FriendsOfFlarum StopForumSpam

Kulga

Geraldlzc I don't believe so.
This StopForumSpam extension queries the StopForumSpam database for users who have posted spam in the past. It will check their username, ip address, email and if enough people have reported it, block them from registering.

This extension (I believe) uses a preset list of domains to known disposable email generators and prevents users from registering with those email addresses.

There are some domains on StopForumSpam that are universally rejected which acts like the disposable email extension.

I would think I can create a disposable email and potentially register fine on a forum with StopForumSpam extension, or be a known spammer with a gmail email address and register for a forum with the disposable email extension.
Similar functions but different methods of addressing spammers.

Geraldlzc

Kulga Thank you for your reply .

maicol07

This is a good extension but I don't think it will work with API registrations (like with SSO): you should listen to the registered event instead of adding a middleware

IanM

maicol07 So long as the 3rd party extension hooks into the Providers, a RegisteringFromProvider event will be raised, which will then be handled by this extension (from 1.1.0) onwards

IanM

1.1.0

Refactor admin settings page
Support for confidence rating check on email address
Support for sending the email address as a md5 hash
Dispatch an event when registration is blocked RegistrationBlocked
Allow reporting of IPv6 addresses back to SFS
Allow selection of SFS server region (Allow for keeping data within Europe, for example)
Support registrations via Provider (fof/oauth, fof/passport, etc)

This update was partially supported by @glowingblue 🥰

Updating

composer require fof/stopforumspam:"*"
php flarum cache:clear

Be sure to review the extension settings and ensure these meet your individual requirements. Default settings are present as a suggestion only.

fakruzaruret

IanM I get his error

IanM

fakruzaruret that appears to be an issue with fof/spamblock's integration. I'll take a look tomorrow

Akito

Any extension to alternatives this extension the api key couldn’t get anymore

CyberGene

This extension doesn't work, or at least I can't make it working.

There's an email spam service called vusra.com, you can go there and try creating various fake emails and check for confirmation to those emails, a clever service unfortunately.

Now, I enabled this extension on my Flarum forum and have enabled "email SPAM check", threshold 5, confidence 50 (tried 100 and 0, actually can't understand what this does).

I'm trying to register with emails generated by vusra.com and I am allowed to register and receive confirmation emails. However if I check the emails with the StopForumSpam REST API, all these fake emails receive frequency of 255:

http://api.stopforumspam.org/api?email=lolteroste@vusra.com&json

{
  "success": 1,
  "email": {
    "lastseen": "2022-01-23 11:29:31",
    "frequency": 255,
    "appears": 1,
    "confidence": 99.95,
    "blacklisted": 1,
    "value": "lolteroste@vusra.com"
  }
}

Apparently 255 is much more than 5 but the detection doesn't get activated. What am I doing wrong and how can I check if the extension works, are there any logs?

CyberGene

Can anyone confirm this extension works on his 1.2 forum? Try registering with a random email @vusra.com. The entire domain is blocked but the extension doesn’t detect it. If it worked it would stop the registration but instead it goes to awaiting for email confirmation which is wrong.

Braden

CyberGene It work's. I just tried it from my site.

luceos

CyberGene maybe it's a combination of extensions or your SPS key is no longer working.. Maybe something is popping up under your log files at storage/logs? Can you post your php flarum info so that we can check extensions for possible compatibility issues?

CyberGene

Braden thanks, are you on 1.2?

Braden

CyberGene Yes, am on flarum 1.2

A lot extensions are working fine

CyberGene

luceos What's an SPS key, is this the API key for StopForumSpam? Because I generated one a few days ago, so it shouldn't have expired. But even then my understanding is it's used only when reporting spam, not when checking for spam.

Here are my settings:

Braden, are you sure you're on Flarum 1.2? Because after I installed 1.2 a nickname field appeared on the registration form and I don't see one on your screenshot. Here's how mine looks:

When I click on Sign Up, it goes OK and a temporary user is created, I also receive the email for confirmation on the vusra.com service and can confirm the email and then we have a normally registered user 🙁

luceos there are no logs.

Here's my info:

Flarum core 1.2.0
PHP version: 8.0.14
MySQL version: 5.7.32-35-log
Loaded extensions: Core, date, libxml, openssl, pcre, sqlite3, zlib, bcmath, bz2, calendar, ctype, curl, dba, dom, enchant, hash, fileinfo, filter, ftp, gd, gettext, gmp, SPL, iconv, session, intl, json, mbstring, standard, mysqlnd, pcntl, mysqli, PDO, pdo_mysql, pdo_pgsql, pdo_sqlite, pgsql, Phar, posix, pspell, readline, Reflection, imap, shmop, SimpleXML, soap, sockets, sodium, exif, sysvmsg, sysvsem, tidy, tokenizer, xml, xmlreader, xmlwriter, xsl, zip, memcached, Zend OPcache
+-------------------------------------+---------+--------+
| Flarum Extensions                   |         |        |
+-------------------------------------+---------+--------+
| ID                                  | Version | Commit |
+-------------------------------------+---------+--------+
| flarum-flags                        | v1.2.0  |        |
| flarum-suspend                      | v1.2.0  |        |
| flarum-tags                         | v1.2.0  |        |
| fof-spamblock                       | 1.0.2   |        |
| flarum-subscriptions                | v1.2.0  |        |
| flarum-approval                     | v1.2.0  |        |
| flarum-markdown                     | v1.2.0  |        |
| v17development-seo                  | v1.8.0  |        |
| sycho-move-posts                    | v0.1.5  |        |
| fof-user-directory                  | 1.2.0   |        |
| fof-user-bio                        | 1.0.1   |        |
| fof-upload                          | 1.0.7   |        |
| fof-stopforumspam                   | 1.1.1   |        |
| fof-sitemap                         | 1.0.3   |        |
| fof-polls                           | 1.0.5   |        |
| fof-pages                           | 1.0.1   |        |
| fof-nightmode                       | 1.1.8   |        |
| fof-links                           | 1.0.3   |        |
| fof-ignore-users                    | 1.0.2   |        |
| fof-forum-statistics-widget         | 1.0.2   |        |
| fof-formatting                      | 1.0.2   |        |
| fof-follow-tags                     | 1.0.2   |        |
| fof-byobu                           | 1.1.0   |        |
| flarum-sticky                       | v1.2.0  |        |
| flarum-statistics                   | v1.2.0  |        |
| flarum-pusher                       | v1.2.0  |        |
| flarum-nicknames                    | v1.2.0  |        |
| flarum-mentions                     | v1.2.0  |        |
| flarum-lock                         | v1.2.0  |        |
| flarum-likes                        | v1.2.0  |        |
| flarum-lang-english                 | v1.2.0  |        |
| flarum-emoji                        | v1.2.0  |        |
| flarum-bbcode                       | v1.2.0  |        |
| extiverse-mercury                   | 0.1.3   |        |
| clarkwinkelmann-first-post-approval | 1.0.0   |        |
| clarkwinkelmann-emojionearea        | 1.0.0   |        |
| askvortsov-rich-text                | v2.1.1  |        |
| askvortsov-markdown-tables          | v1.2.1  |        |
+-------------------------------------+---------+--------+
Base URL: https://mydomain.com/forum
Installation path: /home/customer/www/mydomain.com/public_html/forum
Queue driver: sync
Mail driver: smtp
Debug mode: off

Braden

CyberGene I installed 1.2 a nickname field appeared on the registration form and I don't see one on your screenshot.

I have nickname module turned off since then, it could be the reason not showing that field on v 1.2

CyberGene

I reinstalled the extension, cleaned the cache multiple times... still the same. As a side note, I disabled it, purged it, then removed it with composer remove but after installing it again I could see all my settings preserved, e.g. the API key. It was my understanding that purge would remove all DB settings for an extension or is that not the case?

Braden

Removing the extension via composer to some extension still leaves leftovers, its a known issue but it shouldn't be a reason for it not working. Infact it's a good sign you have the api key in your setting's

clarkwinkelmann

"Uninstall" (migrate down) feature in Flarum only removes data that the extension added through database migrations, so it often doesn't include the settings which are stored in a Flarum database table.

For it to clear settings, the extension developers need to add a migration that inserts an initial value for settings, and clears them in the down function. Very few extensions actually do it, so in practice settings aren't impacted by that feature.

There's also no way for Flarum to automatically reset the settings because there isn't a standard naming or registration system for settings at the moment so Flarum has no way to know which setting value belongs to which extension.

CyberGene

I see, thanks.

Now, I really prefer having this extension working. What strategies can I test? Disabling extensions one by one while reproducing the faulty scenario to see whether another extension might be affecting it? Any way to debug the extension? I'm a Java developer but PHP doesn't mean a lot to me 😃 I can see the source code of the extension in the vendor folder. If I make some changes there, will they apply? Like putting some log statements?

Braden

CyberGene try to turn ON, ip address spam check, so you would now have two options that are ON, and reduced the Threshold number to 2.

It's supposed to work, just keep trying

« Previous Page Next Page »