Anti-spam solution for registration page

[finid]

Since there's no deterrent against bot registrations for NodeBB, this is a request to create one using a user-friendly captcha.

On the forum, somebody suggested using http://visualcaptcha.net/, which I think is the least annoying of all the captcha implementations that I've come across.

[julianlam]

Simple and unobtrusive. I can also confirm it works on mobile.

[akhoury]

visualcaptcha looks awesome.

@julianlam I started nodebb-plugin-spam-be-gone but akismet api was too greedy for the amount of data available last i checked. That was mostly aimed against post.creation() though, which I could still write an akismet only plugin,

As for the registration it uses http://stopforumspam.com, which to be honest, sucked after some testing, I was able to compile a list of 3000 spam emails (from the migrated forum) and stopforumspam caught less than 10% of them.

[finid]

Anti-spam for post creation is not that big of a deal since only registered users can post. The big one is stopping bot registrations.

One of the best features of visualCaptcha is that the options are configurable via a JSON file.

So is this going to be made an issue for 0.4.0?

[preeefix]

@akhoury

@julianlam I started nodebb-plugin-spam-be-gone but akismet api was too greedy for the amount of data available last i checked. That was mostly aimed against post.creation() though, which I could still write an akismet only plugin,

You could use a service like sblam. The fields on that are optional but you'll have to recode it for node :/

[nicekiwi]

VC looks very good. I was going to suggest: http://areyouahuman.com/site-owners/playthru/

[finid]

I don't see this attached to any milestone. Is there no interest in this?

[julianlam]

There is, yes. I'd aim for 0.4.1.
On Mar 22, 2014 10:47 PM, "finid" notifications@github.com wrote:

I don't see this attached to any milestone. Is there no interest in this?

—
Reply to this email directly or view it on GitHubhttps://github.com//issues/1213#issuecomment-38371361
.

[preeefix]

I personally dislike seeing any new elements added to the forum but VC could work. I can call a few friends and see what they use for spam prevention on their bit sites.

[finid]

But @iamcardinal, this new feature should have been part of the Core from the start. How else are ou going to slow down bot registrations?

[psychobunny]

I think as a bundled plugin yeah, I would agree that it should be
abstracted out so one could replace with their own solution

Our goal is to keep core as light as possible that's why we built the
widget system and released plugins support super early :)
On 2014-03-29 6:59 PM, "finid" notifications@github.com wrote:

But @iamcardinal https://github.com/iamcardinal, this new feature
should have been part of the Core from the start. How else are ou going to
slow down bot registrations?

Reply to this email directly or view it on GitHubhttps://github.com//issues/1213#issuecomment-39011954
.

[preeefix]

@finid No so much as not have spam support in the system but to have some kind of backend to check emails with several databases. Maybe put it up for moderation so admins can still accept some.

[julianlam]

A moderation queue would actually be something we'd put into core. Then we can revamp the "restrict registrations" configuration to be a three-stage selection, so admins can:

1. allow registrations freely,
2. restrict account creation to an admin,
3. close account registrations altogether

[julianlam]

As it stands, spam-be-gone is working quite well on our end. This issue seems to be perpetually open because there's no direction with which to go -- how can the NodeBB team facilitate production of CAPTCHA plugins? Is there a blocking issue we need to take care of?

Please comment, and we'll re-open if necessary 😄

[akhoury]

added registration captcha support to nodebb-plugin-spam-be-gone.
Pending 2 PRs
akhoury/nodebb-plugin-spam-be-gone#1 (comment)

[akhoury]

@finid
FYI: will be supporting the pretty visualcaptcha soon. Thanks for suggesting that.

track issue here:
akhoury/nodebb-plugin-spam-be-gone#4