![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
Forum issues
I was telling ![[livejournal.com profile]](https://www.dreamwidth.org/img/external/lj-userinfo.gif)
hafoc I had the spammer issues on the forums pretty well taken care of... and not half an hour later I went to poke around at it more and found that a spammer had managed to register, even with visual code verification and requiring an activation through email.
<insert truly vile language here>
So I find myself trying to decide while modifications to the forum code are more likely to work to prevent this sort of thing since apparently just needing people to read a code out of an image and type it in AND click a link in an activation email isn't enough. The "best" choices (meaning the ones that have more "yay it works!" comments than "I can't get this to install" comments) are to do a different visual confirmation system (requiring a person to indicate if the supplied image is an animal or not and allowing me to supply my own images) and/or to add a bright red message telling people to leave the profile section of the registration empty and then reject any application that has anything in that section.
The former would undoubtedly look better but may conflict with the visual confirmation of the first post modification I've already done.
The latter is unlikely to conflict with anything but is a bit obnoxious. There is a variant that just hides the profile section of the registration form, which is visually more elegant, but apparently bots are "smart" enough to check if a field is hidden and then simply not fill it in.
Fucking spammers.
And several points about the basic forum code make me wonder if they even thought about security, it seems if you want to prevent harvesting of your member's email addresses you have to either trust they will tick the "hide address" box of install a MOD. Version 3 might solve some of my issues but it's still in beta (though it seems to be close to release.) Of course there will likely be a lag between the release of 3 and the release of compliant MODs.
Well, enough for tonight, sleep time. *Zzzzzz*
hafoc I had the spammer issues on the forums pretty well taken care of... and not half an hour later I went to poke around at it more and found that a spammer had managed to register, even with visual code verification and requiring an activation through email.<insert truly vile language here>
So I find myself trying to decide while modifications to the forum code are more likely to work to prevent this sort of thing since apparently just needing people to read a code out of an image and type it in AND click a link in an activation email isn't enough. The "best" choices (meaning the ones that have more "yay it works!" comments than "I can't get this to install" comments) are to do a different visual confirmation system (requiring a person to indicate if the supplied image is an animal or not and allowing me to supply my own images) and/or to add a bright red message telling people to leave the profile section of the registration empty and then reject any application that has anything in that section.
The former would undoubtedly look better but may conflict with the visual confirmation of the first post modification I've already done.
The latter is unlikely to conflict with anything but is a bit obnoxious. There is a variant that just hides the profile section of the registration form, which is visually more elegant, but apparently bots are "smart" enough to check if a field is hidden and then simply not fill it in.
Fucking spammers.
And several points about the basic forum code make me wonder if they even thought about security, it seems if you want to prevent harvesting of your member's email addresses you have to either trust they will tick the "hide address" box of install a MOD. Version 3 might solve some of my issues but it's still in beta (though it seems to be close to release.) Of course there will likely be a lag between the release of 3 and the release of compliant MODs.
Well, enough for tonight, sleep time. *Zzzzzz*