phpBB.de

Hallo,

ich denke mal mein Beitrag ist hier richtig.

Ich habe mir vor kurzem das Eingedeutschtes phpBB 2.0.22 installiert. Nun hat sich ein User neu registriert und folgenden Beitrag geschrieben:


Hi!

Your forum is wide open to automatic registrations and postings. Spammers can use it to spread their junk automatically, just like we did to send you this message.

Find 'projekt spambot' on Google and to learn how we did this and how to secure your forum against this pest.

This is a one-time posting by 'Projekt SpamBot 2.0' to help forum-admins to secure their software. This account will not be used again, you can delete it (and this post) if you wish.
(We know we said it would have been a one time-posting the last time, but now being able to crack phpBB's CAPTCHA and the 'Humanizer' so easily lead us to version 2.0 to tell the community how unsafe phpBB is *again*.)

phpBB's standard-CAPTCHA is NOT safe. If you activated it for your forum, this post is the proof that it can be broken. (Our article tells you how.) Also the standard-'Humanizer' offers no security. You'll agree if you have it installed and have this text posted to your forum.

To stop spammers we recommend the MODs 'Advanced Visual Confirmation' and 'Unique Registration Hash' which can be found at phpbbhacks.com or the MOD-database on phpbb.com. 'Antibot Question MOD' is a good way to keep your forum clean and the MOD 'Anti-Spam ACP' also offers various modifications against spam.

Greetings,
pseudocode


PS: E-Mails and PMs to this account as well as replies to this post will not be read.
PPS: if you received this message several times, your forum is probably reachable through more than one URL

Ich bin jetzt etwas verunsichert (mein Englisch ist sehr eingerostet) das mein Forum nicht sicher ist. Oder wie muss ich diesen Beitrag jetzt verstehen? Vielleicht kann mir jemand weiterhelfen, wäre super lieb.

Gruss
nessey

Find 'projekt spambot' on Google and to learn how we did this and how to secure your forum against this pest.

This is a one-time posting by 'Projekt SpamBot 2.0' to help forum-admins to secure their software. This account will not be used again, you can delete it (and this post) if you wish.
(We know we said it would have been a one time-posting the last time, but now being able to crack phpBB's CAPTCHA and the 'Humanizer' so easily lead us to version 2.0 to tell the community how unsafe phpBB is *again*.)

Der Text sagt eigentlich alles: es handelt sich um einen Bot, der die Foren auf ihre Sicherheit überprüft, und evtl. einen Post hinterlässt, wie in diesem Fall geschehen. Der Text dient nur als Information an den Forenbetreiber, dem Forum etwaige Sicherheits-MODs hinzufzufügen, wie die "Advanced Visual Confirmation", den ACP Anti-Spam MOD oder AntiBot Question MOD.

Allerdings weiss ich nicht, ob es sich um ein gefaktes Projekt handelt, auf jeden Fall sollte man einige der MODs installieren

Oh je wie peinlich. Ich sollte wirklich nen Englischkurs machen. Aber vielen Dank StarWolf3000 für die Hilfe.