Previous Thread
Next Thread
Print Thread
Hop To
Joined: Jan 2012
Posts: 95
journeyman
journeyman
Joined: Jan 2012
Posts: 95
I have been out in the wild for a while and upon my return I find that our stopforumspam submissions are not reaching their destination. Any suggestions?

7.5.8



Life is Good on Bremer Pond

Bremer Pond Weather
Joined: Jun 2006
Posts: 16,289
Likes: 115
UBB.threads Developer
UBB.threads Developer
Joined: Jun 2006
Posts: 16,289
Likes: 115
When logged into the Stop Forum Spam site, what does your My Spammers page say? Is your API key from Stop Forum Spam installed correctly in the UBB configurations? (If there is no key it will not submit users, or log submissions to the My Spammers page).



I am a Web Development Contractor, I do not work for UBBCentral. I have provided free User to User Support since the beginning of these support forums.
Do you need Forum Install or Upgrade Services?
Forums: A Gardeners Forum, Scouters World
UBB.threads: UBBWiki, UBB Styles, UBB.Sitemaps
Longtime Supporter & Resident Post-A-Holic
VNC Web Services: Code Modifications, Upgrades, Styling, Coding Services, Disaster Recovery, and more!
Joined: Jan 2012
Posts: 95
journeyman
journeyman
Joined: Jan 2012
Posts: 95
It says: "Here is a list of your contributions. If you need to remove an entry, please click on the minus symbol in the far right next to the entry. You have a total of 541 submissions

The last submission shown is:

14-May-16 23:41 180.234.111.62 kawrapakma kawrapakma@gmail.com

There have been daily submissions since that date but they are not in the stopforumspam database. Also when A moderator hits the the Report Spammer Button nothing seems to happen.

I forgot where the API is stored? Is it possible it became corrupt by some nefarious activity?


Life is Good on Bremer Pond

Bremer Pond Weather
Joined: Jan 2012
Posts: 95
journeyman
journeyman
Joined: Jan 2012
Posts: 95
Found it and the key is correctly entered.

The API status is "can connect".

I am trying a new API Key.


Life is Good on Bremer Pond

Bremer Pond Weather
Joined: Jun 2006
Posts: 16,289
Likes: 115
UBB.threads Developer
UBB.threads Developer
Joined: Jun 2006
Posts: 16,289
Likes: 115
White screens when you try to submit, hmm; do your error logs have any new entries, specifically 503 errors? It's possible that your webhost recently installed Suhousin (probably about the same time your most recent entry into the SFS database was) and it could be killing the request... In fact, I put a lot of time into UBB.threads v7.6.0+ System Requirement Test - 20160222 because of Suhosin errors over the years.

The API key for SFS (the configuration options and a "Test" link are also on this page) are stored at:
CP -> Master Settings -> Primary Settings -> Stop Forum Spam


I am a Web Development Contractor, I do not work for UBBCentral. I have provided free User to User Support since the beginning of these support forums.
Do you need Forum Install or Upgrade Services?
Forums: A Gardeners Forum, Scouters World
UBB.threads: UBBWiki, UBB Styles, UBB.Sitemaps
Longtime Supporter & Resident Post-A-Holic
VNC Web Services: Code Modifications, Upgrades, Styling, Coding Services, Disaster Recovery, and more!
Joined: Jan 2012
Posts: 95
journeyman
journeyman
Joined: Jan 2012
Posts: 95
New API didn't make any difference. Our HC scanned the server and found:

We have disabled the known malicious script by removing read, write and execute privileges on the file:

SCAN ID: 061516-0120.839
TIME: Jun 15 02:23:34 -0500
PATH: /home/2/4/1/1026/1026/public_html/
{HEX}gzbase64.inject.unclassed.15 : /home/2/4/1/1026/1026/public_html/forums/templates/2011.php

They suggest changing FTP and database passwords. FTP is easy and done. What are the steps to change the database passwords? I assume I would have to close the forum to do these steps?


Life is Good on Bremer Pond

Bremer Pond Weather
Joined: Jun 2006
Posts: 16,289
Likes: 115
UBB.threads Developer
UBB.threads Developer
Joined: Jun 2006
Posts: 16,289
Likes: 115
2011.php isn't a valid UBB.threads file; seems someone either exploited something on the server or uploaded the file to the server and chose that folder to store the file in as it's not generally accessed by anyone doing anything other than upgrading a site.

You should ask them to look at your server logs for any type of activity around the time that the file was created.

To change the MySQL password, you'd just simply open the /includes/config.inc.php file and change the password line, after updating the password through the MySQL settings page supplied by your host.


I am a Web Development Contractor, I do not work for UBBCentral. I have provided free User to User Support since the beginning of these support forums.
Do you need Forum Install or Upgrade Services?
Forums: A Gardeners Forum, Scouters World
UBB.threads: UBBWiki, UBB Styles, UBB.Sitemaps
Longtime Supporter & Resident Post-A-Holic
VNC Web Services: Code Modifications, Upgrades, Styling, Coding Services, Disaster Recovery, and more!
Joined: Jan 2012
Posts: 95
journeyman
journeyman
Joined: Jan 2012
Posts: 95
The stopforumspam tech is asking: (I can't recall where the submission code is located.....)

Are you able to check the submission code add tell me if it looks anything like that, specifically with the fclose() - the variable names aren't an issue, just if its fput() and then fclose()

$fp = @fsockopen("www.stopforumspam.com", 80);
if ($fp) {
fputs($fp, "POST /add.php HTTP/1.1\n" );
fputs($fp, "Host: www.stopforumspam.com\n" );
fputs($fp, "Content-type: application/x-www-form-urlencoded\n" );
fputs($fp, "Content-length: ".strlen($sfsData)."\n" );
fputs($fp, "Connection: close\r\n\r\n");
fputs($fp, $sfsData);
fclose($fp);



Life is Good on Bremer Pond

Bremer Pond Weather
Joined: Apr 2004
Posts: 1,945
Likes: 145
UBB.threads Developer
UBB.threads Developer
Joined: Apr 2004
Posts: 1,945
Likes: 145
UBB.threads 7.5.9
/scripts/adduser.inc.php

I believe its at the end of the file.


Current developer of UBB.threads PHP Forum Software
Current Release: UBBT 7.7.5 // Preview: UBBT 8.0.0
isaac @ id242.com // my forum @ CelicaHobby.com
Joined: Jan 2012
Posts: 95
journeyman
journeyman
Joined: Jan 2012
Posts: 95
Thanks


Life is Good on Bremer Pond

Bremer Pond Weather
Joined: Jan 2012
Posts: 95
journeyman
journeyman
Joined: Jan 2012
Posts: 95
This from the stopforumspam.com tech that I have been working with:

"I think I've found the problem as I think its down to an upgraded (to fix a security issue) version of the nginx web server. Thanks for pointing this out, I'll work on fixing it now"

I will add more to this later.


Life is Good on Bremer Pond

Bremer Pond Weather
Joined: Jun 2006
Posts: 16,289
Likes: 115
UBB.threads Developer
UBB.threads Developer
Joined: Jun 2006
Posts: 16,289
Likes: 115
Let me know if it ends up having been an issue with their server versus a SuHosin Filter issue; if it ends up being a filter problem with Suhosin and the host has to whitelist a script, v7.6.0 has that code in additional places.


I am a Web Development Contractor, I do not work for UBBCentral. I have provided free User to User Support since the beginning of these support forums.
Do you need Forum Install or Upgrade Services?
Forums: A Gardeners Forum, Scouters World
UBB.threads: UBBWiki, UBB Styles, UBB.Sitemaps
Longtime Supporter & Resident Post-A-Holic
VNC Web Services: Code Modifications, Upgrades, Styling, Coding Services, Disaster Recovery, and more!
Joined: Jan 2012
Posts: 95
journeyman
journeyman
Joined: Jan 2012
Posts: 95
They had me add this code before the last fclose:

$output = ''; while( !feof( $fp ) ) { $output .= fgets( $fp, 1024); }
fclose($fp);

Submissions resumed with that line included.


Life is Good on Bremer Pond

Bremer Pond Weather
Joined: Jun 2006
Posts: 16,289
Likes: 115
UBB.threads Developer
UBB.threads Developer
Joined: Jun 2006
Posts: 16,289
Likes: 115
Where exactly?


I am a Web Development Contractor, I do not work for UBBCentral. I have provided free User to User Support since the beginning of these support forums.
Do you need Forum Install or Upgrade Services?
Forums: A Gardeners Forum, Scouters World
UBB.threads: UBBWiki, UBB Styles, UBB.Sitemaps
Longtime Supporter & Resident Post-A-Holic
VNC Web Services: Code Modifications, Upgrades, Styling, Coding Services, Disaster Recovery, and more!
Joined: Jan 2012
Posts: 95
journeyman
journeyman
Joined: Jan 2012
Posts: 95
adduser.inc.php

PHP Code
 // Stop Forum Spam - EMail Validation
	function PostToHost($data) {
		$fp = fsockopen("www.stopforumspam.com",80);
		fputs($fp, "POST /add.php HTTP/1.1\n" );
		fputs($fp, "Host: www.stopforumspam.com\n" );
		fputs($fp, "Content-type: application/x-www-form-urlencoded\n" );
		fputs($fp, "Content-length: ".strlen($data)."\n" );
		fputs($fp, "Connection: close\n\n" );
		fputs($fp, $data);
		$output = ''; while( !feof( $fp ) ) { $output .= fgets( $fp, 1024);  }
fclose($fp);
		fclose($fp); 


Life is Good on Bremer Pond

Bremer Pond Weather
Joined: Jun 2006
Posts: 16,289
Likes: 115
UBB.threads Developer
UBB.threads Developer
Joined: Jun 2006
Posts: 16,289
Likes: 115
Let me know if your stats start increasing again; I went and looked at my own and indeed they stopped on May 12th. I'm testing some coding changes based on their supplied one liner (be sure you only have one fclose, you may have errors printing to your error log while having two).

The proposed change (for adduser.inc.php, v7.6.0 adds similar coding to login.inc.php as well):
PHP Code
// Stop Forum Spam - EMail Validation
function PostToHost($data) {
	$fp = fsockopen("www.stopforumspam.com", 80);
	fputs($fp, "POST /add.php HTTP/1.1\n");
	fputs($fp, "Host: www.stopforumspam.com\n");
	fputs($fp, "Content-type: application/x-www-form-urlencoded\n");
	fputs($fp, "Content-length: ".strlen($data)."\n");
	fputs($fp, "Connection: close\n\n");
	fputs($fp, $data);
	$output = ""; while(!feof($fp)) { $output .= fgets($fp, 1024); }
	fclose($fp);
} 

Last edited by Gizmo; 06/27/2016 9:35 PM.

I am a Web Development Contractor, I do not work for UBBCentral. I have provided free User to User Support since the beginning of these support forums.
Do you need Forum Install or Upgrade Services?
Forums: A Gardeners Forum, Scouters World
UBB.threads: UBBWiki, UBB Styles, UBB.Sitemaps
Longtime Supporter & Resident Post-A-Holic
VNC Web Services: Code Modifications, Upgrades, Styling, Coding Services, Disaster Recovery, and more!
Joined: Jan 2012
Posts: 95
journeyman
journeyman
Joined: Jan 2012
Posts: 95
If I plugged in the 7.6.0 code above would it function correctly in version 7.5.8?

Maybe I am getting over confident changing stuff.........


Life is Good on Bremer Pond

Bremer Pond Weather
Joined: Jun 2006
Posts: 16,289
Likes: 115
UBB.threads Developer
UBB.threads Developer
Joined: Jun 2006
Posts: 16,289
Likes: 115
It's ultimately your supplied code with the extra fclose removed.


I am a Web Development Contractor, I do not work for UBBCentral. I have provided free User to User Support since the beginning of these support forums.
Do you need Forum Install or Upgrade Services?
Forums: A Gardeners Forum, Scouters World
UBB.threads: UBBWiki, UBB Styles, UBB.Sitemaps
Longtime Supporter & Resident Post-A-Holic
VNC Web Services: Code Modifications, Upgrades, Styling, Coding Services, Disaster Recovery, and more!
Joined: Jan 2012
Posts: 95
journeyman
journeyman
Joined: Jan 2012
Posts: 95
I removed the extra fclose.

Still submitting spammers as per the prescribed design parameters.

Did the additional line of code work for you also?

Thanks.


Life is Good on Bremer Pond

Bremer Pond Weather
Joined: Jun 2006
Posts: 16,289
Likes: 115
UBB.threads Developer
UBB.threads Developer
Joined: Jun 2006
Posts: 16,289
Likes: 115
I haven't had any spam submissions, since my testing on my test script on the 28th, on my three sites running the alpha of 7.6.0 (UBBDev, A Gardeners Forum, and UGN Security).


I am a Web Development Contractor, I do not work for UBBCentral. I have provided free User to User Support since the beginning of these support forums.
Do you need Forum Install or Upgrade Services?
Forums: A Gardeners Forum, Scouters World
UBB.threads: UBBWiki, UBB Styles, UBB.Sitemaps
Longtime Supporter & Resident Post-A-Holic
VNC Web Services: Code Modifications, Upgrades, Styling, Coding Services, Disaster Recovery, and more!
Joined: Feb 2007
Posts: 1,294
Likes: 2
Veteran
Veteran
Joined: Feb 2007
Posts: 1,294
Likes: 2
I have had 2 spammers try to register but in my spam stuff I had not seen any submissions registered.

Joined: Jun 2006
Posts: 16,289
Likes: 115
UBB.threads Developer
UBB.threads Developer
Joined: Jun 2006
Posts: 16,289
Likes: 115
There is a "PostToSFS" function in admin/test_stopforumspam.php file that needs to be updated as well; I've renamed this function for 760 and updated it as well in our main development pages so that it'll be pushed out to the beta group.


I am a Web Development Contractor, I do not work for UBBCentral. I have provided free User to User Support since the beginning of these support forums.
Do you need Forum Install or Upgrade Services?
Forums: A Gardeners Forum, Scouters World
UBB.threads: UBBWiki, UBB Styles, UBB.Sitemaps
Longtime Supporter & Resident Post-A-Holic
VNC Web Services: Code Modifications, Upgrades, Styling, Coding Services, Disaster Recovery, and more!

Link Copied to Clipboard
ShoutChat
Comment Guidelines: Do post respectful and insightful comments. Don't flame, hate, spam.
Recent Topics
Looking for a forum
by azr - 03/15/2024 11:26 PM
Editing Links in Post
by Outdoorking - 03/15/2024 9:31 AM
Question on barkrowler and the like
by Mors - 02/29/2024 6:51 PM
Member Permissions Help
by domspeak - 02/27/2024 6:31 PM
Forum Privacy Policy
by ECNet - 02/26/2024 11:58 AM
Who's Online Now
2 members (Geoff, domspeak), 353 guests, and 190 robots.
Key: Admin, Global Mod, Mod
Random Gallery Image
Latest Gallery Images
Los Angeles
Los Angeles
by isaac, August 6
3D Creations
3D Creations
by JAISP, December 30
Artistic structures
Artistic structures
by isaac, August 29
Stones
Stones
by isaac, August 19
Powered by UBB.threads™ PHP Forum Software 8.0.0
(Preview build 20230217)