YaBB Community and Support Forum
YaBB Home About YaBB Download YaBB YaBB Support Customize Your Forum Development Contribute to the Project
  Welcome, Guest. Please Login or Register


 
Pages: 1 2 
Topic Tools
 
Why does Y2.5.2 ask for job, city, postal code on registration? (Read 2,033 times)
 Feb 8th, 2013 at 2:32pm
There are no actions to perform.  

Homer J. S. 
God Member
*****
Offline
Posts: 1,949
Germany


YaBB 2.5
Why does Y2.5.2 ask for job, city, postal code on registration?
I just recognized that YaBB 2.5.2 asks some odd questions on registration and I can't find any settings to control that... for example:

- Your zip code?
- Your job?
- Your city?
- Who sent you?

Sometimes there even is only a form field without any question... what the heck?

(No mods installed)

Edit:
It seems to be the spam bot honeypot feature. But I don't understand how it works and why it ask that questions?
« Last Edit: Feb 8th, 2013 at 2:36pm by Homer J. S. »  
My Homer is not a communist. He may be a liar, a pig, an idiot, a communist, but he is not a porn star.

www.silenthill-forum.de (YaBB 1.3.1 with 150+ mods)
www.retrogamerwelt.de (YaBB 2.5.2)
WWW 87313348  
IP Logged  
 Reply #1 - Feb 8th, 2013 at 2:45pm
There are no actions to perform.  

Derek Barnstorm 
Support Team
YaBB Next Team
Development Team
Beta Testers
****
Offline
Posts: 1,269
United Kingdom


YaBB 2.5
Re: Why does Y2.5.2 ask for job, city, postal code on registration?
Hi,

Add this to your style sheet:

Code (CSS)Select All
.green {
display:none;
} 


The idea is that a bot will see the form fields but humans won't. So if those fields are filled out registration will be denied because only a bot will fill them out.

It was added in 2.5.2, but you're using a 2.5 template.
 
 
IP Logged  
 Reply #2 - Feb 8th, 2013 at 2:50pm
There are no actions to perform.  

Homer J. S. 
God Member
*****
Offline
Posts: 1,949
Germany


YaBB 2.5
Re: Why does Y2.5.2 ask for job, city, postal code on registration?
Interesting feature! Smiley works now.
 
My Homer is not a communist. He may be a liar, a pig, an idiot, a communist, but he is not a porn star.

www.silenthill-forum.de (YaBB 1.3.1 with 150+ mods)
www.retrogamerwelt.de (YaBB 2.5.2)
WWW 87313348  
IP Logged  
 Reply #3 - Feb 8th, 2013 at 3:55pm
There are no actions to perform.  

Dandello 
Global Moderator
YaBB Next Team
Operations Team
Beta Testers
Support Team
*****
Offline
Posts: 1,863
Earth


YaBB 2.5
Re: Why does Y2.5.2 ask for job, city, postal code on registration?
Also open up the honeypot file in Languages/English and remove any extra blank lines hiding in the bottom.

In 2.5.4 that file will be fully admin editable from the admin center.
« Last Edit: Feb 8th, 2013 at 3:56pm by Dandello »  
WWW  
IP Logged  
 Reply #4 - Feb 8th, 2013 at 4:55pm
There are no actions to perform.  

Homer J. S. 
God Member
*****
Offline
Posts: 1,949
Germany


YaBB 2.5
Re: Why does Y2.5.2 ask for job, city, postal code on registration?
Ok, did so. But why it that feature coupled to the template's css file? I think it's not very good if someone (like me) uses a somewhat older template and therefor people might be prevented from registering because they see the questions and of course fill them, just to be told that they are not allowed to register  Wink
 
My Homer is not a communist. He may be a liar, a pig, an idiot, a communist, but he is not a porn star.

www.silenthill-forum.de (YaBB 1.3.1 with 150+ mods)
www.retrogamerwelt.de (YaBB 2.5.2)
WWW 87313348  
IP Logged  
 Reply #5 - Feb 8th, 2013 at 5:02pm
There are no actions to perform.  

Derek Barnstorm 
Support Team
YaBB Next Team
Development Team
Beta Testers
****
Offline
Posts: 1,269
United Kingdom


YaBB 2.5
Re: Why does Y2.5.2 ask for job, city, postal code on registration?
With a Honeypot it's not considered good practice to have the 'display:none' in the source code - a bot might be able to pick it up - hence the selector name 'green'.
 
 
IP Logged  
 Reply #6 - Feb 8th, 2013 at 5:47pm
There are no actions to perform.  

Homer J. S. 
God Member
*****
Offline
Posts: 1,949
Germany


YaBB 2.5
Re: Why does Y2.5.2 ask for job, city, postal code on registration?
The question is... how smart are bots nowadays? On my Y1 no bot ever managed to register the last 8,5 years. They can't even manage to fill something for the personal question and answer as they don't understand that they have to repeat the answer. I don't know if they're able to "read" the captcha.

http://www.diplompsychopath.de/cgi-bin/yabb3/YaBB.pl?board=;action=register
 
My Homer is not a communist. He may be a liar, a pig, an idiot, a communist, but he is not a porn star.

www.silenthill-forum.de (YaBB 1.3.1 with 150+ mods)
www.retrogamerwelt.de (YaBB 2.5.2)
WWW 87313348  
IP Logged  
 Reply #7 - Feb 8th, 2013 at 5:52pm
There are no actions to perform.  

Bill Myers 
God Member
Beta Testers
*****
Offline
Posts: 1,482
Los Angeles


YaBB 2.4
Re: Why does Y2.5.2 ask for job, city, postal code on registration?
Homer J. S. wrote on Feb 8th, 2013 at 5:47pm:
I don't know if they're able to "read" the captcha.

A captcha is now easily defeated by auto-bots, so it's become useless.

However, the good news is that YaBB's newest version evidently has as an option to edit the captcha so only hu-bots (humans) can figure it out.

I've been using this anti-spam bot measure for some time now, and can happily report that it stops spam-bots cold.

« Last Edit: Feb 8th, 2013 at 5:54pm by Bill Myers »  
Morning, noon, or night, have a great one! ...
WWW BillHMyers  
IP Logged  
 Reply #8 - Feb 8th, 2013 at 5:56pm
There are no actions to perform.  

Homer J. S. 
God Member
*****
Offline
Posts: 1,949
Germany


YaBB 2.5
Re: Why does Y2.5.2 ask for job, city, postal code on registration?
I know that many captchas can be read by bots. But if I remember right the captcha on my board is generated pixel by pixel - doesn't that make it harder for the bots to read it?
 
My Homer is not a communist. He may be a liar, a pig, an idiot, a communist, but he is not a porn star.

www.silenthill-forum.de (YaBB 1.3.1 with 150+ mods)
www.retrogamerwelt.de (YaBB 2.5.2)
WWW 87313348  
IP Logged  
 Reply #9 - Feb 8th, 2013 at 7:07pm
There are no actions to perform.  

Dandello 
Global Moderator
YaBB Next Team
Operations Team
Beta Testers
Support Team
*****
Offline
Posts: 1,863
Earth


YaBB 2.5
Re: Why does Y2.5.2 ask for job, city, postal code on registration?
Nope - they have OCR. What they can't do is identify things in graphics outside the form (which is why using anti-spam question and asking questions about a logo or graphic works), read instructions and modify their behavior (which is why ggn's captcha hack works), or make a choice that requires a mouse-move (SpamFruits).
 
WWW  
IP Logged  
 Reply #10 - Feb 8th, 2013 at 7:34pm
There are no actions to perform.  

Homer J. S. 
God Member
*****
Offline
Posts: 1,949
Germany


YaBB 2.5
Re: Why does Y2.5.2 ask for job, city, postal code on registration?
So this means I could also deactivate the captcha and it won't make any difference (besides that humans can register easier  Grin ).
 
My Homer is not a communist. He may be a liar, a pig, an idiot, a communist, but he is not a porn star.

www.silenthill-forum.de (YaBB 1.3.1 with 150+ mods)
www.retrogamerwelt.de (YaBB 2.5.2)
WWW 87313348  
IP Logged  
 Reply #11 - Feb 8th, 2013 at 8:05pm
There are no actions to perform.  

Dandello 
Global Moderator
YaBB Next Team
Operations Team
Beta Testers
Support Team
*****
Offline
Posts: 1,863
Earth


YaBB 2.5
Re: Why does Y2.5.2 ask for job, city, postal code on registration?
The standard captcha is pretty useless - but SpamFruits and anti-spam question both work exceptionally well - especially if you're careful in creating your custom questions and answers (the spammers know the answers to the standard ones.)
 
WWW  
IP Logged  
 Reply #12 - Feb 8th, 2013 at 8:25pm
There are no actions to perform.  

Homer J. S. 
God Member
*****
Offline
Posts: 1,949
Germany


YaBB 2.5
Re: Why does Y2.5.2 ask for job, city, postal code on registration?
I know, I was talking about the captcha from my Y1 (link above).
 
My Homer is not a communist. He may be a liar, a pig, an idiot, a communist, but he is not a porn star.

www.silenthill-forum.de (YaBB 1.3.1 with 150+ mods)
www.retrogamerwelt.de (YaBB 2.5.2)
WWW 87313348  
IP Logged  
 Reply #13 - Feb 8th, 2013 at 9:18pm
There are no actions to perform.  

Bill Myers 
God Member
Beta Testers
*****
Offline
Posts: 1,482
Los Angeles


YaBB 2.4
Re: Why does Y2.5.2 ask for job, city, postal code on registration?
Homer J. S. wrote on Feb 8th, 2013 at 8:25pm:
I know, I was talking about the captcha from my Y1 (link above).

The captcha as you have it in your forum can be easily defeated just as Dandello describes.

However, you can make edits to your captcha just as Dandello has done it in her test bed forum. I didn't provide a direct link to her registration pages because access isn't allowed from an outside domain. You can see her captcha modification on the 2nd page of the registration process.

By the way, one of the cool things about Dandello's test bed forums is that they showcase YaBB so wonderfully. Even as she tests them for bugs; whatever; she's so proficient with how YaBB works, there isn't a problem that comes up she can't solve.

I like checking out her test bed forums just to see how things are supposed to be done. It's very helpful.

 
Morning, noon, or night, have a great one! ...
WWW BillHMyers  
IP Logged  
 Reply #14 - Feb 8th, 2013 at 9:26pm
There are no actions to perform.  

Homer J. S. 
God Member
*****
Offline
Posts: 1,949
Germany


YaBB 2.5
Re: Why does Y2.5.2 ask for job, city, postal code on registration?
Hehe, just like me and YaBB 1 - I modded it so heavily over the years, if something goes wrong or I want to add something, I'll find the correct file and code within 1 minute most of the time.

Well, I'll leave the captcha as it is 'cause it's hardcoded. Even if bots can read it, they can't register, so there's no need for me to change, remove or improve it.
 
My Homer is not a communist. He may be a liar, a pig, an idiot, a communist, but he is not a porn star.

www.silenthill-forum.de (YaBB 1.3.1 with 150+ mods)
www.retrogamerwelt.de (YaBB 2.5.2)
WWW 87313348  
IP Logged  
Pages: 1 2 
Topic Tools
 

Get Yet another Bulletin Board at SourceForge.net. Fast, secure and Free Open Source software downloads Support This Project BoardMod - YaBB features and templates YaBB Codex - support on installation and usage YaBB Toolbar for your browser

YaBB Facebook Group Page

Vulnerability Scanner

Valid RSS Valid XHTML Valid CSS Powered by Perl
YaBB Chat and Support Community » Powered by YaBB 3.0 Beta!
YaBB Forum Software © 2000-2011. All Rights Reserved.