It is currently Thu Feb 22, 2018 8:39 am



Reply to topic  [ 13 posts ] 
Memberlist AWOL. 
Author Message
Minor Diety
User avatar

Joined: Fri Apr 11, 2003 2:17 pm
Posts: 7658
Location: Centre of the sun
Reply with quote
Post Memberlist AWOL.
read title.

_________________
"Well a very, very hevate, ah, heavy duh burtation tonight. We had a very derrist derrison, bite, let's go ahead and terrist teysond those fullabit who have the pit." - Serene Branson


Thu Oct 13, 2005 9:49 am
Profile
King
User avatar

Joined: Wed Apr 16, 2003 2:18 pm
Posts: 1976
Location: Sexy Town
Reply with quote
Post 
For security reasons. So spammer dont see your profile and get your email or send you PMs or get your AOL info or something.

_________________
Contrary to popular belief, America is not a democracy, it is a Chucktatorship.
Image


Thu Oct 13, 2005 10:58 am
Profile ICQ YIM
Emperor
User avatar

Joined: Wed Apr 16, 2003 1:25 am
Posts: 2560
Reply with quote
Post 
Well, not so lucky solution since profiles of those who post are still visible to the guests and it is still very easy to acquire the list of members and get all the public visible data, even if members.php is moved, belive me. Effect is just - nothing (ok, not absolutely nothing - we will kick out the kids that are new in the job), if it was a goal. Was it?

But, hmmmmm... disabling a bot to send PM by hiding the memberlist? :shock: What one can do is disabling of PM service to the members that are not by some way approved or/and putting the word or/and link filter in PM service.

_________________
++


Thu Oct 13, 2005 11:06 am
Profile WWW
Felix Rex
User avatar

Joined: Fri Mar 28, 2003 6:01 pm
Posts: 15732
Location: On a slope
Reply with quote
Post 
primary reason for memberlist removal: destroy bot link generators.

Bots (or people) would generate logins with links to their home pages in the hope that search engines would see the links and boost their relevancy ratings. My disabling the memberlist, I've removed that.

This was a very real problem here. At least 50% of our users were fake users used for the crosslinking thing.

Harvesting emails is another reason, but obviously I haven't taken care of that entirely. To do that I would need to kill email display for the email link at the bottom of each post and in the person's profile. And anywhere else is may exist, though those are the big ones.

As for pm spamming...you have to be a registered user to pm. If someone pm spams, I'll disable that account. If someone starts making alot of fake users to pm spam, I'll probably apply my word filter hack to pms also.

_________________
They who can give up essential liberty to obtain a little temporary safety, deserve neither liberty nor safety.


Thu Oct 13, 2005 12:09 pm
Profile WWW
Emperor
User avatar

Joined: Wed Apr 16, 2003 1:25 am
Posts: 2560
Reply with quote
Post 
Satis wrote:
Bots (or people) would generate logins with links to their home pages in the hope that search engines would see the links and boost their relevancy ratings. My disabling the memberlist, I've removed that.

So, the memberlist is moved because of the search engines? Ok.

_________________
++


Thu Oct 13, 2005 12:21 pm
Profile WWW
Minor Diety
User avatar

Joined: Fri Apr 11, 2003 2:17 pm
Posts: 7658
Location: Centre of the sun
Reply with quote
Post 
maybe you can create one manually? one that doesnt come up in these searches? I doubt youve even read my post past the word 'manual'. that word scares you too much. in that case, manualmanualmanualmanualmanualmanualmanualmanualmanualmanualmanual you suck ass manualmanualmanualmanualmanualmanualmanualmanualmanualmanual.

_________________
"Well a very, very hevate, ah, heavy duh burtation tonight. We had a very derrist derrison, bite, let's go ahead and terrist teysond those fullabit who have the pit." - Serene Branson


Thu Oct 13, 2005 12:42 pm
Profile
Felix Rex
User avatar

Joined: Fri Mar 28, 2003 6:01 pm
Posts: 15732
Location: On a slope
Reply with quote
Post 
@gfreeman... yes. Mainly to dissuage people from creating fake users just to boost their search engine rankings.

@derf...wtf

_________________
They who can give up essential liberty to obtain a little temporary safety, deserve neither liberty nor safety.


Thu Oct 13, 2005 1:18 pm
Profile WWW
Emperor
User avatar

Joined: Wed Apr 16, 2003 1:25 am
Posts: 2560
Reply with quote
Post 
derf wrote:
maybe you can create one manually? one that doesnt come up in these searches? I doubt youve even read my post past the word 'manual'. that word scares you too much. in that case, manualmanualmanualmanualmanualmanualmanualmanualmanualmanualmanual you suck ass manualmanualmanualmanualmanualmanualmanualmanualmanualmanual.

Well I haven't got what he is saying, Satis, but if you dissable memberlist just for the guests, you will make it available for us and it will be still invisible for the search engines. Just my 5¢, do it in the way you choose. ;)

_________________
++


Thu Oct 13, 2005 3:22 pm
Profile WWW
Felix Rex
User avatar

Joined: Fri Mar 28, 2003 6:01 pm
Posts: 15732
Location: On a slope
Reply with quote
Post 
meh, I think the memberlist is pretty useless, personally. I could stick in some code to make it only come up for registered users, but why bother? It disappeared at the same time I made the antispam changes, so it's taken awhile for anyone to even notice. :)

_________________
They who can give up essential liberty to obtain a little temporary safety, deserve neither liberty nor safety.


Thu Oct 13, 2005 4:06 pm
Profile WWW
Minor Diety
User avatar

Joined: Tue Apr 01, 2003 10:23 am
Posts: 3956
Location: Amsterdam
Reply with quote
Post 
Do those bots use the standard adress for memberlists in phpbb fora? In that case would adding a single digit to the link fix the problem?

_________________
Melchett: As private parts to the gods are we: they play with us for their sport!


Thu Oct 13, 2005 5:09 pm
Profile
Emperor
User avatar

Joined: Wed Apr 16, 2003 1:25 am
Posts: 2560
Reply with quote
Post 
Arathorn wrote:
Do those bots use the standard adress for memberlists in phpbb fora? In that case would adding a single digit to the link fix the problem?

I think they just suck any link recursively. One searching thread dies when it makes the dead loop. So no such solution, I think. Anyway, malevolent guests won't notice that only one digit is changed and they will keep making the useless profiles. :?

Yes, I use the memberlist very rarely, just to remind me in which order is the registration of the members done.

_________________
++


Thu Oct 13, 2005 5:39 pm
Profile WWW
Emperor
User avatar

Joined: Wed Apr 16, 2003 1:25 am
Posts: 2560
Reply with quote
Post 
I just noticed I had the same problem. The memberlist is now allowed only for the users that are logged in.

# OPEN>
includes/page_header.php

# FIND>
Code:
'U_MEMBERLIST' => append_sid('memberlist.'.$phpEx),


# REPLACE WITH>
Code:
'U_MEMBERLIST' => (($userdata['session_logged_in'])?append_sid('memberlist.'.$phpEx):""),


In this case, click on the memberlist redirect the guest to the index page.

_________________
++


Wed Oct 19, 2005 12:36 pm
Profile WWW
Felix Rex
User avatar

Joined: Fri Mar 28, 2003 6:01 pm
Posts: 15732
Location: On a slope
Reply with quote
Post 
cool. Good hack. Neater than just killing the link. :p

_________________
They who can give up essential liberty to obtain a little temporary safety, deserve neither liberty nor safety.


Wed Oct 19, 2005 3:35 pm
Profile WWW
Display posts from previous:  Sort by  
Reply to topic   [ 13 posts ] 

Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  
cron
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group.
Designed by STSoftware.