New user spam

Author Message

Jeroen Sangers

Thursday 16 August 2007 2:06:32 am

One of my sites is being attacked by spammers who are mass registering new users. It looks like they are randomly filling in the fields and submitting it, resulting in dozens of new users a day. As the new account is not confirmed, these users are still disabled and do not harm the site, but it gets very difficult to find the real users between all these spam-users, so each day I manually delete all these users.

Is there anything I can do to stop the spammers from creating these users (without blocking the genuine users), or to remove the disabled users automatically?

Lukasz Piech

Thursday 16 August 2007 3:37:48 am

How about implementing customantispam functionality into user/register template?

http://ez.no/community/contribs/workflow/peter_s_custom_anti_spam_image

Lukasz

Xavier Dutoit

Thursday 16 August 2007 4:31:53 am

Kristof released an akismet plugin just for that.

http://projects.ez.no/akismet

http://www.sydesy.com

Jeroen Sangers

Tuesday 21 August 2007 3:45:42 am

Thanks a lot Xavier,

I just installed the Akismet extension, and it seems to work fine.

Kristof Coomans

Tuesday 21 August 2007 6:54:24 am

Hi Jeroen

Thanks for trying it! In case you want to contribute something or if you have any remaining questions, then feel free to post a message to the eZ Akismet project forum.

independent eZ Publish developer and service provider | http://blog.coomanskristof.be | http://ezpedia.org

Jeroen Sangers

Tuesday 21 August 2007 7:52:50 am

Hi Kristof,

I can't post on the Akismet project forum, as eZ Projects currently does not allow new registrations (it gave me an ugly kernel error).

Is there anywhere I can check what is happening, any kind of logging? I just noticed that three more dummy users have been created on my site, and would like to see why Akismet let them go through...

Kristof Coomans

Wednesday 22 August 2007 12:27:58 am

Hi Jeroen

Indeed you're right, new user registrations are currently not allowed. I forgot about this myself :)

Akismet probably didn't recognize those users yet as spam. You can still submit them as spam with the content action handler included with the extension, to train the web service. After some time it should detect them as spam as well :) Take a look at the main page of the project, I've put some instructions there on how to do this.

independent eZ Publish developer and service provider | http://blog.coomanskristof.be | http://ezpedia.org

Jeroen Sangers

Thursday 23 August 2007 10:58:09 am

Thanks again. When I have some more time I will try it out.

One more thing: I noticed that many of the new users do not have a first name, last name, username or e-mail address, while when I try to create such a user myself I get an 'Input did not validate' error and it won't let me create the user. Anybody knows what is going on, and how the spammers are able to create users anyway?

Powered by eZ Publish™ CMS Open Source Web Content Management. Copyright © 1999-2014 eZ Systems AS (except where otherwise noted). All rights reserved.

eZ debug

Timing: Jan 31 2025 01:21:15
Script start
Timing: Jan 31 2025 01:21:15
Module start 'layout'
Timing: Jan 31 2025 01:21:15
Module start 'content'
Timing: Jan 31 2025 01:21:15
Module end 'content'
Timing: Jan 31 2025 01:21:15
Script end

Main resources:

Total runtime0.0242 sec
Peak memory usage6,144.0000 KB
Database Queries3

Timing points:

CheckpointStart (sec)Duration (sec)Memory at start (KB)Memory used (KB)
Script start 0.00000.0045 589.1328151.1953
Module start 'layout' 0.00450.0047 740.3281220.6406
Module start 'content' 0.00930.0134 960.96881,005.6328
Module end 'content' 0.02270.0015 1,966.601641.9922
Script end 0.0242  2,008.5938 

Time accumulators:

 Accumulator Duration (sec) Duration (%) Count Average (sec)
Ini load
Load cache0.002610.9167140.0002
Check MTime0.00114.3700140.0001
Mysql Total
Database connection0.00062.491410.0006
Mysqli_queries0.002912.146230.0010
Looping result0.00000.090510.0000
Template Total0.00114.310.0011
Template load0.00083.279210.0008
Template processing0.00031.039610.0003
Override
Cache load0.00052.207110.0005
General
dbfile0.00208.288680.0003
String conversion0.00000.046240.0000
Note: percentages do not add up to 100% because some accumulators overlap

Templates used to render the page:

UsageRequested templateTemplateTemplate loadedEditOverride
1print_pagelayout.tpl<No override>extension/community/design/community/templates/print_pagelayout.tplEdit templateOverride template
 Number of times templates used: 1
 Number of unique templates used: 1

Time used to render debug report: 0.0001 secs