Module: Spam Hurdles 2, release candidate - testers welcome [b][size=medium][color=#000066]This is a release candidate package. There might be bugs. If so, please let me know.[/color][/size][/b] Here's a complete rewrite of the Spam Hurdles module. For an extended changelog see below. One of the big changes is that cryptographic technology is used to store work data right in the form data on the client instead of storing all of it in the database. Because of this, the module can now function without database storage at all. Only if the replay attack block is enabled ("Block forms that are submitted multiple times"), the database will be used to store the id's of the forms that have already been submitted. This database storage has been made as light as possible, so after the id expires, it will be cleaned up from the database. I hope that this change will help those admins with busy forums that currently see the spam_hurdles table fill up rapidly in their databases. [b]Upgrade to Spam Hurdles 2 beta[/b] To upgrade, move aside your existing mods/spamhurdles module directory. After that, unpack the contents of the module package and put these in mods/spamhurdles. Visit the admin interface (admin.php) to let the module system reload the new hook configuration. If you like, visit the Spam Hurdles module settings screen. If everything goes well, then the existing settings should automatically be upgraded to the new settings, so you should be seeing your original configuration in there (except for the few new options that were added). If you are using Spam Hurdles 1 to protect some custom form (I know that there are a few people out there who do this), then please beware that the API totally changed (or better: that we have an API now ;-). The existing protection should be upgraded to work with the new API. Take a look at spamhurdles.php to see how the API was fitted into the posting and registration processes. [code] Changelog: ---------- v2.0.2 - Implemented more complete logging of blocked form posts using the Event Logging module. - Extended the settings for this module to make it possible to enable or disable the logging of form posts that are blocked by the Spam Hurdles module. - Added code to the settings screen that will check if all templates contain the required template hooks. If there are template files that do not contain the required hooks, then a warning message is printed in the settings screen, telling the admin what templates to update with what hook. v2.0.1 - Fixed a problem in the reCapthca component. Thanks to Phorum.org user DavidVB for the patch! v2.0.0 - Fully restructured the code by splitting the functions into API functions (in api.php) and hook implementation functions (in spamhurdles.php). - The spam hurdles are now implemented using a plugin system, which keeps the code for the various spam hurdles nicely separated and which makes it easier to implement extra spam hurdles. - Due to the plugin system, all spam hurdles are now available available for all protected forms. Therefore, user registration is now protected by all hurdles and not only by a CAPTCHA. - It is now possible to protect multiple forms on a single page. - Encryption technology (AES) is now used to be able to send the spam hurdles data encrypted to the client, instead of having to store this data in the database server. Only if the duplicate submit check is enabled, the database will be used to store posting keys that have already been used. Still, the database load caused by storing used keys is a lot less than storing all generated keys, like the predecessor of this module did. - Put the modified iScramble() in the API code as spamhurdles_iScramble(), so we won't run into name space issues when other code wants to use the original iScramble code. - The path to the "flite" binary is discovered by the settings screen automatically now. Before, it was only discovered by the defaults.php script on first load, but that doesn't help the case where Flite is installed after the module was installed. - Generating a spoken CAPTCHA or a CAPTCHA image is now done using the "addon" hook. This prevents the need to do this kind of task from some more generic hook like "common" (which makes Phorum load the module code on each request and not only when neccessary). [/code] https://www.phorum.org/phorum5/read.php?62,141836,141836#msg-141836 Mon, 15 Jun 2026 10:21:23 -0400 Phorum 5.2.22 https://www.phorum.org/phorum5/read.php?62,141836,162302#msg-162302 Re: Module: Spam Hurdles 2, release candidate - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,162302#msg-162302
[www.phorum.org]]]> Xiphias 5.2 Modules/Add-Ons Tue, 16 Apr 2019 21:25:52 -0400 https://www.phorum.org/phorum5/read.php?62,141836,162090#msg-162090 Re: Module: Spam Hurdles 2, release candidate - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,162090#msg-162090
I run a rather large forum and getting mods to approve all new users is a bit of a pain. Is there anybody out there who can take a look at the code and change it to the latest google reCaptcha API? I imagine it's a trivial fix for someone who knows what they are doing, but I don't know.]]> Tempeh 5.2 Modules/Add-Ons Fri, 03 Aug 2018 04:20:58 -0400 https://www.phorum.org/phorum5/read.php?62,141836,162087#msg-162087 Re: Module: Spam Hurdles 2, release candidate - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,162087#msg-162087 spam hurdles ----code drawn using a gif image

And moderator must approve a new registered user.]]> Scott Finegan 5.2 Modules/Add-Ons Thu, 02 Aug 2018 13:04:15 -0400 https://www.phorum.org/phorum5/read.php?62,141836,162086#msg-162086 Re: Module: Spam Hurdles 2, release candidate - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,162086#msg-162086 Tempeh 5.2 Modules/Add-Ons Thu, 02 Aug 2018 05:22:37 -0400 https://www.phorum.org/phorum5/read.php?62,141836,162032#msg-162032 Re: Module: Spam Hurdles 2, release candidate - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,162032#msg-162032 Tempeh 5.2 Modules/Add-Ons Sat, 16 Jun 2018 15:24:28 -0400 https://www.phorum.org/phorum5/read.php?62,141836,162024#msg-162024 Re: Module: Spam Hurdles 2, release candidate - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,162024#msg-162024 Thanatermesis 5.2 Modules/Add-Ons Fri, 01 Jun 2018 21:21:47 -0400 https://www.phorum.org/phorum5/read.php?62,141836,161891#msg-161891 Re: Module: Spam Hurdles 2, release candidate - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,161891#msg-161891 Tempeh 5.2 Modules/Add-Ons Sat, 31 Mar 2018 06:01:12 -0400 https://www.phorum.org/phorum5/read.php?62,141836,156053#msg-156053 Re: Module: Spam Hurdles 2, release candidate - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,156053#msg-156053
Quote
yupri
Well, we've caught a bug related to Spam Hurdles module. I was able to reproduce it at different Phorum setups even at a newly clean one.

I tried to figure out the problem, but I wasn't able to reproduce it.

I think you have a problem with serialize/unserialize the meta column. "message_ids" is stored as serialized data in this field and the "message_ids" value is always included. It shouldn't be possible that "message_ids" is missing.

Is it possible, that you make some more tests? Please contact me via PM.

Regards
Oliver]]> Oliver Riesen-Mallmann 5.2 Modules/Add-Ons Fri, 11 Sep 2015 07:56:51 -0400 https://www.phorum.org/phorum5/read.php?62,141836,155098#msg-155098 Re: Module: Spam Hurdles 2, release candidate - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,155098#msg-155098
We are on
Phorum 5.2.19,
Spam Hurdles 2.0.2.
(nginx 1.2.4
PHP 5.3.21
MySQL 5.1.67)

Okay, if we turn on spam hurdles with default settings and approve "Enable Caching Messages" in Cache Settings here is what happens. Let's say a user posts a new topic message, which is sent to moderation by the Spam Hurdles module.
Then if a moderator goes to that new topic message, there is a number of warnings popping up like those:

Quote

Notice: Undefined index: message_ids in [phorum_dir]/read.php on line 270

Warning: sort() expects parameter 1 to be array, null given in [phorum_dir]/read.php on line 276

Warning: array_slice() expects parameter 1 to be array, null given in [phorum_dir]/read.php on line 305

Warning: Invalid argument supplied for foreach() in [phorum_dir]/read.php on line 325

The reason for those warnings is a PHP code block related to cache regime for the message.
It tries to read data from cache represented by phorum_messages.meta field. It expects either message_ids or message_ids_moderator but it's empty in that field. It gets null instead of an array. And after trying to apply array operations to a null value we get abeforementioned warnings.

If caching messages is turned off moderator doesn't see the warnings. Because message data is read and rebuild from database and everything goes well.

This problem doesn't bother much. It can be deflected by suppressing errors. But anyway this shouldn't be the way the code logic is organized.

Please comment on this issue and possibly provide a solution vector.

Best wishes!]]> yupri 5.2 Modules/Add-Ons Wed, 11 Jun 2014 09:44:53 -0400 https://www.phorum.org/phorum5/read.php?62,141836,154580#msg-154580 Re: Module: Spam Hurdles 2, release candidate - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,154580#msg-154580 Thomas Seifert 5.2 Modules/Add-Ons Fri, 08 Nov 2013 01:38:49 -0500 https://www.phorum.org/phorum5/read.php?62,141836,154579#msg-154579 Re: Module: Spam Hurdles 2, release candidate - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,154579#msg-154579
Quote
kswift
This works well, generally! However since the previous spam hurdles, and still with this version, I have had a problem:

I would completely disable the 'Spam Hurdles for posting new messages' section, because we only need this to prevent robots from signing up. However despite only enabling the 'Spam Hurdles for user registration' section, we still get the occasional message that is kept in unapproved mode because of spam hurdles somehow thinking it is spam.
Any idea what may cause this?

Using version 5.2.16.


I'm having the same problem except all messages are being unapproved or fully blocked (depending on the setting in the module). There isn't an option to disable the hurdle for posting new topics/messages, so how do we use spam hurdles to only provide the captcha for registration, or should we be using a different module?]]> psguser 5.2 Modules/Add-Ons Wed, 06 Nov 2013 20:01:48 -0500 https://www.phorum.org/phorum5/read.php?62,141836,154316#msg-154316 Re: Module: Spam Hurdles 2, release candidate - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,154316#msg-154316
Quote
Thomas Seifert
So you are using PHP 5.4 as it seems.
Change this line to 
Language: PHP
$scrambled{(int)(((int)$scramblePassword{$k}) * $numberOfRows) + $i} = $escaped{$k};

and it should avoid those warnings.


Yes, thanks! PHP version 5.4.18 here and that got rid of the notice warnings for me too. Thanks again.]]> Skinny 5.2 Modules/Add-Ons Tue, 17 Sep 2013 05:58:47 -0400 https://www.phorum.org/phorum5/read.php?62,141836,152785#msg-152785 Re: Module: Spam Hurdles 2, release candidate - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,152785#msg-152785 ckoval7 5.2 Modules/Add-Ons Tue, 11 Dec 2012 21:38:45 -0500 https://www.phorum.org/phorum5/read.php?62,141836,152775#msg-152775 Re: Module: Spam Hurdles 2, release candidate - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,152775#msg-152775 Change this line to 
Language: PHP
$scrambled{(int)(((int)$scramblePassword{$k}) * $numberOfRows) + $i} = $escaped{$k};

and it should avoid those warnings.]]> Thomas Seifert 5.2 Modules/Add-Ons Tue, 11 Dec 2012 06:13:04 -0500 https://www.phorum.org/phorum5/read.php?62,141836,152749#msg-152749 Re: Module: Spam Hurdles 2, release candidate - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,152749#msg-152749 ckoval7 5.2 Modules/Add-Ons Sun, 09 Dec 2012 22:22:51 -0500 https://www.phorum.org/phorum5/read.php?62,141836,152743#msg-152743 Re: Module: Spam Hurdles 2, release candidate - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,152743#msg-152743 Thomas Seifert 5.2 Modules/Add-Ons Sun, 09 Dec 2012 14:11:04 -0500 https://www.phorum.org/phorum5/read.php?62,141836,152742#msg-152742 Re: Module: Spam Hurdles 2, release candidate - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,152742#msg-152742 
Notice: String offset cast occurred in /opt/lampp/htdocs/forum/mods/spamhurdles/api.php on line 771

Line 771 in api.php is: 
            $scrambled{(((int)$scramblePassword{$k}) * $numberOfRows) + $i} = $escaped{$k};

I don't even pretend to know php, so I don't know what's causing that issue.

I'm using the latest version of phorum and spam hurdles. I can provide any additional information on request.

Thanks,
Corey]]> ckoval7 5.2 Modules/Add-Ons Sun, 09 Dec 2012 13:25:10 -0500 https://www.phorum.org/phorum5/read.php?62,141836,150724#msg-150724 Re: Module: Spam Hurdles 2, release candidate - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,150724#msg-150724
Thanks!

[Sorry, I posted this in the wrong section!]]]> Fade2k 5.2 Modules/Add-Ons Tue, 27 Dec 2011 12:08:50 -0500 https://www.phorum.org/phorum5/read.php?62,141836,150344#msg-150344 Re: Module: Spam Hurdles 2, release candidate - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,150344#msg-150344
I would completely disable the 'Spam Hurdles for posting new messages' section, because we only need this to prevent robots from signing up. However despite only enabling the 'Spam Hurdles for user registration' section, we still get the occasional message that is kept in unapproved mode because of spam hurdles somehow thinking it is spam.
Any idea what may cause this?

Using version 5.2.16.]]> kswift 5.2 Modules/Add-Ons Sun, 13 Nov 2011 15:46:52 -0500 https://www.phorum.org/phorum5/read.php?62,141836,147313#msg-147313 Re: Module: Spam Hurdles 2, release candidate - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,147313#msg-147313
I published a new version of my German Language Files Package which includes also translations for you module in two character sets iso-8859-1 and utf-8.

Please add the attached language files to the next release of your module and remove maybe existing old style files like german.php oder german-sie.php. Thanks!

Regards
Oliver]]> Oliver Riesen-Mallmann 5.2 Modules/Add-Ons Tue, 04 Jan 2011 06:21:46 -0500 https://www.phorum.org/phorum5/read.php?62,141836,146703#msg-146703 Re: Module: Spam Hurdles 2, release candidate - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,146703#msg-146703
I worked the problem out and just though I would let you know the solution FYI.

I upgraded a local copy of the site and still had the problem, so I started digging around. The module admin had complained at a missing hook: 

	{HOOK "tpl_editor_before_textarea"}

So being lazy I just added that to the top of the template, this obviously wasn't the correct thing to do. I've now moved it to a position more inline with emerald and bingo, mod working perfectly.

As an enhancement it would be nice if the module had a top level condition to check if any hurdles are active, and if not skip all processing. It would help with dodgy templates and have a small performance benefit.]]> tankslap 5.2 Modules/Add-Ons Sun, 07 Nov 2010 16:42:14 -0500 https://www.phorum.org/phorum5/read.php?62,141836,146690#msg-146690 Re: Module: Spam Hurdles 2, release candidate - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,146690#msg-146690 Maurice Makaay 5.2 Modules/Add-Ons Sat, 06 Nov 2010 14:02:54 -0400 https://www.phorum.org/phorum5/read.php?62,141836,146689#msg-146689 Re: Module: Spam Hurdles 2, release candidate - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,146689#msg-146689
Thanks for your suggestion Maurice, I'll copy the site down to my local server and try the upgrade.. I'll post back if I still have problems.

Thanks again for your quick response.]]> tankslap 5.2 Modules/Add-Ons Sat, 06 Nov 2010 13:47:34 -0400 https://www.phorum.org/phorum5/read.php?62,141836,146688#msg-146688 Re: Module: Spam Hurdles 2, release candidate - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,146688#msg-146688
My first suggestion would be to upgrade to the recent Phorum 5.1.16-RC1, since the module is included in that release and has been tested thoroughly.]]> Maurice Makaay 5.2 Modules/Add-Ons Sat, 06 Nov 2010 13:42:17 -0400 https://www.phorum.org/phorum5/read.php?62,141836,146687#msg-146687 Re: Module: Spam Hurdles 2, release candidate - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,146687#msg-146687
We've started getting a high number of automated registrations recently and was hoping to use the registration part of this module alone.

Since enabling the module all new posts in the forum are being marked as un-approved.

I set the module options to disable all hurdles under both the new posts section and pm section, and the enabled the multiple post, HTML check, and capture hurdles under the registration section. When I saved the module settings I did get a warning about the posting.tpl within the active template, but I don't see that should be an issue as the posting section is disabled.

I would really appreciate any suggestions as this module would be perfect for keeping the bot registrations down.

Thanks, Jon.]]> tankslap 5.2 Modules/Add-Ons Sat, 06 Nov 2010 13:37:43 -0400 https://www.phorum.org/phorum5/read.php?62,141836,146636#msg-146636 Re: Module: Spam Hurdles 2, release candidate - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,146636#msg-146636 Maurice Makaay 5.2 Modules/Add-Ons Tue, 02 Nov 2010 12:01:47 -0400 https://www.phorum.org/phorum5/read.php?62,141836,146581#msg-146581 Re: Module: Spam Hurdles 2, release candidate - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,146581#msg-146581
Please find attached a completed french.php file.

There's a typo in the English message NeedJavascript:
s/diabled/disabled/

Thanks again for your module, Maurice!

Edit maurice: removed the language file, because it is now part of the Phorum distribution.]]> cactux 5.2 Modules/Add-Ons Fri, 29 Oct 2010 16:33:42 -0400 https://www.phorum.org/phorum5/read.php?62,141836,146233#msg-146233 Re: Module: Spam Hurdles 2, release candidate - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,146233#msg-146233
A sanity check could be an option next to the checking that is already done in the admin settings. I'll see what I can do for that.]]> Maurice Makaay 5.2 Modules/Add-Ons Tue, 12 Oct 2010 08:22:44 -0400 https://www.phorum.org/phorum5/read.php?62,141836,146232#msg-146232 Re: Module: Spam Hurdles 2, release candidate - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,146232#msg-146232
Quote
Maurice Makaay
Added code to the settings screen that will check if all templates contain the required template hooks. If there are template files that do not contain the required hooks, then a warning message is printed in the settings screen, telling the admin what templates to update with what hook.

I think this should be part of a sanity check...

Regards
Oliver]]> Oliver Riesen-Mallmann 5.2 Modules/Add-Ons Tue, 12 Oct 2010 08:00:41 -0400 https://www.phorum.org/phorum5/read.php?62,141836,146230#msg-146230 Re: Module: Spam Hurdles 2, beta - testers welcome https://www.phorum.org/phorum5/read.php?62,141836,146230#msg-146230
Quote
Maurice Makaay
I think that the template code is the issue here. If you check out changeset 4610, then you can see that template data might need to be updated in order to make SpamHurdles v2 work for the PM posting as well.

What you need to check, is if you have the following in your pm_post.tpl: 

 {HOOK "tpl_pm_editor_before_textarea"}

If not, then take a look at the template that you used as your base template and add the hook statement in your own pm_post.tpl at the correct position. That should make PM posting with SpamHurdles v2 work.

Yes, that was it, thanks!]]> noe 5.2 Modules/Add-Ons Tue, 12 Oct 2010 07:22:36 -0400