Spam coming

Use Securimage2

This is a great service. Also ensure you use advanced captcha and alternatives. I have cut down 70% of spam on my website

These "multi dot" gmail spam addresses have been around for a while now, there are thousands of them out there.

It also seems a lot of spam uses @centrum.cz email addresses, has anyone else experienced lots of spam from this email?

If you have an gmail adres test the following:

Send an email to your own email adres, in this example mygmailadres@gmail.com is used.
mygmailadres@gmail.com
now send one to my.gmail.adres@gmail.com
now send one to m.y.g.m.a.i.l.a.d.r.e.s.@gmail.com

Alle mails will be received. Gmail allows dots randomly in the names. The only thing you have to do is filter out the dots and enter this gmail adres to the blacklist.

In case of a gmail adres registration the adres without dots should be compared with the blacklist.

With the dot anywhere in a gmail adres a spammer can make several different email adresses which are not recognized as 1 and the same email adres.

I have addressed this before, but no action was taken. (I think)

There was a thread with fixes where I am sure you posted a possible solution for this but the thread seems to have vanished.

[syntaxhighlighter brush=php,first-line=1,highlight=0,collapse=false,html-script=false]
// protection against multiple dot generated email addresses used for spam. Mod by Wanabo.
$dotcount=substr_count($email,"."; if ($dotcount > 3) {$error .= $locale['406']."<br />\n";}
// end multiple dot mod
[/syntaxhighlighter]

The above is for version 7.02.01 (and before), after this version the registration routine was altered using arrays and userfields.

I would like some advice and opinions it seems lots of spam uses @seznam.cz anyone else experienced lots of spam using that email domain? Also can anyone point me in the right direction to a list of most bad email domains used? I know gmail yahoo msn and all that also gets loads of spam but things like inbox.com or mail.com things like that is all mostly spam yes.

What about all the nice people (and their dogs) who work there? Blocking domains is not the answer. There are thousands of email providers out there, none of whom want spammers on their networks as it's bad for business.

[youtube]R0Wo0gCq8GA[/youtube]

Yeah that's why I ask for advice. I mean that Security question mod i made is not stopping them, securimage2 is not stopping them. Emm I have tried bottraps, secure questions, recaptcha, securimage1, securimage2, IdentiPIC and all have no effect, bots still crack it all. I have tried securimage2 with various backgrounds, colours and fonts all get cracked.

If they're getting past your security question as well as securimage2, then they're most likely not bots but cheap workers paid to log in and post spam 24/7. There is little you can do to stop them.

Yeah its a bit of a drag but hey I choose to have a site and it's no biggy, just keep banning ip's and delete accounts. hehe . :)

I have one more trick up my sleeve but I will not reveal it here. hehe.

You can try something like this: http://www.ajaxshake.com/plugin/EN/27...ptcha.html

Doesn't work tried that a while back.