern Man
I am having this problem too so will report on how the answer helps

Re: Somebody trying to lock all accounts

PostPosted: Thu Feb 24, 2011 4:13 pm
Author: Helter
i think most people with any type of forum are having this problem and the mod Teelk is working on is for IM141

Re: Somebody trying to lock all accounts

PostPosted: Thu Feb 24, 2011 9:49 pm
Author: Teelk
Just a note that I am integrating several MODs into one as well as updating existing security related MODs. One MOD in particular I hope will squash the spammers. This is why it's taking me a bit of time, not to mention the 3 day flu I just got over... <img>

Re: Somebody trying to lock all accounts

PostPosted: Fri Feb 25, 2011 5:48 am
Author: Helter
Glad you're over it. I've been fighting a nasty cold for a few days. Sure makes it tough to get anything accomplished

[ Post made via Mobile Device ]