Skip to:
Content
Pages
Categories
Search
Top
Bottom

Forum Replies Created

Viewing 25 replies - 26 through 50 (of 351 total)
  • @miguael

    Participant

    @windhamdavid – thanks for the hint about bbpress… didn’t know, that the register-file was still there… Now I deleted it (just in case) – although forums are not even activated in my install. By now, still no spammers registering… could be that activating hashcash again did the trick (although I really don’t get it why, for as far as I know it just protects the register-form, right? and it seems, that wasn’t even used…

    @chouf1 On the install I am havong troubles with there is NOT ONE spammer for sure. I know all of them personally! In my other install (I have 0 troubles until now, I will check back on that. thanks for the hint)

    PS: Chouf1 – wow, do you speak swissgerman :-)

    @miguael

    Participant

    Yes i disabled that Option already… Don’t think they come in that Way… :)

    my question is just: is there another possible Way to signup (besides the Register-page and adding through admins)

    @miguael

    Participant

    Just another little update: To me it seems that there are two different spam-signups (at least :-))

    The ones, that come in through the registration-form

    I could handle those with all the tipps (for me this worked best):

    – change the slug

    – additional-fields

    – change some text on the registration-page

    – change footer-text

    – SI-Captcha didn’t really work, so I used the modified invitation-code-plugin mentioned before

    – wp-ban did help, too (often wasn’t really needed – just left it there in case…)

    – changing/deleting wp-signup.php (which led me to this connected issue/question: https://buddypress.org/forums/topic/wp-signupphp-redirects-to-registration-slug-why)

    The ones, that don’t seem to use the registration-form or wp-signup.php at all

    – never had this problem before, so it hit me… Further described here with a open question for me: https://buddypress.org/forums/topic/is-there-a-backdoor-in-wpmubuddypress

    – This morning I found out, that I had deactivated the hashcash-plugin because I had comment-issues (didn’t come through anymore). I think the spam-flood came after deactivating it. Right now I have activated it again (just for signups) and no spam came in for a couple hours now (even with deactivated wp-ban, without captcha or invitation-plugin, wp-signup.php still there)

    So far my forther journey with this issue :-)

    @miguael

    Participant

    @hnla how did you deactivate blog-signup? If I use that option in the backend, registration does not accur at all. If I choose “only Useraccounts” they cannot create a blog in a second step (no new blogs at all)

    @miguael

    Participant

    It really is Crazy!!! Where and how do they get in, that they can Register like that? Every couple of minutes One signup…. HELP! Nothing seems to stop them… I Even disabled any registration and they keep on signing up – really Strange to me!

    @miguael

    Participant

    Thanks for another hint

    No, actually I was talking about http://www.prisma-online.org – but same thing with the slug. I just guess it’s not that, because if they would come in normally, they would have to put something in the additional field, wouldn’t they? (at least, that’s what they always did before I stopped them the first time…

    I now added again the .htaccess rules you described (didn’t change there the changed registration-slug…)

    Does that look right (sorry – on that level I have no idea anymore :-)):

    # BEGIN ANTISPAMBLOG REGISTRATION

    RewriteCond %{REQUEST_METHOD} POST

    RewriteCond %{REQUEST_URI} .registrieren*

    RewriteCond %{HTTP_REFERER} !.*prisma-online.org.* [OR]

    RewriteCond %{HTTP_USER_AGENT} ^$

    RewriteRule (.*) http://die-spammers.com/ [R=301,L]

    # END ANTISPAMBLOG REGISTRATION

    @miguael

    Participant

    thanks mlovelock – this sounds good. All of this has worked with me before.

    BUT now,

    even that I have blocked with WP-Ban *.info – the spammers with that email get through

    even that I have additional required field (lots of) – the spammers can register just with a name (nothing else)

    even that I have changed, deleted (whatever) wp-signup.php – spammers can register

    MY QUESTION IS: Where do they get in??? Did I overlook a loophole???

    Please – any further help would be much appreciated!!!

    In reply to: BuddyPress Like

    @miguael

    Participant

    @hempsworth If you would make the messages highly customizable (all of them), then you wouldn’t need a localization :-). I would like that, so I can choose, what users see…

    @miguael

    Participant

    Update: Even with an “empty” wp-signup.php they are still registering… really strange! Where could they come in, for they don’t need to fill out any required addition fields…?!?! Any ideas????

    @miguael

    Participant

    Sorry to pick that up… I thought I won with the spammers for I did what stwc wrote in his article (by the way – the site there is down :-()

    But yesterday until now I got about 100 spam-registrations. I did not delete wp-signup.php anymore, because the “reigster” in the admin-bar anywhere else but on the root-blog needs that file… So I thought it’s not a good idea.

    BUT now, the spammers registered with just the name. Although I have alot of additional, required field… How is that possible? I guess, they didn’t come in through the bp-register. Maybe the wp-signup.php directly?

    I have forums disabled altogether and as far as I know this issue with registering through bb-press should not be an issue anymore.

    Would appreciate if someone could give me a further tipp what to do or where they could come from.

    PS: @andy (or the developers): Why is it, that on subblogs the admin-bar “register” doesn’t point to the register-slug but is somehow a redirect from wp-signup.php (which doesn’t work anymore, when I delete or empty the file…)

    @miguael

    Participant

    @blackphantom Update to my latest post: They came in – probably 15h later… Now the tweets from BP –>Twitter don’t seem to work anymore (or maybe they just take as long…?)

    Would be great, to have that fixed :-) – or faster…

    @miguael

    Participant

    Here you can see it: http://www.young-people.ch/groups

    I like it very much!

    @miguael

    Participant

    @blackphantom Hmmm – strange thing. Yesterday it just worked fine, now, no tweets are coming in to BP anymore… I think it stopped, when I uploaded my localization. Could that (a translation) cause that?

    In reply to: BuddyPress Like

    @miguael

    Participant

    Yep, me too! :-) Localization or better, all the messages are costumizable from backend. Cool stuff, though! (I think I will add through css a little graphic instead of the text…

    @miguael

    Participant

    @blackphantom – I think your plugin is just awesome and gets better and better! WOW! The settings are already great!

    Some little suggestions:

    – @mentions from BP to twitter are still @ in twitter. Why not make a similar setting: “Export tweets containing @names”

    – Set a personal filter in the frontend like “only import/export tweets with … in it” and “never import/export tweets with … in it (say I twitter alot about buddypress in twitter, but my BP Users are not interested in that at all…)

    Would be even more great (if that is possible :-)

    And did i get that right – is it already translatable? How has the file to be names? (I will make a german translation)

    PS: I like, that we can name the twitter-app as we like too!!!

    In reply to: 1.2 plug-ins list

    @miguael

    Participant

    Just a little WARNING:

    Do NOT use

    “External Group Blogs” together with

    “Group activity stream subscription”

    They don’t like each other.

    Your users will be spammed with dozens of Emails a couple times a day.

    I think this is why the notifications plugin just picks up everything and the “external groups” fetches articles a couple times. Averytime stuff gets fetched, notifications for all the items (not just the new ones) gets sended out. So far my guess.

    I wrote the plugin-creators about it. hopefully they find a solution.

    BUT the plugins for themselves are GREAT!!! :-) THX!

    @miguael

    Participant

    yes – a limit would be very good (important!) – I guess there is none?

    @miguael

    Participant

    I just found out, that those plugins and “Group Activity Email Notifications” doesn’t really nicely work together. Everytime it fetches, the notification-plugin sends out emails… :-( But I guess it’s a “bug” there and I post it there as well…

    *just as a warning*

    @miguael

    Participant

    I created already a ticket…

    @miguael

    Participant

    I checked the DB and the “lost” content in private and hidden groups is still in there. At least that is good! :-)

    The question is: Why doesn’t it show anymore???

    Ps: ray doesn’t have the time right now to check (told me on PM)

    Can please somebody, who upgraded, check their private/hidden groups for pld (pre-1.2) content?!

    @miguael

    Participant

    By the way: If I want to translate those plugins – how must the .po file be named, and where does it need to be put (and, I you would like, andy, where should I send the translation)?

    @miguael

    Participant

    Thanks for updateing, Andy. It works now alot better (as far as I can tell after this little time…)

    But still in the Twitter-Plugin the problem with foreign characters (like german Umlaute)

    It the shows like that: Ein wunderschöner Tag – und ich sitze im Büro… Aber was macht man nicht alles für den Herrn! :-) (oder macht er grad diesen Tag für mich?)

    @miguael

    Participant

    Yes – i think a mail is enough for groups… (digests will be awesome! :))

    @miguael

    Participant

    Sounds great ray – would very much appreciate that (if it helps, I could also give you access)

    @miguael

    Participant

    Theme – same with Bp default

    DB – hmm, two different installs, with different DBs on two different servers… sounds strange, but could be.

    Anyone else…? PLEASE CHECK your hidden and private groups which had content prior to 1.2… I think it is easy to oversee… but would narrow the stuff down, if everybody else confirms it really is fine on there install. So please post, if it’s REALLY (checked) fine with you…

    Thanks!

Viewing 25 replies - 26 through 50 (of 351 total)
Skip to toolbar