Your message dated Sat, 27 Dec 2008 10:13:41 GMT
with message-id <[email protected]>
and subject line phpbb2 has been removed from Debian, closing #391775
has caused the Debian Bug report #391775,
regarding phpbb2 needs more effective anti-spam support
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
391775: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=391775
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: phpbb2
Version: 2.0.21-4
Severity: wishlist
I run a 400 user PHPBB2 board and have constant battles with spam
bots registering accounts automatically. Phpbb2 requires more
effective armour against bots registering accounts on phpbb2 boards
to spam advertise their URL on the phpbb2 memberlist.
As noted in [1] the phpbb2 "captcha" is an ineffective method to deal
with fake registrations. Phpbb2 needs a confirmation image that is
more difficult to apply automated character recognition to.
Phpbb2 should not show a member's web page URL on the memberlist
until their registration is confirmed (if the board owner has enabled
confirmation), or as suggested in [2] it should attempt to "confuse"
automated registration bots.
If configured for email confirmation, phpbb2 sends email to the email
address the user specifies in their registration information for
confirmation. Phpbb2 should provide a bounced email handler (such as
the way the mailman mailing list manager handles bounced addresses)
that disables or otherwise flags new accounts with invalid
registration email addresses.
[1] - http://sam.zoy.org/pwntcha/
[2] - http://boonedocks.net/mike/archives/49-PHPBB-Member-List-Link-Spam.html
Regards,
Gavin Rogers
--- End Message ---
--- Begin Message ---
Version: 2.0.23+repack-4+rm
The phpbb2 package has been removed from Debian testing, unstable and
experimental, so I am now closing the bugs that were still opened
against it.
For more information about this package's removal, read
http://bugs.debian.org/509620 . That bug might give the reasons why
this package was removed, and suggestions of possible replacements.
Don't hesitate to reply to this mail if you have any question.
Thank you for your contribution to Debian.
--
Marco Rodrigues
http://Marco.Tondela.org
--- End Message ---
