Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...How to stop scam registrations - junk in profile?How to stop scam registrations - junk in profile?
Previous
 
Next
New Post
5/21/2014 12:20 PM
 

I too have changed the password length>10 and all SPAM registrations have stopped. :)

Cathal has suggested that the CAPTCHA code does work, but that the bot attack simply reads (OCR) the phrase and replicates the user experience.... I agree with that, so that challenge is to  make it a little harder...

My online bank makes a random character selection of a known phrase (not public) and uses three drop-downs for the user to select them. Whilst the phrase would be public (i.e. visible captcha phrase), the number of drop-downs could be selectable/variable.

Seem sensible?
Suggestions for improvement?

 

regards,
Duncan

 
New Post
5/21/2014 2:15 PM
 

I've fixed the code from my previous post so reCAPTCHA is working properly now. There was no change to what I already posted about the Register.ascx.cs file, the only changes are in the Register.ascx file...

 

Here is my full Register.ascx file (changes from default are in bold):

 

<%@ Control Language="C#" AutoEventWireup="true" CodeFile="Register.ascx.cs" Inherits="DotNetNuke.Modules.Admin.Users.Register" %>

<%@ Register TagPrefix="dnn" Assembly="DotNetNuke.Web" Namespace="DotNetNuke.Web.UI.WebControls" %>

<%@ Register TagPrefix="dnn" TagName="Label" Src="~/controls/LabelControl.ascx" %>

<%@ Register TagPrefix="dnn" Assembly="DotNetNuke" Namespace="DotNetNuke.UI.WebControls"%>

<%@ Register TagPrefix="recaptcha" Namespace="Recaptcha" Assembly="Recaptcha" %>

<div class="dnnForm dnnRegistrationForm">

    <div class="dnnFormItem">

        <div class="dnnFormMessage dnnFormInfo"><asp:label id="userHelpLabel" runat="server" /></div>

    </div>

    <br/>

    <div class="dnnFormItem dnnFormHelp dnnClear"><p class="dnnFormRequired"><span><%=LocalizeString("RequiredFields")%></span></p></div>

    <div class="dnnFormItem dnnClear">

        <dnn:DnnFormEditor id="userForm" runat="Server" FormMode="Short" />

        <div class="dnnSocialRegistration">

            <div id="mainContainer">

                <ul class="buttonList">

                    <asp:PlaceHolder ID="socialLoginControls" runat="server"/>

                </ul>

            </div>

        </div>

        <div style="clear:both;">

  <recaptcha:RecaptchaControl ID="recaptcha" runat="server" PublicKey="[PUBLIC KEY]" PrivateKey="[PRIVATE KEY]" />

  <img src="/spacer.gif" onload="reload_captcha();" />

        </div>

    </div>

    <div id="reCaptcha_widget" style="display:none;"></div>

    <div id="captchaRow" runat="server" visible="false" class="dnnFormItem dnnCaptcha">

        <dnn:label id="captchaLabel" controlname="ctlCaptcha" runat="server" />

        <dnn:captchacontrol id="ctlCaptcha" captchawidth="130" captchaheight="40" ErrorStyle-CssClass="dnnFormMessage dnnFormError dnnCaptcha" runat="server" />

    </div>      

    <ul id="actionsRow" runat="server" class="dnnActions dnnClear">

        <li><asp:LinkButton id="registerButton" runat="server" CssClass="dnnPrimaryAction" resourcekey="cmdRegister" /></li>

        <li><asp:LinkButton id="cancelButton" runat="server" CssClass="dnnSecondaryAction" resourcekey="cmdCancel" CausesValidation="false" /></li>

    </ul>

</div>

<script type="text/javascript" src="http://www.google.com/recaptcha/api/js/recaptcha_ajax.js"></script>

<script type="text/javascript">

function reload_captcha(){

 if($(".dnnFormValidationSummary").length > 0){

  Recaptcha.create("[PUBLIC KEY]", "reCaptcha_widget",

  {

   theme:"red",

   callback: Recaptcha.focus_response_field

  });

 }

}

</script>

(obviously change [PUBLIC KEY] and [PRIVATE KEY] to the actual public and private keys from google)

This is on DNN 6.2.5, btw

 
New Post
5/29/2014 3:39 AM
 

We created a module to make this even easier. It is free to download, and some instructions here:

http://www.interactivewebs.com/blog/index.php/dotnetnuke-modules/dotnetnuke-dnn-spam-registrations-problem-fixed/

 
New Post
5/29/2014 12:54 PM
 

Bjirka,

I implemented your solution.  Thank you for the posting.  I was not able to use the free module from David Fenley at Interactive Web Solutions as we have not yet upgraded from ASPNet 2.0.

However, now I get BOTH the ReCatcha and the DNN Capcha controls on the Registration page.   This works fine provided that the new registrant enters both Re-Captcha and Captcha phrases.  This can be a little bit daunting.

Am I doing something wrong?

See http://www.thevwc.org.


Regards
Hans
 
New Post
6/3/2014 1:41 PM
 

Will Strohl

Upendo Ventures Upendo Ventures
DNN experts since 2003
Official provider of the Hotcakes Commerce Cloud and SLA support
 
Previous
 
Next
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...How to stop scam registrations - junk in profile?How to stop scam registrations - junk in profile?


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out