#1 2015-02-14 2:45 pm

pedigree

uıɐbɐ ʎɐqǝ ɯoɹɟ pɹɐoqʎǝʞ ɐ buıʎnq ɹǝʌǝu ɯ,ı

From: New Zealand

Registered: 2008-04-16

Posts: 7,056

captcha changes to search

I have had to add a one-per-hour captcha to the search page due to a persistent DDoS on this page, in an attempt to prevent the resource exhaustion that spammers are trying to cause

This will mean that you get prompted for a captcha on the first search per hour.

While I suspect this will make a lot of people unhappy, and a couple extremely angry, this is my choice and was necessary to prevent the site falling over.

Old Dragon

Member

Registered: 2012-11-25

Posts: 196

Re: captcha changes to search

I just went to check it out but there was no captcha. The search didn't work.

---

Spammers can all go feck themselves. With a cactus. A large one. With two branches.  Sideways
SEO = Spam Emitting Organisation

pedigree

uıɐbɐ ʎɐqǝ ɯoɹɟ pɹɐoqʎǝʞ ɐ buıʎnq ɹǝʌǝu ɯ,ı

From: New Zealand

Registered: 2008-04-16

Posts: 7,056

Re: captcha changes to search

Do you have javascript enabled?

Papa Parrot

Member

From: Mexico

Registered: 2011-08-19

Posts: 1,826

Website

Re: captcha changes to search

It worked for me, the first search no captcha, the second one I did get the captcha, seemed to work fine to me.
I am using chromium.
Edited: on mine java script is enabled

---

Everything is for the Birds

And now, Papa Parrot and his kids

zaphod

Jägermonster

From: USA

Registered: 2008-11-22

Posts: 2,985

Website

Re: captcha changes to search

How about 100+ posts on SFS = No captcha for logged in clients?

Zap

---

Get Protected, Stay Protected...
With ZB Block, GNU/GPL Freeware Anti-Spam/Anti-Hack protection for your php based website.

Little boxes in the server farm, little boxes running php...

Dennis2

Member

Registered: 2014-02-12

Posts: 14

Re: captcha changes to search

I can understand why you have done this with the ****** around.

It appears I have to do a search here, captcha does not appear using the link to search on our Forum.

No problem if it saves the SFS forum being down.

Thanks

Dennis

Old Dragon

Member

Registered: 2012-11-25

Posts: 196

Re: captcha changes to search

Do you have javascript enabled?

Ooops. I use NoScript and had stopforumspam.com allowed but not areyouahuman.com I didn't think to check if any external js was required. It's working ok now, thanks.

---

Spammers can all go feck themselves. With a cactus. A large one. With two branches.  Sideways
SEO = Spam Emitting Organisation

Flavio93Zena

Member

From: Italy

Registered: 2014-12-24

Posts: 15

Re: captcha changes to search

I always wondered why it was so easy to really spam searches and how could it be that you weren't being DDOSed... Good one, definitely made me a bit slower but if I am slower the site runs a LOT faster so it balances it
/me thinks that he needs to update his submissions list and go past 100...

How about 100+ posts on SFS = No captcha for logged in clients?

Yeah run another db query to check if the person is logged, if not banned and then check the IP... Three times the work, not a good deal

@Old Dragon your siggy is epic.

Last edited by Flavio93Zena (2015-02-14 8:48 pm)

---

I'm an angel with a shotgun,
fighting 'til the war's won,
I don't care if heaven won't take me back.

KoLadmin

Member

From: KoL Forums

Registered: 2011-07-20

Posts: 3

Website

Re: captcha changes to search

I have had the captcha pop-up pop up EVERY time I try to enter a search.  Even after doing the prove I am human thing.  Then, on top of that, I get no results.
Hello google.  :x

---

Attempts fail, but not as certainly as tasks never attempted ~ Ista dy Chalion

NonSuch

Member

Registered: 2014-08-22

Posts: 3

Re: captcha changes to search

Search doesn't work for me and I see no captcha.  Tried Firefox and Chrome browsers with Javascript enabled, no go.  I can see the banner ad at the bottom of the page just fine though.  Of course, that's no help. 

By the way, just to add to the dilemma, I can see and use areyouahuman elsewhere, but not here.

Last edited by NonSuch (2015-02-15 6:57 am)

pedigree

uıɐbɐ ʎɐqǝ ɯoɹɟ pɹɐoqʎǝʞ ɐ buıʎnq ɹǝʌǝu ɯ,ı

From: New Zealand

Registered: 2008-04-16

Posts: 7,056

Re: captcha changes to search

I'll make some changes, see if I can make it easier

If your IP is listed in the API, you'll have to enter a captcha regardless

Flavio93Zena

Member

From: Italy

Registered: 2014-12-24

Posts: 15

Re: captcha changes to search

Yeah confirmed. It seems somewhat bugged and sometimes it totally ignores user's input

---

I'm an angel with a shotgun,
fighting 'til the war's won,
I don't care if heaven won't take me back.

pedigree

uıɐbɐ ʎɐqǝ ɯoɹɟ pɹɐoqʎǝʞ ɐ buıʎnq ɹǝʌǝu ɯ,ı

From: New Zealand

Registered: 2008-04-16

Posts: 7,056

Re: captcha changes to search

I can't get it to fail but then again I have a static IP. I'll try to see if I can get it to fail by rotating the submissions

staubkorb

Member

Registered: 2011-07-08

Posts: 11

Re: captcha changes to search

Search doesn't work for me and I see no captcha.  Tried Firefox and Chrome browsers with Javascript enabled, no go.  I can see the banner ad at the bottom of the page just fine though.  Of course, that's no help. 

By the way, just to add to the dilemma, I can see and use areyouahuman elsewhere, but not here.

Same here, plus I use NoScript with SFS fully allowed but I have never noticed "areyouhuman".  I use primarily Firefox which gets auto-upgraded (read: only).  I've also Adblock Plus - deactivated for SFS.

Last edited by staubkorb (2015-02-15 2:58 pm)

Flavio93Zena

Member

From: Italy

Registered: 2014-12-24

Posts: 15

Re: captcha changes to search

I don't know dude, if there is anything I can help with let me know. I could make a video idk...
Besides I got a dinamic IP instead.

---

I'm an angel with a shotgun,
fighting 'til the war's won,
I don't care if heaven won't take me back.

pedigree

uıɐbɐ ʎɐqǝ ɯoɹɟ pɹɐoqʎǝʞ ɐ buıʎnq ɹǝʌǝu ɯ,ı

From: New Zealand

Registered: 2008-04-16

Posts: 7,056

Re: captcha changes to search

ok, I found an issue where search was incorrectly caching an empty search form when a captcha was required.  It was serving this on some results.

Flavio93Zena

Member

From: Italy

Registered: 2014-12-24

Posts: 15

Re: captcha changes to search

It is still having troubles here though

---

I'm an angel with a shotgun,
fighting 'til the war's won,
I don't care if heaven won't take me back.

pedigree

uıɐbɐ ʎɐqǝ ɯoɹɟ pɹɐoqʎǝʞ ɐ buıʎnq ɹǝʌǝu ɯ,ı

From: New Zealand

Registered: 2008-04-16

Posts: 7,056

Re: captcha changes to search

does it ignore your search query?  when it does, has it prompted you for a captcha on the previous screen?

Flavio93Zena

Member

From: Italy

Registered: 2014-12-24

Posts: 15

Re: captcha changes to search

Ignores my search query and didn't ask captcha

---

I'm an angel with a shotgun,
fighting 'til the war's won,
I don't care if heaven won't take me back.

kpatz

Member

Registered: 2008-10-09

Posts: 1,437

Re: captcha changes to search

Ignores my search query and didn't ask captcha

Just tried it myself.  No results and no captcha either.

---

Spam happens when greed meets stupidity.

staubkorb

Member

Registered: 2011-07-08

Posts: 11

Re: captcha changes to search

Same here.  No results nor captcha

romad

Member

From: Oroville, California

Registered: 2014-10-30

Posts: 9

Re: captcha changes to search

Thanks for the explanation. I have one concern and one suggestion, however.

Concern: When I was trying to run a search today, one of the captcha questions asked for my favorite social media site and had several logos from which to choose. For me personally, I don't do social media so I just chose the logo that was most familiar, but this question could be used maliciously.

Suggestion: Once a member has logged in to this site, then there really should not be a need for them to jump through more hoops. So, perhaps the captcha requirement could be tweaked to not trigger if the search is accessed from this site after log-in? Of course it should trigger if the search is accessed by non-members and non-logged in members.

BTW, I liked the put-the-toppings-on-the-pizza captcha!

Flavio93Zena

Member

From: Italy

Registered: 2014-12-24

Posts: 15

Re: captcha changes to search

Suggestion: Once a member has logged in to this site, then there really should not be a need for them to jump through more hoops. So, perhaps the captcha requirement could be tweaked to not trigger if the search is accessed from this site after log-in? Of course it should trigger if the search is accessed by non-members and non-logged in members.

How about 100+ posts on SFS = No captcha for logged in clients?

Yeah run another db query to check if the person is logged, if not banned and then check the IP... Three times the work, not a good deal

It would DDOS the server immediately. A human registers then logs in with the spambot and makes a mess... Read and think guys

Last edited by Flavio93Zena (2015-02-15 5:27 pm)

---

I'm an angel with a shotgun,
fighting 'til the war's won,
I don't care if heaven won't take me back.

romad

Member

From: Oroville, California

Registered: 2014-10-30

Posts: 9

Re: captcha changes to search

Suggestion: Once a member has logged in to this site, then there really should not be a need for them to jump through more hoops. So, perhaps the captcha requirement could be tweaked to not trigger if the search is accessed from this site after log-in? Of course it should trigger if the search is accessed by non-members and non-logged in members.

How about 100+ posts on SFS = No captcha for logged in clients?

Yeah run another db query to check if the person is logged, if not banned and then check the IP... Three times the work, not a good deal

It would DDOS the server immediately. A human registers then logs in with the spambot and makes a mess... Read and think guys

Good point there.

Alex Kemp

Moderator

From: Nottingham, England

Registered: 2009-12-02

Posts: 2,422

Website

Re: captcha changes to search

One thing that may (or may not) help: make sure that you use the correct URL (there have been situations in the past with folks using a URL with no `www', which caused problems):

http://www.stopforumspam.com/search

---

Alex Kemp

IP Aggregation (Help) · Easy Firewall Generator (Help)  · Conteg v0.13.14