UBB.threads PHP Forum Software Community Forums UBB.threads Bug Reports Fixed Bugs 7.0.2 flood-check

I have the flood check set to 180 but new users are still able to register and send messages every 20 seconds or so.

Guys, is the flood check working for anyone?

Three minutes seems like quite a long time. Mine is set for 10 seconds, but can't really test it myself since it doesn't pertain to Admins/Mods... I'm wondering what values others use?

The flood control is only for posting topics/replies. I've got it set to 30 seconds on my devel board and it's working ok. It doesn't throttle registrations or private messages however.

I have it set to 180 but some spammer registered and I think he replied in like 30 topics in under 15 mins.

Unfortunately I erased this guy and his posts from within the CP, but I'll try to make a 'print screen' the next time something like this happens.

P.S. Is the edit feature fully safe now? Before even with an edit time limit of 5 mins users could edit their messages indefinitely as long as they simply opened the edit page within those 5 minutes...

I use 5 minutes for the floodcheck, and 30 minutes for the edit post timer; both seem to work well

FIVE MINUTES?? Between posts???

Mine's like 10 SECONDS and I never had a problem.

Dag...! Good thing you're an Admin/Mod then, to spam at will... cuz to me that's a REALLY LONG time for everyone else!!!

lol, well it varies the forum; i have several communities... my main is 30 seconds, and another forum is 5 minutes

Guys, I think I know where the bug is:

All new registrations have the flood check set to 0, which basically means that the flood check is automatically switched off for each user upon registration (the setting needs to be blank in order for the global setting to take effect).

Is this fixed in 7.1?

Hmm, it's supposed to have a default value of -1 for the field. I'll alter the adduser script to make sure that it sets new registrations to -1 for 7.1

The flood check assigned to new registrations on my 7.0 board isn't overridden (the field is blank)...

"If blank, the global config setting will be used."

That's ideal. What's a setting of -1 do?

-1 will make it so it uses the default set in the control panel. Any value of 0 an up means that it's specific to that user, in which case 0 would be no flood check.

So a blank value and -1 do the say thing... I suppose the CP wording would need to be changed if both are valid values...

"If blank or -1, the global config setting will be used."

hmm, no a blank value would be treated as 0 as well.

Doh!

Guess I just didn't notice since mine's set to only 10 secs anyway...

Okay, so guess this needs to be changed anyway:

"If set to -1, the global config setting will be used."

Thanks guys, case closed. Would never have noticed this if not for the frequent spammer visits that I get with someone dumping 30 cut&paste posts in a matter of minutes...

Rick, is there a database command that can be run to reset all those members who have the setting of 0 back to -1? And is this change getting into 7.1 final?

Thanks

This should work:

All of mine are set to NULL though

I think you should just be able to:

Hmmm...

I typed in "UPDATE `forums_USER_PROFILE` SET `USER_FLOOD_CONTROL_OVERRIDE` = '-1';" and it came back with some sort of message that 13,000 rows were affected by the query.

But when I check out any user the field is still blank. What's even more strange is that when I try the query again it tells me that 0 rows were affected.

Does this mean that all users have the -1 setting even though it doesn't show up in the CP? And are moderators still "immune" to the flood-check?

Mods and Admins should always be immune.

As for the cp not displaying, i'm not sure, it may just show blank when you look at it, but the blank should actually be a -1.

Just logged in as a test user and had no trouble posting twice in a matter of seconds, bypassing the flood check.

What would be the query to blank out that setting for all users? Just ending the query with... = '-1';" as opposed to = '-1';" ?

This would be for users which don't have a setting (which is none, since you ran it before):

This would be for ALL users, regardless of if it's set or not:

If you want the field to be blank, just update '-1' to ''.

Sorry, I meant to say: = '(nothing between the quotes)';" as opposed to = '-1';"

I guess I now have it set to -1 because when I ran that query again earlier for a second time it wouldn't change any rows, even though in the CP users still show up with a blank setting.

So how can I blank out the setting now? Is it safe to run a query with just '' to wipe out whatever setting I created?

Yes it'd be safe to run the query.

I'm finding on my forums that i hvae some users who are '-1' and some who are ''; i'm thinking that When created they are created with '' and when they update their profile for the first time, it's changed to '-1'... I have nothing to back this, but it makes sense why one or two "new" users are '-1' whereas 20 other new users are ''...

I'm curious what the proper setting is :glances at rick:

Well I'm curious what's going on, cause I...:

- ran the query to change the setting to "-1" for all users
- checked up on random users in the admin CP only to see that the setting was still blank for each of them
- ran the query again only to see that no rows were affected (so seemingly all were changed to -1 even though the admin CP... still showed them as blank?)
- logged in using a regular (non-admin, non-mod) account only to post two posts in 15 seconds, bypassing the admin setting of 180