[TobiParrot]

I'm very impressed with Pligg, but the security of PHP files up-line from register.php needs the developer's urgent attention IMHO. There's no way I would use this application at present.

[katlis]

Originally Posted by Iceburg

Well I lied...

Changing register.php to a new name didn't work.
Adding the rewrite mod to the .htaccess file didn't work.

I am still getting new users in, and the e-mail mod is sending me failures, so I came in this morning to 1200 new failure message. Luckily for me godaddy stopped relaying after the 1200.

Anyway, anyone successfully shut down and verified a fix for this?

Try this...
http://forums.pligg.com/general-help...html#post48779

Its been a week, and no new spammers.

I was getting 20 spam registrations an hour until I did that mod.

[vgreets]

When using "Single step registration + Confirmation e-mail v0.2" mail is not getting to the user. Pls help to debug

[vgreets]

Originally Posted by vgreets

When using "Single step registration + Confirmation e-mail v0.2" mail is not getting to the user. Pls help to debug.

and when register through right side register form follwoing error is coming..."The security code provided is not correct ". Pls help. Site is 123dubai.net / Published News

[bbrian017]

Originally Posted by vgreets

When using "Single step registration + Confirmation e-mail v0.2" mail is not getting to the user. Pls help to debug

Yes it seems to be taking a LONG time in my case I had a few users that waited 24 hours to get it

[omeany2]

Originally Posted by juicecowboy

Its now the next day and so far I'm still OK. I did have register.php disabled for half a day before I found this hack so maybe it moved on (temporarily).

I have someone working on customizing the Captcha mod for me (I have a custom template) so I'll implement that too when I have it ready.

I am not considering this closed by any stretch, I check comments often, but so far I've been able to avoid that attack for about 20 hours.

How is this working out for you?

[omeany2]

How did your hack work Juice?

[juicecowboy]

Originally Posted by omeany2

How did your hack work Juice?

Hey, sorry for the delay. Basically, it didn't. I've since installed the reCaptcha option and I've been OK. But I read here that it doesn't matter what I'm doing for registration, the bot can still get the site if it wants to so I've just been lucky for a while I guess.

[Smarter]

What happens when the bots start making posts with the 100++ members it signed up?

[bbrian017]

Originally Posted by Smarter

What happens when the bots start making posts with the 100++ members it signed up?

You remove the register.php and wait for a fix. I know I'm a hypocrite when I say this but we are using beta software and should expect these issues to arise!