UBB.threads PHP Forum Software Community Forums UBB.threads 7 Version 7 Support Questions re: 2 new items added in 7.5.7

I have a couple questions concerning two new additions in 7.5.7:

1. Added Stop Forum Spam integration (http://www.stopforumspam.com) with 4 levels of protection.
- Could someone provide some information about the "stopforumspam" and after it is added/implemented for one's forum, where is the option to enable "4 levels of protection"?

2. A site wide custom "Board Key"™ is now available, allowing the UBB administrator to specify and further enhance security.
- What is this all about??

I have not installed this as yet.
Been busy with a new desktop build.
But the second item should be a secondary login to the cp.
Not sure where it is in the cp. Meaning not just your member login but you are prompted for a additional login for the cp.
At least that is how it works here. Much like a password protected folder.
My 2 cents.
Could be wrong though.

For the stopforumspam.
It is a integration with the site:
stopforumspam.com.
Adapted from Gizmo's mod at ubbdev.
Where you create a account at their site to obtain a api key to use on the forum. the other site tracks spammers and has a database to research or add to.

You can find the Stop Forum Spam settings in the control panel at:
CP -> Master Settings -> Primary Settings -> Stop Forum Spam Tab

I'm not sure about the Board Key, but it's set at:
CP -> Master Settings -> Primary Settings -> General Tab -> "Board security key"

Under Board security key:

One has been pre-generated for you, if it was blank.


I still have a blank/ empty text-field.

So do we need to remember this random string? Or do we use our usual credentials?

Well I finally installed 7.5.7 and tried the board key.
Either it is a broke item or I totally misunderstood it.
Because it does nothing for me.

Time for SD to chime in on further details.

How about StopForumSpam? Did you get that working?

That I did. I had to register on the stopforum spam forum to be able to get the API Key, the location of which wasn't that easy to find, hahaha. But I simply pasted the Key in the appropriate place, checked the box and it was off and running.

The only thing that is less than clear is Option 2:

Semi-Auto with Member management checks before display: •Semi-Auto - This automatically checks new registrations in member management...

What is unclear to me is if this option simply CHECKS all new registrations with the stopforumspam database, or if it checks AND blocks/rejects it if is on their database. So, not knowing what it actually does, I have mine currently set to Option 1: Manual with 1-click check.

Hi Pilgrim,
Can I ask how you know it's working?

I did the same thing but I see no difference. I get the same boxes that you do, but when I 'test connectivity' I get very little feedback.

Think of the board key as a 'salt' to certain cookies... just put a random string in there, so certain cookie values can't be predicted.

It's not an extra login, just extra security.

Also, i would also highly recommend adding a cookie prefix to your boards.. that prevents hacker bots from using the standard cookie names to try to pester your board.

most sites i've seen leave that blank too and shouldn't. Now cookie prefix should be short and sweet.. like 'sd', but random... keep it a-z, A-Z

i don't want to explain too much in open.. but it's basic security measures for any board

Cheers matey, good to see you here again.

I know it is working because I have tested it. Via the Control Panel > Member Management, type in a username/display name, e-mail, etc. of one of your members. Click on the Username in the next window and at the bottom of the Member Information tab (default), click on the "More info" button. You will get a response from stopforumspam telling you whether the member's e-mail, reg. IP and last IP are either Good or Bad.

Another problem I've having is getting into the Control Panel. Even after logging onto the Board successfully, when I click on the Control Panel, I get a silly security message and I have to login again. Then, when in the Control Panel if I click on any of the areas on the left, I am prompted to login in yet again. I suspect this is not normal.

if you downloaded the .zip file early in the release, you probably had one with a bug on the popup.

you should grab the latest .zip, where that is fixed.

That was the 2nd bug found ( ruben found it with IE ) after Allen found the blank screen bug on change profile...

The fix was uploaded about 2hrs after initial release, but there have been about 10 fixes put in since ( small / cosmetic, but worth grabbing )

I uploaded the latest files from today.
The upgrade utility won't work for me as it thinks it's already been upgraded.

Uploading the files alone doesn't seem to be enough as SFS still reports nothing to me.

Sooooooo, IF you click on the "More info" button in a member's Profile which I described in my previous reply, what happens?

- Nothing?
- You get the SFS report box but it is blank?
- You get the SFS report box with e-mail, IP but no results?
- Other?

Yep - as before...

Test connectivity

More

I'm assuming you obtained an API Key from stopforumspam and pasted it in the required field in your CP, right?

According to SD
And I have tried this myself.
If you elect option one. You don't need a key.
It just does a look up at stopforumspam.com.
So the info button should at least show a good or bad result on the fields.

And the test link should show.
API status: Can connect

you only need a key if you intend to use the Report Spammer option..

so, Ruben is correct..

I removed my key and it still doesn't work.

The Test Connectivity
Appears to be the issue
If you can't connect then you will never get anything.
Even if you have a key.

Possibly you need to go directly to the site and see if possibly your board ip has been banned.

my guess is that there is API connectivity issues to SFS from your site..

we probably don't have enough code to indicate failure to connect in there.

Test connectivity should at least give a 'Failed' message.. i will look into it..

I got a new key from SFS - this doesn't work either.

Read my post a couple above Driv.

It appears you can't connect.
You don't need a key to just test the connection to SFS.

Yeah, I did read it Ruben - thanks.
I'm one of those people who will try to exhaust everything before walking away.

I also tried getting new keys with and without http:// www etc. etc.

Just have to keep trying.

Whilst doing this, I have fired off an email to my host to see if a white-listing is necessary.

We shall see...

Well I think you need to contact SFS
They don't play games with banning.

ask your host if 'file_get_contents' is enabled in php too

Aye will do. I will report back when I know something.

Ruben - my ip doesn't show up over there.

They ban servers via IP; go check and see if they've blacklisted your server (you'll need to contact them), it's not uncommon for shared hosts to end up blacklisted due to abuse at some places...

good thought @giz... yah, shared hosting could have your board affected by some OTHER board's/site's bad behavior too

sucks to share 1 IP

VPS all the way baby! lol...

SFS is whitelisted and

...is enabled.

Any further thoughts?

Other that re-upgrading.
In the screen
Control Panel » Primary Settings Tab Stop forum spam.
Enable Stop Forum Spam should be checked
then the test link should work
it should show "can connect"

if that fails you can't go any further.

Spam Protection Level:
Manual with 1-click check should be checked for minimal without a SFS key.

BTW, were you using the mod prior to upgrading?
I still think you need to send a PM to SFS to check your board IP. You can't check it yourself only they can to see if they banned you for abuse. Using the feature not meaning banned due to being a spammer

oi oi SD

Where does the SimpleXMLElement class live?

libxml.. make sure that extension is loaded

ta-dah!