Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeOur CommunityOur CommunityGeneral Discuss...General Discuss...DNN 6.2 and DNN 7.2 Hacked already... HELP ME....DNN 6.2 and DNN 7.2 Hacked already... HELP ME....
Previous
 
Next
New Post
6/30/2014 1:33 AM
 

Dear Sebastian

 Unfortunately the iWeb module for ReCHAPCHA not working and I get several spam registration yet, I can not open my registration and we need this feature.  what is your Idea, we have to wait for 7.3.2???

Also they can send several spam email I don't know how, but they can send and even I remove email accounts, they can continue to sending with fake email address and now our IP address is on Black List on uceprotect.net and we have big problem now.

I'm sure they could Hack DNN easy and come to our system to sending emails and registering.....

please help

 

 
New Post
6/30/2014 7:57 AM
 

>Unfortunately the iWeb module for ReCHAPCHA not working and 

You're absolutely correct.  The module works...from time to time.  Testing it, I often get an obscure error message and the registration succeeds.  However, for the time being until I can build my own "ReCaptcha" module this will have to suffice as it's slowed the bogus registrations to 1-2 every other day.

 
New Post
6/30/2014 8:23 AM
 
The Captcha should be intelligent base and no just show some character, the yahoo capcha is very strong one, for example it put some characters on top with a few gap from down and then ask you just type any characters are in top or down, and you have to type only characters that are top or down regarding question.
or play with Game, underline, or mathematics questions.... this is correct, not only show image and ask you what is that, It's too easy to OCR and trace the image.....

But I hop in 7.3.2 this problem fix in DNN, because I feel this is not only Register smap, Registered Users start to work on DNN with sending several emails and using server IP for sending 1100 Emails per second by your IP and it already happen for me and my IP is blocked already in UCEPROTECT.NET you can check 176.9.138.131 and all of my clients have problem to send/receive emails...

I Stop all Registration of my clients more than 48 DNN Portals, I Upgrade all portals to 7.3.1 but most of them upgrade with several errors and all portals with Multilingual system are damage and not working... too much problem there is in DNN and We can not tell them to fix them, I go to Jira and I register on http://support.atlassian.com/ but there is no item to add reports for bugs...

nothing...

I'm confuse and I can not continue like this,..... too much problem and many people contact me and they ask me about these mistakes and errors on DNN and I don't have any answer :(

PLEASE, ANY PROFESSIONAL PEOPLE CAN HELP ME FOR THESE PROBLEMS.....
 
New Post
6/30/2014 10:21 AM
 
Armin,

to enter a bug report on Jira, just click on "Create" on the top.

As other people mentioned here, there is a solution from interactivewebs using reCaptcha, this works fine for me and some sites that I support and that were affected by this spam bot.

Another solution is to follow these guidelines: http://www.dnnsoftware.com/wiki/page/...

Best wishes
Michael

Michael Tobisch
DNN★MVP

dnn-Connect.org - The most vibrant community around the DNN-platform
 
New Post
6/30/2014 10:40 AM
 

Just regarding the solution from interactivewebs using reCaptha.  I have last week at the same time apply the  interactivewebs solution to two of the site l host and manage one on CE v7, and the other on CE v6.    The results have been interesting, the v6 site has had no spam registrations since installing the interactivewebs solution.  The v7 site has still had "some" spam registrations, the number has fallen dramatically, to about 10 per day, one very 2 hours or so for set period of time.  My theory (yes l have no proof :-< ) is that the reCaptha, still works as it is meant to.  However a human person is reading the number then using an automated process to complete the rest of the details.  This is still frustrating, in that l have to log in and delete unauthorised users every day, the way l look at it the more l do it, the less attractive my sites are to this type of attack.

My next step will be to use the method that Bruce Chapman has outlined, as noted by Michael (the link to DNN Wiki).  Hopefully this both solve the issue and provide some longer term protection.

 
Previous
 
Next
HomeHomeOur CommunityOur CommunityGeneral Discuss...General Discuss...DNN 6.2 and DNN 7.2 Hacked already... HELP ME....DNN 6.2 and DNN 7.2 Hacked already... HELP ME....


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out