Bots / Scripts Can Register on 2.3.5

[brawlyrox]

Ok, will take a backup of my DB and try that sometime soon. Thankies.

[RobertMidd]

Ok, will take a backup of my DB and try that sometime soon. Thankies.

I tried the query last night and it worked fine, so you should be ok but take a backup as you indicate.

[brawlyrox]

Just had a chance to try this and it doesn't seem to be working. The location field is actually a custom field held in the pfields table so I have changed the SQL code to this:

UPDATE ibf_members SET mgroup='26'WHERE id=(SELECT e.member_id FROM ibf_pfields_content e WHERE e.field_4='google')

There aren't any error messages, ACP reports that it succesfully runs, but it just doesn't move any members to the usergroup.

SELECT * FROM ibf_pfields_content WHERE field_4='google'

Returns 3000+ results

SELECT * FROM ibf_members WHERE id=(SELECT ibf_pfields_content.member_id FROM ibf_pfields_content WHERE ibf_pfields_content.field_10="143040")

Returns an error message saying "Subquery returns more than 1 row".

[bfarber]

Try

SELECT * FROM ibf_members WHERE id IN(SELECT ibf_pfields_content.member_id FROM ibf_pfields_content WHERE ibf_pfields_content.field_10="143040")

[brawlyrox]

Yup, that worked, as did:

UPDATE ibf_members SET mgroup='26' WHERE id IN(SELECT ibf_pfields_content.member_id FROM ibf_pfields_content WHERE ibf_pfields_content.field_10="143040")

Many thanks bfarber and RobertMidd! :)

[Katsuma]

I haven't had any bots since applying 2.3.6.

Well, I had three this week. I went an took the IP addresses in my .htaccess file and accounts were created promoting Xrunner.

I had to put it back and hope 3.0 will take care of it.

S/N: KlaraNovikoffa
IP: 91.76.220.19

[stoo2000]

It could very well be a human spammer, paid to post the links. If it is there's no way you can keep them out with a captcha.

[Katsuma]

It could very well be a human spammer, paid to post the links. If it is there's no way you can keep them out with a captcha.

It wasn't human (if you can call 'them' that). Humans would leave a "hit" on my third-party tracker and it did not show that IP address in the logs.

I've look on other boards and notice the same display name. At least the .htaccess works

[Wareczek]

In Poland, we had the same situation on three boards.

[kissybissy]

Well, I had three this week. I went an took the IP addresses in my .htaccess file and accounts were created promoting Xrunner.

I had to put it back and hope 3.0 will take care of it.

S/N: KlaraNovikoffa

IP: 91.76.220.1

I've got the same KlaraNovikoffa today. Two days ago, I've got a different bot. I do not remember the name.

[DawPi]

Yeah! Someone broke reCaptcha! IPS go to the war. ;]

[Mark]

There's already a topic about this in the customer lounge :)