Modify

Opened 10 years ago

Closed 8 years ago

#12054 closed enhancement (fixed)

patch to add QuestionRegisterPlugin-like functionality

Reported by: Dave Love Owned by: Steffen Hoffmann
Priority: normal Component: AccountManagerPlugin
Severity: normal Keywords: registration antirobot
Cc: Jun Omae, Ryan J Ollos, Dirk Stöcker Trac Release: 0.11

Description

I've had spam accounts created, despite using the AcctManager BotTrapCheck. (I wanted something like QuestionRegisterPlugin, but that no longer works.) I hacked up this change to the current AccountManager to ask a project-specific question (e.g. "What's the command to ..."), which should make the BotTrapCheck more robust when it's appropriate.

Attachments (3)

acct_mgr-question.patch (1.8 KB) - added by Dave Love 10 years ago.
specify bot trap question
20141110_acct-mgr_BotTrapCheck_dev.png (10.5 KB) - added by Steffen Hoffmann 10 years ago.
registration form with example for custom BotTracCheck description text
20141110_acct-mgr_BotTrapCheck_admin-cfg_dev.png (24.8 KB) - added by Steffen Hoffmann 10 years ago.
option documentation as available in configuration admin section for acct_mgr-0.5

Download all attachments as: .zip

Change History (14)

Changed 10 years ago by Dave Love

Attachment: acct_mgr-question.patch added

specify bot trap question

comment:1 Changed 10 years ago by Steffen Hoffmann

Thanks for you contribution, and especially the explicit sign-off to this plugin's license.

comment:2 Changed 10 years ago by Steffen Hoffmann

In 14245:

AccountManagerPlugin: Allow a question as alternative BotTrapCheck field description, refs #10270 and #12054.

This makes BotTrapCheck field description configurable. Now you can require
user input other than exact duplication of text from the description.
That should be more effective against SPAM registration attempts, similar
to QuestionRegisterPlugin functionality - effectively obsoleting that hack.

Thanks to Dave Love for this contribution; just PEP8 aligned here.

Caveat: Neither Trac core nor the plugin itself allows translations of custom
descriptions yet.

comment:3 Changed 10 years ago by Steffen Hoffmann

Consequently QuestionRegisterPlugin has been marked as deprecated now.

Changed 10 years ago by Steffen Hoffmann

registration form with example for custom BotTracCheck description text

Changed 10 years ago by Steffen Hoffmann

option documentation as available in configuration admin section for acct_mgr-0.5

comment:4 Changed 10 years ago by Steffen Hoffmann

Cc: Jun Omae Ryan J Ollos Dirk Stöcker added; anonymous removed
Keywords: registration antirobot added
Status: newaccepted
Trac Release: 0.120.11

registration form with example for custom `BotTracCheck` description text

option documentation as available in configuration admin section for `acct_mgr-0.5`

Better luck with SPAM fighting to all of us.

comment:5 Changed 10 years ago by Dirk Stöcker

With the above question you have probably a 80% chance to also reject any valid user.

And are you sure the question is right. Nobody knows it :-)

comment:6 Changed 10 years ago by Steffen Hoffmann

Hm, I bet, the majority of trac admins will not copy this example but take it for what it was meant: An example question you shouldn't use. Or: Better find an individual question yourself. But maybe I'm assuming too much.? ;-)

comment:7 in reply to:  6 Changed 10 years ago by Ryan J Ollos

Replying to hasienda:

Hm, I bet, the majority of trac admins will not copy this example but take it for what it was meant: An example question you shouldn't use.

Yeah I took it for just a joke. Either way, if the admin hears many complaints to a poor question I'm sure they will change the question.

comment:8 Changed 10 years ago by Ryan J Ollos

One small thing regarding the configuration wizard. Looking at [14245] I can see that I should leave reg_basic_question blank if I want the standard prompt, but that's not obvious in the configuration wizard. Maybe it would be useful to have a Specify custom question checkbox that enables the reg_basic_question field when selected.

comment:9 in reply to:  8 Changed 10 years ago by Steffen Hoffmann

Replying to rjollos:

One small thing regarding the configuration wizard. Looking at [14245] I can see that I should leave reg_basic_question blank if I want the standard prompt, but that's not obvious in the configuration wizard. Maybe it would be useful to have a Specify custom question checkbox that enables the reg_basic_question field when selected.

It smells like option overkill and I'd rather extend options description to make it clear.

comment:10 Changed 10 years ago by Steffen Hoffmann

In 14275:

AccountManagerPlugin: Clarify embedded option description, refs #12054.

This change acknowledges a comment regarding possible uncertainty caused
by [14245] and tries to improve the related option description.

comment:11 Changed 8 years ago by Ryan J Ollos

Resolution: fixed
Status: acceptedclosed

Modify Ticket

Change Properties
Set your email in Preferences
Action
as closed The owner will remain Steffen Hoffmann.
The resolution will be deleted. Next status will be 'reopened'.

Add Comment


E-mail address and name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.