0
Welcome Guest! Login
0 items Join Now

ROCKETTHEME IS CLOSING ON JUNE 30, 2025. As a thank-you to our community, enjoy 50% off all themes with the promo code THANKYOU before we shut down. Read our Farewell Blog Post for more details.

IP Address Stored at Registration? Track IP and Ban Users?

Last Post
Search Topic
    • Terp's Avatar
    • Terp
    • Elite Rocketeer
    • Posts: 1720
    • Thanks: 23

    IP Address Stored at Registration? Track IP and Ban Users?

    Posted 16 years 2 months ago
    • Okay, so a user registered using a known spam email address (googled it, though just looking at it told me why he was there), then I started to get new members every 3-5 minutes...lots of them. :oops:

      I've been meaning to capture their IP addresses when they login, then pass to the db, but then I got to thinking...perhaps their is a way to capture their IP address during registration (OnSubmit would be nice)?

      I know there are some legal issues with this in some places, or so the J! team presupposes, so I suspect this is why there is not a column in the user manager for the last known IP address. ;)

      Anyway, does anyone know of a plugin that saves their IP address in the user table or have some magic to 1.) capture their IP address 2.) block it/redirect user 3.) other babysitting tools that would be useful?

      I am putting some rewrites in my htaccess to block forwarded/redirected/proxy type of users, but just wondering how others manage their sites that are magnets for spammers...Joomwatch looked good, but I hate adding the resources to the frontend code, so something a little more simple would do...anything is more simple than tracking down IPs in the log and trying to line them out with multiple registrations. :evil:
    #296949
    • Ragdata's Avatar
    • Ragdata
    • Elite Rocketeer
    • Posts: 614
    • Thanks: 0
    • Software Engineer

    Re: IP Address Stored at Registration? Track IP and Ban Users?

    Posted 16 years 2 months ago
    • I know there are some legal issues with this in some places, or so the J! team presupposes, so I suspect this is why there is not a column in the user manager for the last known IP address. ;)
      This is an issue for the core team because they need to cover many bases - but your only concern is the law of the state / country where YOU host your server.

      Check out Ninja Security (a new one I know nothing about, but seems to fit the bill):
      extensions.joomla.org/extensions/access-...ecurity/7169/details
    • Ragdata's Rubber Duck
      www.ragdata.net/
    #296973
    • Terp's Avatar
    • Terp
    • Elite Rocketeer
    • Posts: 1720
    • Thanks: 23

    Re: IP Address Stored at Registration? Track IP and Ban Users?

    Posted 16 years 2 months ago
    • Thank you, sir; I'll take a look at it...just added some basic eval'd 'return $user->get('username');' to capture who is submitting data on my forms, but this, of course, is an ex post solution to my ex ante problem. ;)

      I guess I'll start with grabbing their IP while logged in and use cPanel to block any IPs that need to be blocked in the interim while I check this and a couple solutions out.

      Add this to my very short list of things I miss from the DotNetNuke world; we had a nice user module to grab IPs and store them, then an IP rewrite/filter that could block them (and I redirected them to fbi.gov as a nice touch)....surprises me something so simple and often necessary is missing from the J! core.

      Thanks again, sir...heading there now to have a look at this one.
    #296993
    • Ragdata's Avatar
    • Ragdata
    • Elite Rocketeer
    • Posts: 614
    • Thanks: 0
    • Software Engineer

    Re: IP Address Stored at Registration? Track IP and Ban Users?

    Posted 16 years 2 months ago
    • Most welcome sir.

      I'm certain you're aware - but it bears mentioning here again - that you need to be EXTREMELY careful when adding eval'd code to the front-end ... ESPECIALLY when that code is receiving a variable to be written to a database, and EXTRA-ESPECIALLY when you publicise the fact in a public forum - lest you open an SQL-injection vulnerability in your code.

      Caution sir ... caution.
    • Ragdata's Rubber Duck
      www.ragdata.net/
    #296997

  • Re: IP Address Stored at Registration? Track IP and Ban Users?

    Posted 14 years 5 months ago
    • HI all. One way to get the users ip on registration is to use chronocontact chronoform is a very stable robust form component for joomla ( 1 and 1.5). It allows you to add the html of the form and the software takes care of all the rest of the functionality. The most important feature in respect to this issue of capturing the ips of registrants is that:
      1: ALL the forms you create with it, capture the ip of the sender.
      2: All the forms can have their own table
      3: Standard plugins include converting the form into a registration form.

      I have never used the plugin, there are many, but they have been in the product for so long you know they work.
    #602474

Time to create page: 0.075 seconds