Porn Spammer hit my forum

[Kier]

I have already explained in this thread the reasons why we are prepared to offer this functionality now while we were not six months ago.

[Tolitz]

Hate to tell you guys "I told you so", but a year ago I posted a question about the exact same thing and nobody paid any attention to me:

http://www.vbulletin.com/forum/show...ight=bots+image

Just goes to show how legitimate security concerns are neglected until theory becomes reality.

Part of the reason for this change of heart was the inclusion of the GD library in PHP 4.3.0. It's now reasonable to expect the majority of servers to include GD support, rather than the situation 6 months ago, when servers with GD support were in the minority.

vB 2.3.0 RC2 is now released, including our own image-based verification system.

For posterity's sake

[Steve Machol]

I'm getting really confused here...(and it doesn't take much!)

Would somebody, preferably a vB developer or Mod please answer briefly in this post what steps we should be taking.

To take advantage of the latest fix you'll need to upgrade to 2.3.0RC. Otherwise there is not much more you can do other than turn off new registrations, moderate new members or watch your forums closely.

[vBR]

Looking at the upgrade instructions in the member's area, it only shows how to upgrade to vB2.3.0 RC2 from vB2.2.9 and earlier.
How do we upgrade to vB2.3.0 RC2 from vB2.3.0 RC1?

[Steve Machol]

Upload the files and run upgrade23.php again as per Kier's Announcement:

http://www.vbulletin.com/forum/showthread.php?postid=417528#post417528

[vBR]

Thank you.

I went straight to the download and upgrade instructions without thinking about the announcements.
Do you think we could have the upgrade instructions updated to reflect this?

[jmd]

Just installed the new release and it works great.

Good job and thanks

[ForceGrown]

Good Job Indeed.

1. Forums doesn't need Spammer like that person
2. He passed the Rules by sending a p0rn msgs

[vBR]

Good Job Indeed.

1. Forums doesn't need Spammer like that person
2. He passed the Rules by sending a p0rn msgs

Hence the title of this thread "Porn Spammer hit my forum"

[ManagerJosh]

Anyone notice boards like Invision Board, phpBB haven't been affected by this?

[vBR]

Anyone notice boards like Invision Board, phpBB haven't been affected by this?

It looks like the bot/script/whatever read the directory of vB's here.
You know, the option you have to be listed in the member's area.

[InSite]

Another name to add to the list:

georgesltd56
168.209.98.67
[email protected]

Off to download 2.3.0 RC2.

I'd like to also re-iterate a point I tried to make earlier - if you look at the timescale it has taken for Jelsoft to react to solving this problem, no-one can be dis-satisfied - they have done a fantastic job. However, I do feel they let themselves down when it comes to communicating with customers.

[Floris]

Scott, Kier, Freddie,

Not to be an arse or anything, but ...

ImageMagik can be installed as none-root user, maybe make a version that detects if GD1/2 is installed, and if not, lets the user enter the path to imagemagik (can be done during installation, upgrade or just through the admin control panel). This would be a nice solution for those who don't have the GD library. If they can't install imagemagik, have very old php, then they are just reaaally out of luck. But at least vBulletin gave the oppertunity to use an alternative then the GD library isn't installed.

*Just a thought*


ps,
ignore this post if it will set back development of vb3* {lol}

[Floris]

Another name to add to the list:

georgesltd56
168.209.98.67
[email protected]

Off to download 2.3.0 RC2.

I'd like to also re-iterate a point I tried to make earlier - if you look at the timescale it has taken for Jelsoft to react to solving this problem, no-one can be dis-satisfied - they have done a fantastic job. However, I do feel they let themselves down when it comes to communicating with customers.

No one of my current members uses GameBox.net as an E-mail address, so I just added that to the ban list too.

[InSite]

Off to download 2.3.0 RC2.

I swear they waited until I said that before releasing RC3!!!

*Off to download 2.3.0 RC3*




*Looks in members area for VB3*