MyBB Community Forums

Hello,
My forum is quite well managed regarding spam, having zero spam posts from newly registered accounts but in that last month I have almost daily spam from existing users with compromised accounts, lower than 10 posts.

What measures do you see in my case and what plugins? Maybe a strong captcha for the first 10 posts in forum? But this is secondary (also urgent) because first I must somehow avoid compromiting old accounts.

I have the latest MyBB version and as secure measures I use: security question at registration, plugins DVZ Secure Content, reCaptcha v2 plugin for MyBB enabled for the group New registered (first 10 posts), in settings / General Configuration / CAPTCHA Images for Registration & Posting I selected "reCaptcha V3" and 0.5 value for "reCAPTCHA v3 Score".

Thanks

if you want stop Bots to send posts, you can try my reCAPTCHA for Login plugin

I have the same problem.
Every day, 2 or 3 spam messages with the same content come from different users.
Old users with 0 messages are sending spam messages.

I added admin approval condition to messages of users with 0 messages.

I am using the latest version.
There is no one else with admin authority except me
Some users with 0 messages have become admins

I changed FTP, MYSQL, admin control panel, admin passwords
2-factor authentication is active for admin panel login

Could these zero-message accounts be spammed by an external SQL intervention?

try this plugin: https://community.mybb.com/mods.php?acti...w&pid=1603

but this:

(2024-10-15, 02:43 PM)arachnanthe Wrote: [ -> ]Some users with 0 messages have become admins

is a greater problem! which version of MyBB do you run? edit2: sorry didn't see: last version
installed plugins, all the infos missing in your first post are needed
url to your board

I know some of these users are real users, but they are not the ones sending spam

I am the only administrator and user groups are being interfered with.

https://www.hepimizbiriz.com/forum/index.php

How many users are listed in ACP / Users and Groups / Groups / Administrators / Options / List Users
This should show all the groups the listed members belong to.
Are you the only one listed?

Then look at ACP / Users and Groups / Admin Permissions
You can revoke permissions of any user who is not superadmin.
Are you the only one listed?

What does ACP / Tools and Maintenance / File Verification show?
List the modified files here.