Hi all,
I'm using RavenNuke 2.02.02 (Version in config table is rnv2.02.02).
I have recently started a forum and it is being spammed a lot.
How can I stop this happening ? The site is for a charity organisation for people with MD and it's very inappropriate for these spam messages to be appearing...
Joined: Aug 29, 2004 Posts: 9071 Location: Arizona
Posted:
Thu May 07, 2009 7:42 am
Oh my. You need to get to 2.3.01!!! There are exploits on older versions that are in the public domain. As with any software, purchased or otherwise, one needs to keep up or risk losing their sites.
With regards to your question, the forums is separate software for the most part to RavenNuke(tm) so other than keeping up on the BB2Nuke updates (which I believe we're all the way up to 2.0.23 still), there isn't anything extra special for controlling spam. You will see it all throughout the forums here that to reduce spam in the forums, all you can do is:
1. Make your forum posting permissions to registered users only.
2. Shut-off the ability for users to sign-up new users via the forums (forums configuration setting)
3. Force new user registration to use the captcha (in config.php).
4. Highly recommended: upgrade to RavenNuke(tm) latest in order to get the newer and better captcha -- the old captcha is of no use any longer for the more professional spammers as it is easily compromised.
That is basically all you can do at the moment, out-of-the-box wise. There has been talk and some postings here about using some additional third-party spam stopping utilities. You could try
Only registered users can see links on this board! Get registered or login to the forums!
(from Guardian2003 here). There are other more advanced captcha's that folks have suggested for forum posting, but I don't have anything to point you too at the moment.
2. Shut-off the ability for users to sign-up new users via the forums (forums configuration setting)
I can't for the life of me find this in the forums configuration....
Quote:
Force new user registration to use the captcha (in config.php)
Again, I can't find this in my main site config.php - all I have there is :
Code:
<?php
######################################################################
# PHP-NUKE: Advanced Content Management System
# ============================================
#
# Copyright (c) 2002 by Francisco Burzi (fbc@mandrakesoft.com)
# http://phpnuke.org
#
# This module is to configure the main options for your site
#
# This program is free software. You can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License.
######################################################################
if (stristr(htmlentities($_SERVER['PHP_SELF']), "config.php")) {
Header("Location: index.php");
die();
}
######################################################################
# Database & System Config
#
# dbhost: SQL Database Hostname
# dbuname: SQL Username
# dbpass: SQL Password
# dbname: SQL Database Name
# $prefix: Your Database table's prefix
# $user_prefix: Your Users' Database table's prefix (To share it)
# $dbtype: Your Database Server type. Supported servers are:
# MySQL, mysql4, postgres, mssql, oracle, msaccess,
# db2 and mssql-odbc
# Be sure to write it exactly as above, case SeNsItIvE!
# $sitekey: Security Key. CHANGE it to whatever you want, as long
# as you want. Just don't use quotes.
# $gfx_chk: Set the graphic security code on every login screen,
# You need to have GD extension installed:
# 0: No check
# 1: Administrators login only
# 2: Users login only
# 3: New users registration only
# 4: Both, users login and new users registration only
# 5: Administrators and users login only
# 6: Administrators and new users registration only
# 7: Everywhere on all login options (Admins and Users)
# NOTE: If you aren't sure set this value to 0
# $subscription_url: If you manage subscriptions on your site, you
# must write here the url of the subscription
# information/renewal page. This will send by
# email if set.
# $admin_file: Administration panel filename. "admin" by default for
# "admin.php". To improve security please rename the file
# "admin.php" and change the $admin_file value to the
# new filename (without the extension .php)
# $tipath: Path to where the topic images are stored.
# $display_errors: Debug control to see PHP generated errors.
# false: Don't show errors
# true: See all errors ( No notices )
#
# Added for RavenNuke76
# $bypassNukeSentinelInvalidIPCheck: Debug control to bypass NukeSentinel(tm)
# InvalidIP check when set to TRUE. Leave
# this FALSE for production sites.
# $bypassInstallationFolderCheck: Debug control to bypass RavenNuke76(tm)
# setup/runtime check when set to TRUE. Leave
# this FALSE for production sites.
######################################################################
$dbhost = "localhost";
$dbuname = "XXXXXX";
$dbpass = "XXXXXX";
$dbname = "XXXXXX";
$prefix = "nuke";
$user_prefix = "nuke";
$dbtype = "MySQL";
$sitekey = "XXXXXX";
$gfx_chk = 0;
$subscription_url = "";
$admin_file = "admin";
$tipath = "images/topics/";
$display_errors = TRUE; //This should only be used (set to TRUE) when testing locally and not in a production environment
$advanced_editor = 1;
/*********************************************************************/
/* The following settings have been added for use in RavenNuke76 */
/*********************************************************************/
$bypassNukeSentinelInvalidIPCheck = TRUE; //This should only be used (set to TRUE) when testing locally and not in a production environment
$bypassInstallationFolderCheck = TRUE; //This should only be used (set to TRUE) when testing locally and not in a production environment
/*********************************************************************/
/* You have finished configuring the Database settings. Now you can */
/* change all you want in the Administration Section. To enter, just */
/* point your web browser to http://yourdomain.com/admin.php */
/* */
/* Remember to go to Settings section where you can configure your */
/* new site. In that menu you can change all you need to change. */
/* */
/* Congratulations! now you have an automated news portal! */
/* Thanks for choosing PHP-Nuke: The Future of the Web */
/*********************************************************************/
// DO NOT TOUCH ANYTHING BELOW THIS LINE UNTIL YOU KNOW WHAT YOU'RE DOING
(P.S. I changed my email address on the forums here and now for some reason I can't login with my proper username, hence the temp_ version of my username)
Actually montego, I don't think it works that way. By setting it to none, you just allow all registrations with no user (email) or admin (approval) setting
Somehow, I remember we did something for BBToNuke always to redirect to use the Your_Account module for registrations. At least, that's the way my sites have been. Wonder if this was changed somewhere
Joined: Aug 30, 2005 Posts: 3136 Location: near Albany NY
Posted:
Fri May 08, 2009 9:40 am
Temp, the migration path is covered extensively in the documentation that comes with 2.3.01. Note that you want the .01 because that has important security fixes. The database upgrade script that comes with the release will do much of the work for you but you still need to read the upgrading information (there is a Howtoinstall directory) carefully and heed it.
View next topic View previous topic
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
![[Valid RSS]](http://www.ravenphpscripts.com/images/valid-rss.png "Validate my RSS feed"){kind=small}
:: 
::
