2013-04-29, 02:59 AM
The default spam system in 1.6 isn't enough to defend against the hordes of bot signups and resulting spam. I set up a temporary forum and left it for a month and I already had 10,000+ bots sign up and spam it.
The use of third party services and plugins could work, but there are some neat, easy tricks MyBB could employ in its core to stop nearly all bots.
Security Question
A simple field that must be correctly answered on sign-up. Usually very easy (eg "What is the first letter of this website name?").
Hidden Bot-only Field
A signup field hidden via CSS that bots will still fill out, but humans will not. If anyone does fill that field in, deny their signup.
Has anyone else got ideas for better bot protection?
The use of third party services and plugins could work, but there are some neat, easy tricks MyBB could employ in its core to stop nearly all bots.
Security Question
A simple field that must be correctly answered on sign-up. Usually very easy (eg "What is the first letter of this website name?").
Hidden Bot-only Field
A signup field hidden via CSS that bots will still fill out, but humans will not. If anyone does fill that field in, deny their signup.
Has anyone else got ideas for better bot protection?