Page Index Toggle Pages: [1] 2 
Topic Tools
Hot Topic (More than 10 Replies) Why does Y2.5.2 ask for job, city, postal code on registration? (Read 3,357 times)
Homer J. S.
God Member
*****
Offline



Posts: 1,949
Location: Germany

None
Why does Y2.5.2 ask for job, city, postal code on registration?
Feb 8th, 2013 at 2:32pm
Post Tools
I just recognized that YaBB 2.5.2 asks some odd questions on registration and I can't find any settings to control that... for example:

- Your zip code?
- Your job?
- Your city?
- Who sent you?

Sometimes there even is only a form field without any question... what the heck?

(No mods installed)

Edit:
It seems to be the spam bot honeypot feature. But I don't understand how it works and why it ask that questions?
« Last Edit: Feb 8th, 2013 at 2:36pm by Homer J. S. »  

My Homer is not a communist. He may be a liar, a pig, an idiot, a communist, but he is not a porn star.
www.silenthill-forum.de (YaBB 1.3.1 with 150+ mods)
www.retrogamerwelt.de (YaBB 2.5.2)
Back to top
WWWICQ  
IP Logged
 
Derek Barnstorm
Support Team
YaBB Next Team
Development Team
Beta Testers
****
Offline



Posts: 1,269
Location: United Kingdom

None
Re: Why does Y2.5.2 ask for job, city, postal code on registration?
Reply #1 - Feb 8th, 2013 at 2:45pm
Post Tools
Hi,

Add this to your style sheet:

Code (CSS)
Select All
.green {
display:none;
} 


The idea is that a bot will see the form fields but humans won't. So if those fields are filled out registration will be denied because only a bot will fill them out.

It was added in 2.5.2, but you're using a 2.5 template.
  
Back to top
 
IP Logged
 
Homer J. S.
God Member
*****
Offline



Posts: 1,949
Location: Germany

None
Re: Why does Y2.5.2 ask for job, city, postal code on registration?
Reply #2 - Feb 8th, 2013 at 2:50pm
Post Tools
Interesting feature! Smiley works now.
  

My Homer is not a communist. He may be a liar, a pig, an idiot, a communist, but he is not a porn star.
www.silenthill-forum.de (YaBB 1.3.1 with 150+ mods)
www.retrogamerwelt.de (YaBB 2.5.2)
Back to top
WWWICQ  
IP Logged
 
Dandello
YaBB Administrator
YaBB Next Team
Operations Team
Beta Testers
Support Team
*****
Offline



Posts: 2,489
Location: Earth

YaBB 2.6.1
Re: Why does Y2.5.2 ask for job, city, postal code on registration?
Reply #3 - Feb 8th, 2013 at 3:55pm
Post Tools
Also open up the honeypot file in Languages/English and remove any extra blank lines hiding in the bottom.

In 2.5.4 that file will be fully admin editable from the admin center.
« Last Edit: Feb 8th, 2013 at 3:56pm by Dandello »  

If you only have one solution to a problem you're not trying hard enough!
Back to top
WWW  
IP Logged
 
Homer J. S.
God Member
*****
Offline



Posts: 1,949
Location: Germany

None
Re: Why does Y2.5.2 ask for job, city, postal code on registration?
Reply #4 - Feb 8th, 2013 at 4:55pm
Post Tools
Ok, did so. But why it that feature coupled to the template's css file? I think it's not very good if someone (like me) uses a somewhat older template and therefor people might be prevented from registering because they see the questions and of course fill them, just to be told that they are not allowed to register  Wink
  

My Homer is not a communist. He may be a liar, a pig, an idiot, a communist, but he is not a porn star.
www.silenthill-forum.de (YaBB 1.3.1 with 150+ mods)
www.retrogamerwelt.de (YaBB 2.5.2)
Back to top
WWWICQ  
IP Logged
 
Derek Barnstorm
Support Team
YaBB Next Team
Development Team
Beta Testers
****
Offline



Posts: 1,269
Location: United Kingdom

None
Re: Why does Y2.5.2 ask for job, city, postal code on registration?
Reply #5 - Feb 8th, 2013 at 5:02pm
Post Tools
With a Honeypot it's not considered good practice to have the 'display:none' in the source code - a bot might be able to pick it up - hence the selector name 'green'.
  
Back to top
 
IP Logged
 
Homer J. S.
God Member
*****
Offline



Posts: 1,949
Location: Germany

None
Re: Why does Y2.5.2 ask for job, city, postal code on registration?
Reply #6 - Feb 8th, 2013 at 5:47pm
Post Tools
The question is... how smart are bots nowadays? On my Y1 no bot ever managed to register the last 8,5 years. They can't even manage to fill something for the personal question and answer as they don't understand that they have to repeat the answer. I don't know if they're able to "read" the captcha.

http://www.diplompsychopath.de/cgi-bin/yabb3/YaBB.pl?board=;action=register
  

My Homer is not a communist. He may be a liar, a pig, an idiot, a communist, but he is not a porn star.
www.silenthill-forum.de (YaBB 1.3.1 with 150+ mods)
www.retrogamerwelt.de (YaBB 2.5.2)
Back to top
WWWICQ  
IP Logged
 
Bill Myers
God Member
Beta Testers
*****
Offline



Posts: 1,737
Location: Los Angeles

YaBB 2.4
Re: Why does Y2.5.2 ask for job, city, postal code on registration?
Reply #7 - Feb 8th, 2013 at 5:52pm
Post Tools
Homer J. S. wrote on Feb 8th, 2013 at 5:47pm:
I don't know if they're able to "read" the captcha.

A captcha is now easily defeated by auto-bots, so it's become useless.

However, the good news is that YaBB's newest version evidently has as an option to edit the captcha so only hu-bots (humans) can figure it out.

I've been using this anti-spam bot measure for some time now, and can happily report that it stops spam-bots cold.

« Last Edit: Feb 8th, 2013 at 5:54pm by Bill Myers »  

Morning, noon, or night, have a great one!

Note: This forum doesn't allow for us to freely edit our posts or topics to make corrections as needed, so please remember to look for subsequent posts if you see any mistakes or outdated information. Sorry for the inconvenience.
Back to top
IP Logged
 
Homer J. S.
God Member
*****
Offline



Posts: 1,949
Location: Germany

None
Re: Why does Y2.5.2 ask for job, city, postal code on registration?
Reply #8 - Feb 8th, 2013 at 5:56pm
Post Tools
I know that many captchas can be read by bots. But if I remember right the captcha on my board is generated pixel by pixel - doesn't that make it harder for the bots to read it?
  

My Homer is not a communist. He may be a liar, a pig, an idiot, a communist, but he is not a porn star.
www.silenthill-forum.de (YaBB 1.3.1 with 150+ mods)
www.retrogamerwelt.de (YaBB 2.5.2)
Back to top
WWWICQ  
IP Logged
 
Dandello
YaBB Administrator
YaBB Next Team
Operations Team
Beta Testers
Support Team
*****
Offline



Posts: 2,489
Location: Earth

YaBB 2.6.1
Re: Why does Y2.5.2 ask for job, city, postal code on registration?
Reply #9 - Feb 8th, 2013 at 7:07pm
Post Tools
Nope - they have OCR. What they can't do is identify things in graphics outside the form (which is why using anti-spam question and asking questions about a logo or graphic works), read instructions and modify their behavior (which is why ggn's captcha hack works), or make a choice that requires a mouse-move (SpamFruits).
  

If you only have one solution to a problem you're not trying hard enough!
Back to top
WWW  
IP Logged
 
Homer J. S.
God Member
*****
Offline



Posts: 1,949
Location: Germany

None
Re: Why does Y2.5.2 ask for job, city, postal code on registration?
Reply #10 - Feb 8th, 2013 at 7:34pm
Post Tools
So this means I could also deactivate the captcha and it won't make any difference (besides that humans can register easier  Grin ).
  

My Homer is not a communist. He may be a liar, a pig, an idiot, a communist, but he is not a porn star.
www.silenthill-forum.de (YaBB 1.3.1 with 150+ mods)
www.retrogamerwelt.de (YaBB 2.5.2)
Back to top
WWWICQ  
IP Logged
 
Dandello
YaBB Administrator
YaBB Next Team
Operations Team
Beta Testers
Support Team
*****
Offline



Posts: 2,489
Location: Earth

YaBB 2.6.1
Re: Why does Y2.5.2 ask for job, city, postal code on registration?
Reply #11 - Feb 8th, 2013 at 8:05pm
Post Tools
The standard captcha is pretty useless - but SpamFruits and anti-spam question both work exceptionally well - especially if you're careful in creating your custom questions and answers (the spammers know the answers to the standard ones.)
  

If you only have one solution to a problem you're not trying hard enough!
Back to top
WWW  
IP Logged
 
Homer J. S.
God Member
*****
Offline



Posts: 1,949
Location: Germany

None
Re: Why does Y2.5.2 ask for job, city, postal code on registration?
Reply #12 - Feb 8th, 2013 at 8:25pm
Post Tools
I know, I was talking about the captcha from my Y1 (link above).
  

My Homer is not a communist. He may be a liar, a pig, an idiot, a communist, but he is not a porn star.
www.silenthill-forum.de (YaBB 1.3.1 with 150+ mods)
www.retrogamerwelt.de (YaBB 2.5.2)
Back to top
WWWICQ  
IP Logged
 
Bill Myers
God Member
Beta Testers
*****
Offline



Posts: 1,737
Location: Los Angeles

YaBB 2.4
Re: Why does Y2.5.2 ask for job, city, postal code on registration?
Reply #13 - Feb 8th, 2013 at 9:18pm
Post Tools
Homer J. S. wrote on Feb 8th, 2013 at 8:25pm:
I know, I was talking about the captcha from my Y1 (link above).

The captcha as you have it in your forum can be easily defeated just as Dandello describes.

However, you can make edits to your captcha just as Dandello has done it in her test bed forum. I didn't provide a direct link to her registration pages because access isn't allowed from an outside domain. You can see her captcha modification on the 2nd page of the registration process.

By the way, one of the cool things about Dandello's test bed forums is that they showcase YaBB so wonderfully. Even as she tests them for bugs; whatever; she's so proficient with how YaBB works, there isn't a problem that comes up she can't solve.

I like checking out her test bed forums just to see how things are supposed to be done. It's very helpful.

  

Morning, noon, or night, have a great one!

Note: This forum doesn't allow for us to freely edit our posts or topics to make corrections as needed, so please remember to look for subsequent posts if you see any mistakes or outdated information. Sorry for the inconvenience.
Back to top
IP Logged
 
Homer J. S.
God Member
*****
Offline



Posts: 1,949
Location: Germany

None
Re: Why does Y2.5.2 ask for job, city, postal code on registration?
Reply #14 - Feb 8th, 2013 at 9:26pm
Post Tools
Hehe, just like me and YaBB 1 - I modded it so heavily over the years, if something goes wrong or I want to add something, I'll find the correct file and code within 1 minute most of the time.

Well, I'll leave the captcha as it is 'cause it's hardcoded. Even if bots can read it, they can't register, so there's no need for me to change, remove or improve it.
  

My Homer is not a communist. He may be a liar, a pig, an idiot, a communist, but he is not a porn star.
www.silenthill-forum.de (YaBB 1.3.1 with 150+ mods)
www.retrogamerwelt.de (YaBB 2.5.2)
Back to top
WWWICQ  
IP Logged
 
Page Index Toggle Pages: [1] 2 
Topic Tools