Question

SPAM: How to NOT create User page, until 1 question is approved!

I have plenty of BOTS creating false accounts new users (captcha+emails are validated!).

They can't post question because I enabled moderation for question in two differents forum + forum2 but they created fake accounts every day, and that's a problem. (but they don't create posts, so the main problem is fakes users accounts I need to delete manually.

I am not the only one with that problem, and I didnt found any good answer. But I have an idea : I would like to disable creating user pages, until their first question is approved.

Thanks for the community.

Edit: @amiyasahu, you got a point, so I think the best is to create the user in database (like usual), but not showing in "Users pages" until the question is approved!

Comments

Excellent idea.

---

+1! Same problem!

---

+1 . I also have same issues . Problem is that they are humans (SPAMMERS) . Only we can block thehir IP . But still it is difficult to prevent them . Somehow they are registers from different IPs across the globe .

---

Yes but human or bot, this will solve the problem. Someone to fixe this? Maybe implement a function or something?

---

yah , but first time are you going to allow them to ask a question with out loggin in . ??

---

The plan is:
1) they first login, and validate the email,
2) they ask question/comment, and a moderator accept or disable the question.
3) As soon the question is accepted, the user is created. (here we got the problem, as there is no function implement for this)

---

how can some one login without creating the user . ?? First the user has to be created to login and ask a question naa

---

If I would add something to this talk, if we could add some more fields in form for registration like phone number verification, that a sms will be sended with a code and with that code they can signup, so if IP can change but how many numbers one can change. If one number is registered for one user then that can't be used for another. This can stop a single user to stop spam at a certain point, instead of an IP system.
I don't know how much effort and time this kind of a system will take to build, but it'll definitely pass away everything till now.

---

@amiyasahu, you got a point, so I think the best is to create the user in database (like usual), but not showing in "Users pages" until the question is approved!

---

@The One , thanks you got my point . Thats would be a great idea for preventing spam .

---

Yes, something like this would be great for Q2A if it finally stops all these spam users from being generated!

---

I think a solution would be to create the user, and then after a fix time remove the user IF he hasen't submitted a question. Often if they are spammers and ask a question, you will see appearing the same words/websites, and you can then filter questions automatically looking for these keywords. This would also get rid of old user who have never been active (and I'm in peace with my mind with removing them).

Answer 1

with a simple code, it's possible to send user's first post to moderation queue based on if it had any approved posts or not. but showing user lists(and profiles) based on that requires core hack or page override which can make Q2A unstable.

it's a great idea, so I suggest that you request it for next update to be added to Q2A core:

http://www.question2answer.org/qa/31514/what-do-you-want-in-question2answer-1-7?show=31514#q31514

Comments

with all the updates already asking, I will no have any answer...
Thanks for anybody having an answer to this problem right now! QA-Themes I am sure you know how to fixe this ;-) =>  so I think the best is to create the user in database (like usual), but not showing in "Users pages" until the question is approved!

---

I hope this could be done through a plugin .Some core hack also might be needed .

Answer 2

You asked me on my wall if I have solved this.

I do fight against SPAM IPs through blocking ips in .htaccess

by adding after

RewriteBase /

 

order allow,deny

deny from 63.141.

deny from 142.54.

deny from 37.187.

deny from 31.204.

deny from 212.7.

deny from 69.197.

allow from all

 

This works for me. 

 

I also saw here a plugin which compares post ips against a spam list.

Should work as well.

 

The script itself is unable to handle Spam correctly.

On a fast server I had during a day hundreds of new members with tons of posts and mail.

It does not help to have them all in moderation or similar.

 

Q2A should have a known Spammer ip list. But development seems to be down as the

inventor seems to be less interesed in his script.

 

 

Comments

Thanks Monk, I will try this! yes the plugin is spamchecker but didnt work for me. I really think we need a plugin or a hack!

Answer 3

The best way of getting rid of spam users is allowing only social logins using many providers like:

• Google
• Facebook
• Yahoo
• Microsoft
• LinkedIn
• Github

I bet users will have atleast one of the above accounts.

Comments

I will try this if I can't fixe this issue. Thanks!

---

is there a plugin for this?

---

Yes @Chun , there is a plugin for the purpose -  https://github.com/alixandru/q2a-open-login

---

Thank you very much

Answer 4

You might want to try the stop spam plugin (not free): http://www.q2apro.com/plugins/stop-spam

It should block bots. And when attacked by human spammers, you can disallow parts of domains or specific words.

I got - don't ask me why - spam posts to .pl domains. I just blocked ".pl" and no polish spam anymore. As easy as that.

Answer 5

You could try this new plugin created by me . This might help you to prevent spam . 

This asks some random , logical questions to the user . More information is on this thread . 

http://www.question2answer.org/qa/37749/

Hope It helps .
Thanks

Comments

thanks I will try this!

---

still got user creating fake accounts with your plugin... I think the only way for my problem is what I ask at the beggining => "NOT create User page, until 1 question is approved!" - I tried differents spams methods the past few days, and I still got spammers coming, but they can't create any post (??) so my problem is a lots of fakes accounts I need to delete.