Page 1 of 1
Somebody trying to lock all accounts

Posted:
Mon Feb 14, 2011 11:32 am
Author: looser9
Hi guys,
now that I have solved my other problem (
http://www.integramod.com/forum/viewtop ... 168#p37168 ) I see that there is a new one!
Somebody is trying to sabotage my board by locking all accounts that there are.
This person has a lot of different IP-addresses.
How can I prevent this someone from locking all my accounts?
Yours, looser9
Re: Somebody trying to lock all accounts

Posted:
Mon Feb 14, 2011 1:40 pm
Author: looser9
Can I somehow change the locking of an account to just get it locked for let ´s say 15 minutes?
Yours, Looser9
Re: Somebody trying to lock all accounts

Posted:
Mon Feb 14, 2011 9:52 pm
Author: Helter
you need to hide your memberlist from guests and make all forums that guests can post in hidden from guests. This is an epidemic of bots. They are trying to brute force member accounts so they can add their links to your members signatures. It is going on on most all forum software systems. If they cannot view member names, then they have no accounts to try to hack.
Ive requested Teelks help in porting an anti spambot mod because he is the master of PCP.
Re: Somebody trying to lock all accounts

Posted:
Tue Feb 15, 2011 2:08 am
Author: looser9
"HelterSkelter" wrote:you need to hide your memberlist from guests and make all forums that guests can post in hidden from guests. This is an epidemic of bots. They are trying to brute force member accounts so they can add their links to your members signatures. It is going on on most all forum software systems. If they cannot view member names, then they have no accounts to try to hack.
Ive requested Teelks help in porting an anti spambot mod because he is the master of PCP.
Thanks for the help...
How can I hide the memeberlist?
Yours, looser9
Re: Somebody trying to lock all accounts

Posted:
Tue Feb 15, 2011 5:36 am
Author: Helter
forums that guests can post in hidden from guests
sorry, I meant
forums that
members can post in hidden from guests
Ill post how to hide the member list tonight after work
Re: Somebody trying to lock all accounts

Posted:
Sat Feb 19, 2011 5:34 am
Author: looser9
"HelterSkelter" wrote:forums that guests can post in hidden from guests
sorry, I meant
forums that
members can post in hidden from guests
Ill post how to hide the member list tonight after work
Anything new here?
Yours, looser9
Re: Somebody trying to lock all accounts

Posted:
Sat Feb 19, 2011 12:43 pm
Author: Helter
This requires a manual edit.
OPEN
root/memberlist.php
FIND
- Code: Select all
//
// Start session management
//
$userdata = session_pagestart($user_ip, PAGE_VIEWMEMBERS);
init_userprefs($userdata);
//
// End session management
//
AFTER, ADD
- Code: Select all
if ( !$userdata['session_logged_in'] )
{
redirect(append_sid("login.$phpEx?redirect=memberlist.$phpEx", true));
}
this will redirect guests to login who try to view your memberlist
Re: Somebody trying to lock all accounts

Posted:
Sat Feb 19, 2011 2:30 pm
Author: looser9
"HelterSkelter" wrote:This requires a manual edit.
OPEN
root/memberlist.php
FIND
- Code: Select all
//
// Start session management
//
$userdata = session_pagestart($user_ip, PAGE_VIEWMEMBERS);
init_userprefs($userdata);
//
// End session management
//
AFTER, ADD
- Code: Select all
if ( !$userdata['session_logged_in'] )
{
redirect(append_sid("login.$phpEx?redirect=memberlist.$phpEx", true));
}
this will redirect guests to login who try to view your memberlist
Thanks...I ´ll report back if it helped <img>
Yours, looser9
Re: Somebody trying to lock all accounts

Posted:
Wed Feb 23, 2011 8:28 am
Author: looser9
It worked for a couple of days but suddenly today the attacks have restarted!
What can that be?
Yours, looser9
Re: Somebody trying to lock all accounts

Posted:
Wed Feb 23, 2011 4:02 pm
Author: Helter
Teelk is porting a mod that should help stop attacks from known spammer ips and emails
Re: Somebody trying to lock all accounts

Posted:
Thu Feb 24, 2011 4:45 am
Author: looser9
"HelterSkelter" wrote:Teelk is porting a mod that should help stop attacks from known spammer ips and emails
Thanks guys!
Will it be available for IM 141 or just for the new IM3? <img>
Yours, looser9
P.S.: I am so looking forward to updating to IM3!
Re: Somebody trying to lock all accounts

Posted:
Thu Feb 24, 2011 3:18 pm
Author: Southern Man
I am having this problem too so will report on how the answer helps
Re: Somebody trying to lock all accounts

Posted:
Thu Feb 24, 2011 5:13 pm
Author: Helter
i think most people with any type of forum are having this problem and the mod Teelk is working on is for IM141
Re: Somebody trying to lock all accounts

Posted:
Thu Feb 24, 2011 10:49 pm
Author: Teelk
Just a note that I am integrating several MODs into one as well as updating existing security related MODs. One MOD in particular I hope will squash the spammers. This is why it's taking me a bit of time, not to mention the 3 day flu I just got over... <img>
Re: Somebody trying to lock all accounts

Posted:
Fri Feb 25, 2011 6:48 am
Author: Helter
Glad you're over it. I've been fighting a nasty cold for a few days. Sure makes it tough to get anything accomplished
[ Post made via Mobile Device ]
Re: Somebody trying to lock all accounts

Posted:
Fri Feb 25, 2011 10:16 am
Author: DjPorkchop
That it does Helter. I had 3 kids come down with strept throat. Somehow or the other me and the other half avoided it. Still got my fingers crossed so dam tight it is turning my knuckles pure white! <img>
And glad to hear you are over it Teelk.