1. Osclass Forum
  2. General
  3. Unable to Prevent Spam Registration Osclass Sites

Unable to Prevent Spam Registration Osclass Sites

Started by muratbora, June 3, 2020, 2:45 pm

  • 1

muratbora

Unable to Prevent Spam Registration Osclass Sites;
Dear friends, please help me, I am getting crazy! as you see attachment, I can not stop spam registrations on Osclass web sites.
What is causing this? I have installed all of osclass spam & captchta plugins. It did not stopped.

Currently I am using Osclass core Spam and bots section. I have added Google captcta code. But still I receive a rainy spam registration ( 200- 300 registrations every day ).

https://***/user/register 

https://***/user/register


Normaly as human when you try to register without skipping Captchta answer, site gives error and you can not proceed.
But how I receive those rainy spam registrations than?
What could be reason?
I really want to remove Osclass. Please advice me how I can solve this?


For test propose I have removed " user-register.php " from hosting and it is still registering spam users. I see on dashboard.

How it is possible without user-register.php file those spam bots can register on Osclass site?

  • << Last edit: June 3, 2020, 8:36 pm by calinbehtuk >>
  • Quote

calinbehtuk

Check for PHP errors.
Don't use multiple spam plugins. The default option from Osclass is enough.
I see that you have some extra fields on the registration page and a lot of changes there. Nobody can really help you if they do not know what is there.
Use only one option for spam.
Deactivate plugins and see if you get new spam accounts.
Reupload osclass files.
Check your files from plugin or themes for malicious code.


I can tell you for sure that osclass spam protection is enough, and is working in 99% of cases.

  • << Last edit: June 3, 2020, 8:53 pm by calinbehtuk >>
  • Quote

muratbora

I did not make a change. It is SHOPCLASS theme specification. I do not use multiple spam plugin same time. I just tried one by one.


Currently I use Osclass spam protection, I changed theme, I reuploaded new Osclass files into /oc-admin/ and oc-includes / folders. 


I have disabled all plugins. 


But no solution. Every minutes I receive spam register.

By the way, as test propose, under site I opened a "test" folder. I have installed fresh Osclass there.


As soon as installation completed, spam registration also started into " test " folder site.


How this is possible?

If I give you DIRECTADMIN and Dashboard passwords, can you please check what is causing this?

calinbehtuk

My site is the proof that the built-in function is working fine. I have no issue with unwanted accounts, only if a human will try to make multiple accounts but even this will be stop by some filters made by me.
I can't tell you what is your issue, even with oc-admin access.


You cannot overwrite the core function only if you made some changes in the files or you have some plugin that is doing that.
Google Recaptcha will stop 99% from bad requests if it is not a human. Check your Recaptcha dashboard and see what stats you have there.


I gave to you all the information I could give you in the first message.

Mohammad Quaid

Re: Unable to Prevent Spam Registration Osclass Sites

on :February 11, 2022, 10:29 am #609

Hi Guys, I am facing same problem on my site https://-------.com and tried whatever is discussed in this thread but no success. I guess this is a software working continuously non stop to register users while not using your registration form but inject in the database directly. 

I talked to the osclass support team and their response was also not so good but they tried to sell me their plugin to protect spam users. I know their plugin also don't help for this. 

I also did my best to secure my serve but not traces found. The only way left is the database where I am not expert. I ask if any database expert can suggest a solution to protect the user table from accepting any data before going to a filter. Please advice. 

  • << Last edit: February 11, 2022, 5:00 pm by calinbehtuk >>
  • Quote

calinbehtuk

@Mohammad Quaid

Just one simple step to check and see if the registration is made by the registration form.


In file register.php

Code: [Select]
​oc-includes\osclass\controller\register.php


After this code:

Code: [Select]
​case('register_post'):  //register user


Add this:

Code: [Select]
​case('register_post'):  //register user
exit();


In this way, you will break the page and the form will not be submitted.

If you still get new accounts, that means you have some bad files on your site, or a plugin/theme.




  • 1
Subscribe
X

Subscribe!

Subscribe to get the latest listings, updates and special offers delivered directly in your inbox.