View Single Post
  #6 (permalink)  
Old 06-26-2007, 11:54 PM
tubut's Avatar
tubut tubut is offline
Senior Member
Platinum Subscriber
 
Join Date: Sep 2003
Location: Vancouver, BC
Posts: 2,741
Quote:
Originally Posted by smestas View Post
You can forward any questionable PM's to me "smestas". If it is SPAM I'll make sure to bann them from the site.

This has happen once or twice before.
Simon,

I think the web site has some vulnerabilities with respect to Spam attacks via PM.

Once a valid UserID is established, it's easy to create a spambot for PMs. All users are referred to by sequential number (you're user #1). Therefore, creating a Spambot that cranks through all numbers is relatively easy.

What's needed is a mechanism like kaptcha that enforces authentication for each and every PM and/or e-mail posting through AlfaBB.

Sorry to be the bearer of bad news. Let us know what you need in terms of support to make this happen.
__________________
Ruedi
'63 2600 Touring Spider (apart)
'65 2600 SZ (resto project)
Reply With Quote