This was one guys solution on the joomla forum...
it just got a bit.... huuuuerrrrr??? for me (that sound is the one from tim the tool man taylor by the way).
See below for his views...
or the whole discussion link is:
forum.joomla.org/viewtopic.php?f=267&t=303681
They talk about security images, recapatcha and honeypot??
Couldnt quite figure out what the go was with honeypot... as yet...
Cheers,
ant...
-------------------------
Post subject: Re: Spam User Registration ??
Posted: Thu May 28, 2009 1:30 pm
Joomla! Apprentice
Joomla! Apprentice
Offline
Joined: Thu Mar 29, 2007 8:39 am
Posts: 6
Location: Bogota, Col
Hello,
I was having the same problem, I deal with this the following way (1.0.15) I do not use CB:
I test:
Community-Builder reCAPTCHA Plugin
extensions.joomla.org/extensions ... 47/details
Note: Does not help bots still registering.
Then add:
controlledLoginCB plugin (I modify this to redirect to another registration solution not CB)
griale.nichost.ru/download/joom/ ... tails.html
Note: This does not help bots still registering.
Removed:
Community-Builder reCAPTCHA Plugin and controlledLoginCB
Then installed:
Security Images: THE CAPTCHA engine
extensions.joomla.org/extensions ... 11/details
Applied pathes to the core files:
www.waltercedric.com/downloads-f ... -only.html
Note: This actually help the bots stop registering
I take another step , before this I was using:
sh404SEF
extensions.joomla.org/extensions ... 80/details
In the config file (security tab) I enable:
Project Honey Pot
www.projecthoneypot.org/httpbl_configure.php
I Visit this site and signup for a free Project Honey Pot access key
Note: enable this feature and stops two or three bots a day
The combination of "Security Images: THE CAPTCHA engine" and enable the "sh404SEF Project Honey Pot configuration" inside this component help me to deal with bot registrations.
If some bot gets smart and bypass those two I had modified the reply message to registrations removing the activation link and added a note that said more or less that all accounts are activated manually by the administrator, adds a little of extra work, but is better to be safe, the bot maybe gets registered but not with an active account.
Well I hope this help to others dealing with bots registrations.
Regards,
Juan Manuel