NEED HELP forum.heroes.by — Tournament History

RfG

13 years ago

Auto-translated

Hello everyone,

Probably some of you have already tried to visit Bai's forum and encountered an error.
I tried to resolve this issue with the hoster of this resource. I will provide the correspondence:

Using a loophole in the phpBB CMS registration, users are sending out spam. Accordingly, you should contact the site developer to increase the security of the CMS and protect against bot registration.

--
Sincerely, Evgeny Antonik,
Technical Support Specialist------------------------------------------
Cloud hosting: flexible resources and unmatched power.
Try for free. http://hoster.by/cloud
------------------------------------------
Sincerely, the hoster.by team
24/7 Technical Support (support@hoster.by):
/+375 17/ 239-57-03 (multi-line)
Sales Department, administrative issues (info@hoster.by):
/+375 17/ 239-57-02 (multi-line)
All contacts: http://hoster.by/about/contacts/

===============================================================
How complex is the procedure for protecting the forum, and can it be done by someone who
does not know php? Is there a step-by-step guide, and what level of access to the site
should the user (would a moderator suffice) have?
I need to know which person to promote for this task.

February 11, 2013, 11:24 user HOSTER.BY wrote:

> Hello. Spam is being sent from your forum. As soon as
> the hosting owner is ready to deal with the protection of the forum and carry out work
> on the forum, please send a request from the contact email address.
>
> --
> Sincerely, Evgeny Antonik,
> Technical
> Support Specialist------------------------------------------
> Cloud hosting: flexible resources and unmatched power.
> Try for free. http://hoster.by/cloud
> ------------------------------------------
> Sincerely, the hoster.by team
> 24/7 Technical Support (support@hoster.by):
> /+375 17/ 239-57-03 (multi-line)
> Sales Department, administrative issues (info@hoster.by):
> /+375 17/ 239-57-02 (multi-line)
> All contacts: http://hoster.by/about/contacts/
>
> Request History
> ===================
>
> Putin Vladimir (Client) Sent: 11 February 2013 09:09
>
> ===============================================================
> Good day,
>
> This is some kind of misunderstanding. The formal owner (Stepan Shah), at
> least for several years now, has not been involved in the virtual life of the site.
> Hosting payment is collected collectively. Therefore, the request to disable the
> forum is pointless. Perhaps someone did this by mistake (some
> moderator/administrator).
>
> I earnestly request that you enable the forum so that it is possible to
> figure everything out.
>
> Thanks in advance.
>
>
> February 9, 2013, 15:45 user HOSTER.BY
> wrote:

> > Hello. The forum has been disabled at the request of the hosting owner.
> >
> > --
> > Sincerely, Evgeny Antonik,
> > Technical
> > Support Specialist------------------------------------------
> > Cloud hosting: flexible resources and unmatched power.
> > Try for free. http://hoster.by/cloud
> > ------------------------------------------
> > Sincerely, the hoster.by team
> > 24/7 Technical Support (support@hoster.by):
> > /+375 17/ 239-57-03 (multi-line)
> > Sales Department, administrative issues (info@hoster.by):
> > /+375 17/ 239-57-02 (multi-line)
> > All contacts: http://hoster.by/about/contacts/
> >
> > Request History
> > ===================
> >
> > Putin Vladimir (Client) Sent: 09 February 2013 14:24
> >
> > ===============================================================
> > Good day.
> >
> > The forum forum.heroes.by has been inaccessible for several days.
> >
> > The following error appears:
> > "Forbidden
> >
> > You don't have permission to access / on this server.
> >
> > Additionally, a 403 Forbidden error was encountered while trying to use
> an
> > ErrorDocument to handle the request."
> >
> > Please resolve this as quickly as possible.
> >

As far as I know, Stepan implemented pre-registration of users to protect against spam bots (via email). Probably, one of our moderators (Arma, Vik, Volodymyr) disabled it, and the error occurred again. To everyone who sees any of these people in their ICQ, Skype, or can call them by phone, I earnestly request that you contact them or give them a link to this message. It would be great to establish exactly who did it and, most importantly, how (not to reprimand them, but to fix it quickly). At least one of them definitely has access rights to the site. Let them post here so we can figure out what to do next.

It would be best if someone from Minsk could monitor this (Paladin, Besha, Lizard) and help resolve this issue (call this technical specialist).

Everyone who has read this, don't be lazy and give a shout-out to the people mentioned above!

Moderators of this resource, please assign "important" status to this thread for the time being and pin it to the top.

Wicc

13 years ago

Auto-translated

I haven't changed anything. Moreover, people regularly contact me via ICQ asking to activate their accounts. This means that the protection against automatic registration is enabled. And I doubt that anyone has tampered with it (why would they?). Therefore, the forum engine has a security vulnerability, and it needs to be updated or replaced. I don't know how to do that.

In reply to Wicc

RfG

13 years ago

Auto-translated

Vik, good to hear from you. Try to find out from Volodymyr and Army if they did anything. I also wrote to support, let's wait for their response. By the way, do you have full access to the site and would you be able to maintain it (could you provide your contact information for further communication with support)?

In reply to RfG

Wicc

13 years ago

Auto-translated

RfG

Vik, good to hear from you.

If possible, try to find out from Volodymyr and Army whether they did anything. I also wrote to support, let's wait for their response.

By the way, do you have full access to the site and would you be able to maintain it (could you provide your contact information for further communication with support)?

I don't have full access, and even if I did, I wouldn't have the skills to maintain it. It's better to contact those who have maintained their own websites/forums - SAG, Mee, maybe someone else.

In reply to Wicc

Volodymyr

13 years ago

Auto-translated

Dimon, my account differs from yours in that I can edit and delete messages, that's all. I naturally don't have access to the site settings, and it's also natural that I didn't disable anything. I don't think Arma could have done anything either. I talked to him about this a long time ago; he doesn't know how things work with the settings.

Last year, there were problems with the domain name, and the forum was down for over a week. Through some simple actions, I managed to find Stepina's wife on Odnoklassniki. The next day, the forum started working again. :)

Something tells me that this time, we also won't be able to do without Stepina. I hope you're registered on Odnoklassniki.

RfG

13 years ago

Auto-translated

Yes, I'm 99.9% sure that our people had nothing to do with it, but we need to find out for sure.

I asked support to tell me when the incident occurred; maybe that will make things clearer. I also asked for instructions, and they told me to update the website's software. I don't know what they mean by that (whether to install a new version of PHP or something else).

When I created the website and deployed it on the same hosting provider (just HTML pages), everything was intuitive. I think there's nothing complicated about this problem either. We just need the appropriate credentials to access it. Stepan definitely has them, and Arma probably does too.

I'm not registered on any social networks. If I were in Minsk, we could solve this issue, but it's much harder for me to contact Stepan now than it is for you. That's why I wanted to ask someone from Minsk. Where is that hairy scooter guy when you need him? :D So, if anyone sees them, please ping them.

We already have so few Heroes websites, and it would be a shame if another one went down.

In reply to RfG

Lider1

13 years ago

Auto-translated

RfG

We already have few hero-themed websites, and it would be a shame if another one shuts down.

He's more into poker now than hero games.

These guys have outgrown Heroes :D

Сейчас балуюсь этим https://vcmi.eu/download/
За то что нейтралы не бегают за единичкой, для меня это уже стоит того

In reply to Lider1

Redwhait

13 years ago

Auto-translated

Will have to move this to the poker thread on HeroesWorld :D

KillerVampire

13 years ago

Auto-translated

Someone connected a spam bot, and everything went wrong. We just need to update the engine and tinker with the template so that the bot doesn't easily crawl through the registration form...

Added 2 minutes ago
By the way, open-source engines suffer more from bots due to their openness and the fact that they are well-studied... and this is also a lesson for those who like free stuff.

In reply to Redwhait

LeBron

13 years ago

Auto-translated

Redwhait HP

I guess I'll have to switch to a poker theme on Heroes & Might and Magic :D

I was already thinking about it; we need to include pink nicknames :D

"Это нам идеально подходит!" [Новосибирск, 2013]
"Красавчик! Если только не читер.." [Киев, 2014]
"Это Вам не шутки - нажрался Dust в маршрутке" [Новокузнецк, 2015]
Сам ты фиш (с) :D

KillerVampire

13 years ago

Auto-translated

RfG

Hello everyone,

===============================================================
How complex is the forum protection procedure, and can someone who doesn't know PHP do it? Is there a step-by-step guide, and what level of access to the site should the user (moderator) have?
We need to know what kind of person to assign to this task.

On February 11, 2013, at 11:24, user HOSTER.BY wrote:

> Hello.
> Spam is being sent from your forum. As soon as the hosting provider is ready to protect the forum and make changes to it, please submit a request from the contact email address.

> --
> Sincerely, Evgeny Antonik,
> Technical Support Specialist------------------------------------------
> Cloud hosting: flexible resources and unparalleled power.
> Try it for free. http://hoster.by/cloud
> ------------------------------------------
> Sincerely, the hoster.by team
> 24/7 technical support (support@hoster.by):
> /+375 17/ 239-57-03 (multi-channel)
> Sales department, administrative issues (info@hoster.by):
> /+375 17/ 239-57-02 (multi-channel)
> All contacts: http://hoster.by/about/contacts/

> Request history
> ===================

> Putin Vladimir (Client) Sent: February 11, 2013 09:09

> ===============================================================
> Good afternoon,

>This is some kind of misunderstanding. The formal owner (Stepan Shakh), at least, has not been involved in the virtual life of the site for several years.
Hosting fees are collected collectively. Therefore, a request to disable the forum is meaningless. Perhaps someone did it by mistake (some moderator/administrator).

I urge you to enable the forum so that it is possible to figure out what happened.

Thank you in advance.

>On February 9, 2013, at 15:45, user HOSTER.BY wrote:

> > Hello. The forum has been disabled at the request of the hosting provider.
>
> > --
> > Sincerely, Evgeny Antonik,
> > Technical Support Specialist------------------------------------------
> > Cloud hosting: flexible resources and unparalleled power.
> > Try it for free. http://hoster.by/cloud
> > ------------------------------------------
> > Sincerely, the hoster.by team
> > 24/7 technical support (support@hoster.by):
> > /+375 17/ 239-57-03 (multi-channel)
> > Sales department, administrative issues (info@hoster.by):
> > /+375 17/ 239-57-02 (multi-channel)
> > All contacts: http://hoster.by/about/contacts/
>
> > Request history
> > ===================
>
> > Putin Vladimir (Client) Sent: February 9, 2013 14:24
>
> > ===============================================================
> > Good afternoon.
>
> > The forum forum.heroes.by has been inaccessible for several days.
>
> > The following error appears:
> > "Forbidden
>
> > You don't have permission to access / on this server.
>
> > Additionally, a 403 Forbidden error was encountered while trying to use
> an
> > ErrorDocument to handle the request."
>
> > Please fix this as soon as possible.
>
[/I]

There are TWO clear answers to the questions marked in bold.
1. No.
2. No.
You need to protect against bots at the core level - with a simple check (logical condition). Therefore, the user does not need to be a MODERATOR, but needs to have FULL access to the core - which means the password to the HOST... If you have any questions, feel free to send me a private message.

In reply to KillerVampire

RfG

13 years ago

Auto-translated

KillerVampire

There are TWO clear answers to questions marked in bold.
1. No.
2. No.
To protect against a bot, you need to do it at the core level – with a simple check (logical condition). Therefore, the user needs to have FULL access to the core, not just be a MODERATOR – which means they need the HOST password.... If you have any questions, feel free to send me a private message....

Thank you for the offered help.

Something similar to advice was sent by support:

Hello. At a minimum, you need to update the forum version and install a module to protect against spam bots, for example http://www.phpbbguru.net/community/topic32021.html
or http://cleantalk.ru/itkitchen/2011/06/%D1%81%D0%BF%D0%BE%D1%81%D0%BE%D0%B1%D1%8B-%D0%B7%D0%B0%D1%89%D0%B8%D1%82%D1%8B-phpbb3-%D0%BE%D1%82-%D1%81%D0%BF%D0%B0%D0%BC%D0%B0/
If you don't like these solutions, search for "Protecting phpBB from spam" in any search engine.

All that remains is to find a person with the necessary access rights. I don't see the point in looking for Arma, as he won't do anything on his own. You need to look for Balamut.

Possible contacts:

1) His phone number should be with Beshi or Arma. If anyone sees them on ICQ, please ask.

2) Classmates. I can suggest a possible search: Stepan Shah, Belarus, did not graduate from a Minsk school, education at BSU, age will be around 30+. He is clearly interested in Heroes 3. There are definitely a lot of people there who have an account. Do a good deed – find him and redirect him here.

In reply to LeBron

Dirty_Player

13 years ago

Auto-translated

LeBron

I was already thinking about it, we need to involve pink nicknames :D

In the worst case, you can open an entire section on heroes.by. There used to be a heroesleage section, before the site stopped working. Or, you could create a section dedicated to poker, attracting a new audience to Heroes through poker :)

In reply to RfG

Pyre

13 years ago

Auto-translated

RfG

2) Classmates. I can suggest a possible search: Stepan Shah, Belarus, didn't graduate from a Minsk school, educated at BSU, age will be around 30+. He is clearly interested in Heroes 3. There are definitely a lot of people here who have an account there. Do a good deed - find him and redirect him here.

I found a similar person on Classmates and messaged him.

Только в тишине ответит вселенная, только в наших сердцах мы обретем смелость следовать её зову. ;)