Signup abuse detection and blocking [Paid] 1.15.6

[Xon]

I'm not sure what you are saying?

 

[hostingunlock]

it is known that when installing this plugin the table xf_sv_user_registration_log is created I am asking you if xf_sv_user_registration_log can be truncate table

 

[Xon]

That table is never truncated.

The only time data is deleted from it is when the user's account is deleted, or the entire table deleted when the add-on is removed

 

[ivp]

@Xon any chance to implement these:

Signup abuse detection and blocking [Paid]

We have pretty common situation that a user creates account having typo in email address. Such account remains in state "Awaiting email confirmation". After some time such user creates a new account with correct email address. This add-on properly detects it as a duplicate. The thing is that in...

xenforo.com

Signup abuse detection and blocking [Paid]

@Xon can you please implement https://xenforo.com/community/threads/signup-abuse-detection-and-blocking-paid.156501/post-1477157 Also when seeing Honeypot report, it could link to their website https://www.projecthoneypot.org/ip_AAA.BBB.CCC.DDD for more information about affected IP address.

xenforo.com

 

[Andy.N]

@Xon
Bug report.
Seems like with PHP 8.0.6, viewing the spam trigger log will cause these warning.

Server error log

• ErrorException: Template error: [E_WARNING] Uninitialized string offset 0
• src/XF/Language.php:199
• Generated by: Andy.N
• 5/23/21 at 1:01 PM

Stack trace​

#0 src/XF/Language.php(199): XF\Template\Templater->handleTemplateError(2, '[E_WARNING] Uni...', '/home/nginx/dom...', 199)
#1 src/XF/Language.php(128): XF\Language->getEffectivePhraseName('', Array, Array)
#2 src/XF/Phrase.php(52): XF\Language->renderPhrase('', Array, 'html', Array)
#3 src/XF/Phrase.php(59): XF\Phrase->render()
#4 src/XF.php(1145): XF\Phrase->__toString()
#5 src/XF/Template/Templater.php(1178): XF::escapeString(Object(XF\Phrase), 'html')
#6 internal_data/code_cache/templates/l1/s0/admin/log_spam_trigger_view.php(21): XF\Template\Templater->escape(Object(XF\Phrase))
#7 src/XF/Template/Templater.php(1628): XF\Template\Templater->{closure}(Object(SV\StandardLib\XF\Template\Templater), Array, NULL)
#8 src/XF/Template/Template.php(24): XF\Template\Templater->renderTemplate('log_spam_trigge...', Array)
#9 src/XF/Mvc/Renderer/Json.php(84): XF\Template\Template->render()
#10 src/XF/Mvc/Renderer/Json.php(68): XF\Mvc\Renderer\Json->renderHtmlFallback('XF:Log\\SpamTrig...', 'admin:log_spam_...', Array)
#11 src/XF/Mvc/Dispatcher.php(458): XF\Mvc\Renderer\Json->renderView('XF:Log\\SpamTrig...', 'admin:log_spam_...', Array)
#12 src/XF/Mvc/Dispatcher.php(440): XF\Mvc\Dispatcher->renderView(Object(XF\Mvc\Renderer\Json), Object(XF\Mvc\Reply\View))
#13 src/XF/Mvc/Dispatcher.php(400): XF\Mvc\Dispatcher->renderReply(Object(XF\Mvc\Renderer\Json), Object(XF\Mvc\Reply\View))
#14 src/XF/Mvc/Dispatcher.php(58): XF\Mvc\Dispatcher->render(Object(XF\Mvc\Reply\View), 'json')
#15 src/XF/App.php(2337): XF\Mvc\Dispatcher->run()
#16 src/XF.php(488): XF\App->run()
#17 admin.php(13): XF::runApp('XF\\Admin\\App')
#18 {main}

Request state​

array(4) {
["url"] => string(177) "/admin.php?logs/spam-trigger/19979/&_xfRequestUri=%2Fadmin.php%3Flogs%2Fspam-trigger%2F&_xfWithData=1&_xfToken=1621789184%2Cd7a7c82d11a25e83fba7a545cb0f1f61&_xfResponseType=json"
["referrer"] => string(49) "https://domain.com/admin.php?logs/spam-trigger/"
["_GET"] => array(5) {
["logs/spam-trigger/19979/"] => string(0) ""
["_xfRequestUri"] => string(29) "/admin.php?logs/spam-trigger/"
["_xfWithData"] => string(1) "1"
["_xfToken"] => string(43) "1621789184,d7a7c82d11a25e83fba7a545cb0f1f61"
["_xfResponseType"] => string(4) "json"
}
["_POST"] => array(0) {
}
}

 

[Andy.N]

Never mind. It seems your addon is not the cause

Fixed - Template error: [E_WARNING] Uninitialized string offset 0 src/XF/Language.php:199

Stack trace #0 src/XF/Language.php(199): XF\Template\Templater->handleTemplateError(2, '[E_WARNING] Uni...', '/var/www/html/c...', 199) #1 src/XF/Language.php(128): XF\Language->getEffectivePhraseName('', Array, Array) #2 src/XF/Phrase.php(52): XF\Language->renderPhrase('', Array, 'html', Array)...

xenforo.com

 

[Xon]

Xon updated Signup abuse detection and blocking with a new update entry:

1.9.1 - Bugfix update

• Fix allowing banned users to logout was failing
• Inject a "log out" link onto banned error page if "Allow banned logout" is true
• Force global namespace for functions which are known to be optimizable to bytecode in php

Read the rest of this update entry...

 

[The Grand Potentate]

@Xon is there a way to see and then block users MAC addresses?

 

[Xon]

No real sane way to get it as it is something browsers don't disclose to javascript

 

[The Grand Potentate]

damn. oh well, thanks for looking into it.

 

[Xon]

Xon updated Signup abuse detection and blocking with a new update entry:

1.9.2 - Bugfix update

• Fix Link Checker not being run on post contents

Read the rest of this update entry...

 

[Xon]

Xon updated Signup abuse detection and blocking with a new update entry:

1.9.3 - Bugfix update

• As documented, make ASN matching actually stop on first match
• As documented, make Allowed email domain matching actually stop on first match

Read the rest of this update entry...

 

[PASS]

Does this also detect multiple accounts that were already registered prior to using this addon?

 

[Xon]

It can try, but often it will require them to log out and then log back in

 

[Xon]

Xon updated Signup abuse detection and blocking with a new update entry:

1.9.4 - Bugfix update

• Fix the moderate based off threshold was incorrectly using reject threshold instead of moderation threshold (affects v1.9.1-1.9.3)

Read the rest of this update entry...

 

[Xon]

Xon updated Signup abuse detection and blocking with a new update entry:

1.9.5 - Minor feature update

• Add "Allow rejected user logout" option

Read the rest of this update entry...

 

[Xon]

Xon updated Signup abuse detection and blocking with a new update entry:

1.9.6 - Bugfix & maintenance update

• On user delete, ensure expensive large data recomputing only occurs once even if multiple users are deleted at once.
• Fix running expensive data delete is full-delete for GDPR is not enabled
• Add "Approval queue - skip click-to-shrink" option which allows individual content types to skip the XF2.2+ default click-to-shrink behaviour

Read the rest of this update entry...

 

[ivp]

Get IP Intel DBL is not working since v1.9.1.

In GetIpIntel.php:

if (\is_array($config) || !$this->validateConfig($config))

should be:

if (!\is_array($config) || !$this->validateConfig($config))

Other php files should be checked if is_array is added there, too.

 

[Xon]

Get IP Intel DBL is not working since v1.9.1.

In GetIpIntel.php:

if (\is_array($config) || !$this->validateConfig($config))

should be:

if (!\is_array($config) || !$this->validateConfig($config))

Other php files should be checked if is_array is added there, too.

Thanks will work on auditing all the changes since then, but so far it just looks like just that one location.

 

[Xon]

Xon updated Signup abuse detection and blocking with a new update entry:

1.9.7 - Bugfix update

• Fix GetIpIntel integration from being soft-disabled

Read the rest of this update entry...