MyBB Community Forums › Community Archive › Archived Forums › Archived Development and Support › MyBB 1.6 › 1.6 General Support v
[General] Lost Password Form Target for Bots

Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Threaded Mode
Not Solved [General] Lost Password Form Target for Bots
simpleuserid Offline
Posts: 2
Threads: 1
Joined: Mar 2013
Reputation: 0
#1
Not Solved 2013-03-04, 01:38 PM
Is there an option somewhere in the Admin settings for adding a Captcha to the Lost Password Recovery Form?

I get dozens of emails everyday notifying me of bounced emails coming from the MyBB Forum password recovery form. Clearly bots target that page. It's by far my biggest source of spam email.
Find
Euan T Offline

Security

Web
Posts: 15,129
Threads: 240
Joined: Jun 2009
Reputation: 703
#2
Not Solved 2013-03-04, 01:43 PM
Not within the core as far as I'm aware. There may well be a plugin on the mods site though.
Website Find
StefanT Offline

Former Staff
Posts: 4,241
Threads: 113
Joined: Jan 2006
Reputation: 111
#3
Not Solved 2013-03-04, 01:44 PM
(2013-03-04, 01:38 PM)simpleuserid Wrote: I get dozens of emails everyday notifying me of bounced emails coming from the MyBB Forum password recovery form.
Are you sure? It doesn't send any emails if there is no account with the entered address.
[Image: banner.png]
Website Find
simpleuserid Offline
Posts: 2
Threads: 1
Joined: Mar 2013
Reputation: 0
#4
Not Solved 2013-03-04, 01:51 PM
(2013-03-04, 01:44 PM)StefanT Wrote:
(2013-03-04, 01:38 PM)simpleuserid Wrote: I get dozens of emails everyday notifying me of bounced emails coming from the MyBB Forum password recovery form.
Are you sure? It doesn't send any emails if there is no account with the entered address.

Yes, I'm sure. The bounced emails include the header from the original email and the subjects are all something like 'Your password for {my forum name}'.
Find


Forum Jump:


Users browsing this thread: 1 Guest(s)