Jump to content

Post Before Registering needs a Captcha


CheersnGears

Recommended Posts

Posted

Bah, I didn't see that it doesn't pop up until after you click on the content field.

So I guess the BOTs have found a way around the captcha.   I may just go back to the old method.

Posted

Nice feature idea but it's definitely flawed and a spam magnet.

Quote

Guests will see the ability to submit content and then will immediately be prompted to register an account before the content is actually submitted and viewable.

Hmm, I just read a notification of a post awaiting approval and it was another criminal promoting p*rn. I went to my site by following the email link and although I wasn't signed in, I could see the post.

E533B816-F2B5-4CEA-A004-DBA7548C59CE.thumb.jpeg.d03e574b8705cbcdb2031c58cdb40e58.jpeg

 

After logging in it says it is not visible to members, although it's possibly visible at least to guests.

ACFA30C0-9EE2-42A9-9C78-43028B81F5D4.thumb.jpeg.0db76df72d9c53ded22d0aee0f75f64d.jpeg

 

Hopefully it's only because I was sent a moderator/admin message that I could see it, but it should require me to sign in first before it is visible. 

There are no obvious options to report as a spammer or add their details to my ban filters, just an option to deny.

The problem is it can lead to Sparkpost issues as the content is considered against their T&C's and is not good for clients who I don't want to have to expose to this rubbish.

It's the persistent contact form abuse scenario all over again, that was poorly implemented in terms of anti spam security, so I'll probably disable this on my sites for now.

Quote

Guests will only be see the ability to post if the Guests group specifically has permission to do so in that area.

Say, what? Lol! 

Posted
6 hours ago, The Old Man said:

Nice feature idea but it's definitely flawed and a spam magnet.

Hmm, I just read a notification of a post awaiting approval and it was another criminal promoting p*rn. I went to my site by following the email link and although I wasn't signed in, I could see the post.

E533B816-F2B5-4CEA-A004-DBA7548C59CE.thumb.jpeg.d03e574b8705cbcdb2031c58cdb40e58.jpeg

 

After logging in it says it is not visible to members, although it's possibly visible at least to guests.

ACFA30C0-9EE2-42A9-9C78-43028B81F5D4.thumb.jpeg.0db76df72d9c53ded22d0aee0f75f64d.jpeg

 

Hopefully it's only because I was sent a moderator/admin message that I could see it, but it should require me to sign in first before it is visible. 

There are no obvious options to report as a spammer or add their details to my ban filters, just an option to deny.

The problem is it can lead to Sparkpost issues as the content is considered against their T&C's and is not good for clients who I don't want to have to expose to this rubbish.

It's the persistent contact form abuse scenario all over again, that was poorly implemented in terms of anti spam security, so I'll probably disable this on my sites for now.

Say, what? Lol! 

I would suggest submitting a ticket so we can clarify your setup here as by definition you should not be seeing anything from Post Before Register unless the user went through the whole process.

There could be something third party acting here incorrectly but from the provided information I can’t provide any further details. 

Posted

Thanks Jim. I disabled the post before registering feature and checked my forum guest permissions after posting the above. My guest forum permissions had gone astray again, with permission enabled to post in several of my forums including my Support Q&A forum where this was posted. Normally there are none enabled for guests, so it was a timely reminder to do a wider permissions review, since I've had this happen after upgrades in the past. I've no idea why it sometimes happens.

Posted
Just now, The Old Man said:

Normally there are none enabled for guests, so it was a timely reminder to do a wider permissions review, since I've had this happen after upgrades in the past. I've no idea why it sometimes happens.

If you have Post Before Registering enabled, it will use Members group permission everywhere, not Guests permission, that’s why they can post.

Posted

To clarify....

If a guest posts using the "post before register" feature, the post will not be visible, anywhere, throughout the site, to anyone (including mods or administrators). You will not be sent any email notifications about the post, nor will you be able to approve it. The post will not be visible (at all, to anyone) until the user completes their registration.

We realize there were a handful of bugs when the feature was first released where-by the posts were visible to moderators only in a handful of locations, but those issues have been resolved in maintenance releases already.

Posted
On 4/26/2019 at 7:43 PM, Joel R said:

Are the posts from the bots actually coming through? And what version of Invision Community are you running? 

Yes, I'm having to manually delete 5 to 7 spam posts every morning.  They are hidden to general users.  I didn't have this issue until I enabled post before registering.   I'm on 4.4.3. 

 

On 4/29/2019 at 9:28 AM, bfarber said:

To clarify....

If a guest posts using the "post before register" feature, the post will not be visible, anywhere, throughout the site, to anyone (including mods or administrators). You will not be sent any email notifications about the post, nor will you be able to approve it. The post will not be visible (at all, to anyone) until the user completes their registration.

We realize there were a handful of bugs when the feature was first released where-by the posts were visible to moderators only in a handful of locations, but those issues have been resolved in maintenance releases already.

So are they maybe getting in the old way on my site? I have post before register on Pages, but not on Forums.  However my comments section from Pages stores in Forums. 

Posted
3 hours ago, CheersnGears said:

So are they maybe getting in the old way on my site? I have post before register on Pages, but not on Forums.  However my comments section from Pages stores in Forums. 

It's hard to definitively answer this without looking - I'd recommend submitting a ticket.

Archived

This topic is now archived and is closed to further replies.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...