6 days later

Why the plugin prevent a normal user's registering when his username is "Lucifer"

a month later

1.0.0

  • Update for Flarum 1.0
Installation
composer require fof/stopforumspam:"*"
php flarum cache:clear
19 days later

Is this anything to worry about? error_log has 193 entries of this line:

PHP Notice: Undefined property: stdClass::$frequency in /vendor/fof/stopforumspam/src/Middleware/RegisterMiddleware.php on line 84

line 84:
$frequency += $value->frequency;

    Geraldlzc I don't believe so.
    This StopForumSpam extension queries the StopForumSpam database for users who have posted spam in the past. It will check their username, ip address, email and if enough people have reported it, block them from registering.

    This extension (I believe) uses a preset list of domains to known disposable email generators and prevents users from registering with those email addresses.

    There are some domains on StopForumSpam that are universally rejected which acts like the disposable email extension.

    I would think I can create a disposable email and potentially register fine on a forum with StopForumSpam extension, or be a known spammer with a gmail email address and register for a forum with the disposable email extension.
    Similar functions but different methods of addressing spammers.

        This is a good extension but I don't think it will work with API registrations (like with SSO): you should listen to the registered event instead of adding a middleware

        • IanM replied to this.
          3 months later

          1.1.0

          • Refactor admin settings page
          • Support for confidence rating check on email address
          • Support for sending the email address as a md5 hash
          • Dispatch an event when registration is blocked RegistrationBlocked
          • Allow reporting of IPv6 addresses back to SFS
          • Allow selection of SFS server region (Allow for keeping data within Europe, for example)
          • Support registrations via Provider (fof/oauth, fof/passport, etc)

          This update was partially supported by @glowingblue 🥰

          Updating
          composer require fof/stopforumspam:"*"
php flarum cache:clear

          Be sure to review the extension settings and ensure these meet your individual requirements. Default settings are present as a suggestion only.

          image

          maicol07 So long as the 3rd party extension hooks into the Providers, a RegisteringFromProvider event will be raised, which will then be handled by this extension (from 1.1.0) onwards

              fakruzaruret that appears to be an issue with fof/spamblock's integration. I'll take a look tomorrow

                Any extension to alternatives this extension the api key couldn’t get anymore

                4 months later

                This extension doesn't work, or at least I can't make it working.

                There's an email spam service called vusra.com, you can go there and try creating various fake emails and check for confirmation to those emails, a clever service unfortunately.

                Now, I enabled this extension on my Flarum forum and have enabled "email SPAM check", threshold 5, confidence 50 (tried 100 and 0, actually can't understand what this does).

                I'm trying to register with emails generated by vusra.com and I am allowed to register and receive confirmation emails. However if I check the emails with the StopForumSpam REST API, all these fake emails receive frequency of 255:

                http://api.stopforumspam.org/api?email=lolteroste@vusra.com&json

                {
  "success": 1,
  "email": {
    "lastseen": "2022-01-23 11:29:31",
    "frequency": 255,
    "appears": 1,
    "confidence": 99.95,
    "blacklisted": 1,
    "value": "lolteroste@vusra.com"
  }
}

                Apparently 255 is much more than 5 but the detection doesn't get activated. What am I doing wrong and how can I check if the extension works, are there any logs?

                Can anyone confirm this extension works on his 1.2 forum? Try registering with a random email @vusra.com. The entire domain is blocked but the extension doesn’t detect it. If it worked it would stop the registration but instead it goes to awaiting for email confirmation which is wrong.

                  CyberGene maybe it's a combination of extensions or your SPS key is no longer working.. Maybe something is popping up under your log files at storage/logs? Can you post your php flarum info so that we can check extensions for possible compatibility issues?