HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.
Search
-
Re: How to block this spambot?
Our guest role seems to be even less permissive than the defaults, with 1 only in the "Garden.Profiles.View" column. I noticed, though, that while though there is no RoleID 0 in GDN_Role, there is a PermissionID in GDN_Permission's for RoleID 0 that is extremely permissive. Is that normal? In GDN_User, should be numbers in… -
Re: How to block this spambot?
Great help here. I woke up this morning to our pockets turned on. A UserInsertID 0 had enabled admin to see pockets and adjusted editing time. Could the same User ID "0" allow for modification of dashboard items. I too completed an migration about a month ago and had UserRole for UserID 0 set to 0 which had very high… -
Re: How to block this spambot?
-
Re: How to block this spambot?
-
Re: How to block this spambot?
-
Re: How to block this spambot?
-
Re: How to block this spambot?
-
Re: How to block this spambot?
-
How to block this spambot?
The bot edits an old thread's OP, as user 0. That's all it seems to do. Here's how its edits show up in the edit log: And here's how they show up in the database: I've added the most obvious IP address range to the ban list like so, but it doesn't seem to stop it at all! Any suggestions? I'm running Vanilla 2.1.5 -
Re: How to block this spambot?
Thank you for these suggestions! In the GDN_Role table, the RoleID of guests is 2. However, there IS a GDN_UserRole with UserID 0 -- it has the RoleID 2 of guest. The Guest role permissions appear to be orthodox -- they can only view profiles and threads. In the GDN_User table, there was no user with UserID 0. When you…
11 results