Spam attack again?

Quote

WEC wrote:
On the WWW-Authenticate, could one of those with spam registration problems try this:

In register.php find:

Code Download source

if ($settings['enable_registration']) {

Add below it:

Code Download source

// ## set the public username and password for the registration
 $LOGIN = "Antispammer";
 $PASSWORD = "opensesame";

if ( (!isset($_SERVER['PHP_AUTH_USER'])) || ! (($_SERVER['PHP_AUTH_USER'] == $LOGIN) && ( $_SERVER['PHP_AUTH_PW'] == $PASSWORD )) ) {
   header("WWW-Authenticate: Basic realm=\"Access Registration with User: Antispammer Password: opensesame\"");
   header("HTTP/1.0 401 Unauthorized");
   //error("Unauthorized access...");
   echo "Unauthorized access...";
    exit;
   }
// ##

Quote

WEC wrote:
They will if they read what you write in the Basic realm=........... :)

Quote

biertju wrote:
well, i didn't change anything of the code at all, just added the way you said.. but when i enter uname + pass the popup comes up again, just like i didnt enter anything at all.. very weird..

Quote

PHP Version Note: Superglobals, such as $_SERVER, became available in PHP » 4.1.0. $HTTP_SERVER_VARS has been available since PHP 3.