Somebody trying to lock all accounts

Support for IntegraMOD 141

Moderator: Integra Moderator

Somebody trying to lock all accounts

PostAuthor: looser9 » Mon Feb 14, 2011 11:32 am

Hi guys,

now that I have solved my other problem ( http://www.integramod.com/forum/viewtop ... 168#p37168 ) I see that there is a new one!

Somebody is trying to sabotage my board by locking all accounts that there are.

This person has a lot of different IP-addresses.

How can I prevent this someone from locking all my accounts?

Yours, looser9

looser9
Members
Members
 
Posts: 64
Likes: 0 post
Liked in: 0 post
Images: 0
Joined: Sat Dec 22, 2007 4:29 am
Cash on hand: 0.00

Re: Somebody trying to lock all accounts

PostAuthor: looser9 » Mon Feb 14, 2011 1:40 pm

Can I somehow change the locking of an account to just get it locked for let ´s say 15 minutes?

Yours, Looser9

looser9
Members
Members
 
Posts: 64
Likes: 0 post
Liked in: 0 post
Images: 0
Joined: Sat Dec 22, 2007 4:29 am
Cash on hand: 0.00

Re: Somebody trying to lock all accounts

PostAuthor: Helter » Mon Feb 14, 2011 9:52 pm

you need to hide your memberlist from guests and make all forums that guests can post in hidden from guests. This is an epidemic of bots. They are trying to brute force member accounts so they can add their links to your members signatures. It is going on on most all forum software systems. If they cannot view member names, then they have no accounts to try to hack.
Ive requested Teelks help in porting an anti spambot mod because he is the master of PCP.
Always use Protection
Image


Please do not PM for support
User avatar
Helter
Administrator
Administrator
 
Posts: 4349
Likes: 16 posts
Liked in: 46 posts
Images: 0
Joined: Sat Mar 11, 2006 4:46 pm
Cash on hand: 1,200.35
Location: Seattle Wa
IntegraMOD version: IM 3

Re: Somebody trying to lock all accounts

PostAuthor: looser9 » Tue Feb 15, 2011 2:08 am

"HelterSkelter" wrote:you need to hide your memberlist from guests and make all forums that guests can post in hidden from guests. This is an epidemic of bots. They are trying to brute force member accounts so they can add their links to your members signatures. It is going on on most all forum software systems. If they cannot view member names, then they have no accounts to try to hack.
Ive requested Teelks help in porting an anti spambot mod because he is the master of PCP.


Thanks for the help...

How can I hide the memeberlist?

Yours, looser9

looser9
Members
Members
 
Posts: 64
Likes: 0 post
Liked in: 0 post
Images: 0
Joined: Sat Dec 22, 2007 4:29 am
Cash on hand: 0.00

Re: Somebody trying to lock all accounts

PostAuthor: Helter » Tue Feb 15, 2011 5:36 am

forums that guests can post in hidden from guests

sorry, I meant
forums that members can post in hidden from guests

Ill post how to hide the member list tonight after work
Always use Protection
Image


Please do not PM for support
User avatar
Helter
Administrator
Administrator
 
Posts: 4349
Likes: 16 posts
Liked in: 46 posts
Images: 0
Joined: Sat Mar 11, 2006 4:46 pm
Cash on hand: 1,200.35
Location: Seattle Wa
IntegraMOD version: IM 3

Re: Somebody trying to lock all accounts

PostAuthor: looser9 » Sat Feb 19, 2011 5:34 am

"HelterSkelter" wrote:
forums that guests can post in hidden from guests

sorry, I meant
forums that members can post in hidden from guests

Ill post how to hide the member list tonight after work



Anything new here?

Yours, looser9

looser9
Members
Members
 
Posts: 64
Likes: 0 post
Liked in: 0 post
Images: 0
Joined: Sat Dec 22, 2007 4:29 am
Cash on hand: 0.00

Re: Somebody trying to lock all accounts

PostAuthor: Helter » Sat Feb 19, 2011 12:43 pm

This requires a manual edit.
OPEN
root/memberlist.php
FIND
//
// Start session management
//
$userdata = session_pagestart($user_ip, PAGE_VIEWMEMBERS);
init_userprefs($userdata);
//
// End session management
//

AFTER, ADD
if ( !$userdata['session_logged_in'] )
{
redirect(append_sid("login.$phpEx?redirect=memberlist.$phpEx", true));
}


this will redirect guests to login who try to view your memberlist
Always use Protection
Image


Please do not PM for support
User avatar
Helter
Administrator
Administrator
 
Posts: 4349
Likes: 16 posts
Liked in: 46 posts
Images: 0
Joined: Sat Mar 11, 2006 4:46 pm
Cash on hand: 1,200.35
Location: Seattle Wa
IntegraMOD version: IM 3

Re: Somebody trying to lock all accounts

PostAuthor: looser9 » Sat Feb 19, 2011 2:30 pm

"HelterSkelter" wrote:This requires a manual edit.
OPEN
root/memberlist.php
FIND
//
// Start session management
//
$userdata = session_pagestart($user_ip, PAGE_VIEWMEMBERS);
init_userprefs($userdata);
//
// End session management
//

AFTER, ADD
if ( !$userdata['session_logged_in'] )
{
redirect(append_sid("login.$phpEx?redirect=memberlist.$phpEx", true));
}


this will redirect guests to login who try to view your memberlist



Thanks...I ´ll report back if it helped <img>

Yours, looser9

looser9
Members
Members
 
Posts: 64
Likes: 0 post
Liked in: 0 post
Images: 0
Joined: Sat Dec 22, 2007 4:29 am
Cash on hand: 0.00

Re: Somebody trying to lock all accounts

PostAuthor: looser9 » Wed Feb 23, 2011 8:28 am

It worked for a couple of days but suddenly today the attacks have restarted!

What can that be?

Yours, looser9

looser9
Members
Members
 
Posts: 64
Likes: 0 post
Liked in: 0 post
Images: 0
Joined: Sat Dec 22, 2007 4:29 am
Cash on hand: 0.00

Re: Somebody trying to lock all accounts

PostAuthor: Helter » Wed Feb 23, 2011 4:02 pm

Teelk is porting a mod that should help stop attacks from known spammer ips and emails
Always use Protection
Image


Please do not PM for support
User avatar
Helter
Administrator
Administrator
 
Posts: 4349
Likes: 16 posts
Liked in: 46 posts
Images: 0
Joined: Sat Mar 11, 2006 4:46 pm
Cash on hand: 1,200.35
Location: Seattle Wa
IntegraMOD version: IM 3

Re: Somebody trying to lock all accounts

PostAuthor: looser9 » Thu Feb 24, 2011 4:45 am

"HelterSkelter" wrote:Teelk is porting a mod that should help stop attacks from known spammer ips and emails


Thanks guys!

Will it be available for IM 141 or just for the new IM3? <img>

Yours, looser9

P.S.: I am so looking forward to updating to IM3!

looser9
Members
Members
 
Posts: 64
Likes: 0 post
Liked in: 0 post
Images: 0
Joined: Sat Dec 22, 2007 4:29 am
Cash on hand: 0.00

Re: Somebody trying to lock all accounts

PostAuthor: Southern Man » Thu Feb 24, 2011 3:18 pm

I am having this problem too so will report on how the answer helps
[marq=right][url=http]TheLambrits.co.uk[/url][/marq]
User avatar
Southern Man
Members
Members
 
Posts: 48
Likes: 0 post
Liked in: 0 post
Images: 0
Joined: Thu Apr 27, 2006 5:30 am
Cash on hand: 0.00

Re: Somebody trying to lock all accounts

PostAuthor: Helter » Thu Feb 24, 2011 5:13 pm

i think most people with any type of forum are having this problem and the mod Teelk is working on is for IM141
Always use Protection
Image


Please do not PM for support
User avatar
Helter
Administrator
Administrator
 
Posts: 4349
Likes: 16 posts
Liked in: 46 posts
Images: 0
Joined: Sat Mar 11, 2006 4:46 pm
Cash on hand: 1,200.35
Location: Seattle Wa
IntegraMOD version: IM 3

Re: Somebody trying to lock all accounts

PostAuthor: Teelk » Thu Feb 24, 2011 10:49 pm

Just a note that I am integrating several MODs into one as well as updating existing security related MODs. One MOD in particular I hope will squash the spammers. This is why it's taking me a bit of time, not to mention the 3 day flu I just got over... <img>
User avatar
Teelk
Dev Team
Dev Team
 
Posts: 1309
Likes: 0 post
Liked in: 0 post
Images: 0
Joined: Tue Mar 14, 2006 6:25 pm
Cash on hand: 0.00
Location: Canada

Re: Somebody trying to lock all accounts

PostAuthor: Helter » Fri Feb 25, 2011 6:48 am

Glad you're over it. I've been fighting a nasty cold for a few days. Sure makes it tough to get anything accomplished

[ Post made via Mobile Device ]
Always use Protection
Image


Please do not PM for support
User avatar
Helter
Administrator
Administrator
 
Posts: 4349
Likes: 16 posts
Liked in: 46 posts
Images: 0
Joined: Sat Mar 11, 2006 4:46 pm
Cash on hand: 1,200.35
Location: Seattle Wa
IntegraMOD version: IM 3

Next

Return to IntegraMOD 141

Who is online

Registered users: App360MonitorBot, Bing [Bot], Google [Bot], Helter, Majestic-12 [Bot], Vendethiel