XF 2.2 How can a GUEST be able to post a thread on my forum

[oneobgynmd]

Im baffled. Lately we have been hit on a daily basis by spammers from Uganda and Nigeria who post everything from black magic, voodoo, spells, porn and women with phone numbers. Fortunately 99% are rejected when they apply as a registered member. In our group permissions a GUEST has permission only 1. to see forum 2. to view nodes, 3. to see threads and 4. to see content of threads. EVERYTHING else in GUEST permissions is set to NEVER> Today a user who under their name showed "GUEST" was able to post 2 new threads in one of our Sub Forums . How is this possible

 

[oneobgynmd]

The spam then came from a registered user and not a guest.

all members in our database , when clicked on takes me to their data in the admin control panel . When I clicked on this name nothing happened

 

[oneobgynmd]

What's his name?

mamamelody was what it said

 

[Seeker-Smith]

all members in our database , when clicked on takes me to their data in the admin control panel . When I clicked on this name nothing happened

If a user is deleted that will happen.

 

[oneobgynmd]

If a user is deleted that will happen.

we do delete REJECTED applicants but only after banning their IP addresses as well as their email address. We dont delete anyone else

 

[oneobgynmd]

I remain completely miffed

 

[Seeker-Smith]

we do delete REJECTED applicants but only after banning their IP addresses as well as their email address. We dont delete anyone else

That sounds like a lot of work. Have you setup a banned group? Do you use the spam tools during registration?

If you do, do a spam clean the user gets banned, put in the banned group, can't register again with the same address. Banning the IP is a nickel toss. I've never found it really helpful. The user can use a proxy or VPN to get back.

 

[oneobgynmd]

Totally agree with everything you say. We do have a Banned Users group but we keep getting hit

 

[oneobgynmd]

the problem is they all use VPN's so it is the tail chasing the dog

 

[Seeker-Smith]

Totally agree with everything you say. We do have a Banned Users group but we keep getting hit

Okay so don't delete the spammer. Ban them. The spam clean will also report them and take care of the posts they made.

 

[oneobgynmd]

all permissions in the Banned usergroup are set to NEVER

 

[oneobgynmd]

what about REJECTED applicants. should they be set as BANNED usergroup

 

[Seeker-Smith]

Totally agree with everything you say. We do have a Banned Users group but we keep getting hit

Life as a forum owner. I've been doing it for 20+ years. Spammers never quit, there is a new one for every 5 you ban.

 

[Seeker-Smith]

what about REJECTED applicants. should they be set as BANNED usergroup

Are you manually approving? Rejecting keeps them in the database and won't allow them to post or register with the same address.

 

[oneobgynmd]

Are you manually approving? Rejecting keeps them in the database and won't allow them to post or register with the same address.

we have been banning their IP addresses and email and then deleting REJECTED. Should we not do that and make them Banned usergroup

 

[Seeker-Smith]

we have been banning their IP addresses and email and then deleting REJECTED. Should we not do that and make them Banned usergroup

You should not be deleting. Simply reject, or better Spam clean if you're setup correctly.

 

[oneobgynmd]

perfect.Thank you. Makes our lives easier going forward

How do you recommend setting up spam clean correctly. Ours goes through stopforumspam.com

 

[Seeker-Smith]

perfect.Thank you. Makes our lives easier going forward

How do you recommend setting up spam clean correctly. Ours goes through stopforumspam.com

I use that and DNSPL Project Honey Pot plus Akismet.

 

[FTL]

Life as a forum owner. I've been doing it for 20+ years. Spammers never quit, there is a new one for every 5 you ban.

Tell me about it. They're scum, especially as so many of them are scammers too.

 

[Mr Lucky]

what about REJECTED applicants. should they be set as BANNED usergroup

I found there is never any need or point in a banned usergroup. Just banning them is all you need to do.

 

[frm]

I found there is never any need or point in a banned usergroup. Just banning them is all you need to do.

Some forums utilize a banned group so that the user count goes up, making the appearance of a larger forum.

I've seen a forum with a million members, but if you go to the profiles of half (or at random), you can tell that they're in some sort of banned state.