Page 2 of 3

Posted: Tue May 25, 2004 9:56 pm
by d3ad1ysp0rk
You can't block a cracker.

We're talking normal members - decently computer skilled members. Not computer experts.

Posted: Tue May 25, 2004 10:04 pm
by tim
thats why i said

anyone serious about hacking the site.

I know i'm picky about cookies and I could see a pattern in cookies that would giva-way your method..

n I dont go off hacking web pages =]

Posted: Thu May 27, 2004 3:15 am
by dave420
Banning on IP is not very effective at all. Anyone with access to a web-proxy, or even anonymizer site, will be able to fool it. If you think you can detect those, someone needs just use an SSH tunnel to change IPs completely.

Posted: Thu May 27, 2004 3:32 am
by Grim...
I had another good idea last night - how about if you are banned instead of taking you to a page saying 'you have been banned' it takes you to a fake 404 page?

Posted: Thu May 27, 2004 4:50 am
by Findus
Implent them all and leave it up to the moderator who uses it to choose which type off ban.

Re: Forums - Banning Users

Posted: Thu May 27, 2004 10:57 am
by PrObLeM
Grim... wrote:Hi all.
Stealth ban (I came up with this at about midnight last night) - Any posts made by the user cannot be seen by anyone except that user - he posts as normal and thinks everything is going fine, but no-one else has to put up with him.[/list]
I Like the idea but if you start having quite a few banned people and they start finding out about it they can just spam the hell out of your site and it would start to fill up your mysql dbs and that would be a hassle

Posted: Thu May 27, 2004 12:49 pm
by feyd
It should probably only be limited to those that are griefers, to use an MMO term...

Posted: Thu May 27, 2004 6:58 pm
by kettle_drum
How would you implement the stealth ban when the user logs out? or goes to the site on another computer - i.e. one that wouldnt know it was him?

The user requesting the member to be banned could work like the warning thing on AIM - just adds a certain warning level, and maybe have this increase the amount of time a user has to wait to post another thread.

You could just add the stealth ban as a kind of ignore for users themselfs as well....i dont like....jason or whoever...so i, as a member choose not to have any of his posts shown to me. This way the user doesnt get to see posts from people he/she doesnt like, but other people - who may find the info useful - do.

Posted: Thu May 27, 2004 9:08 pm
by feyd
I'd always have a warning system of some sort.. whether shown to users or not. Stealth ban would just be an option in the ban list, it'd take immediate effect. Could have a date for when it takes effect be selectable.. This would add the ability to create temporary accounts for people or clients maybe..

An ignore list for users to have is a nice idea, add to that a "friends" list.. which could then be a link "view all friends' new posts" or something...

Posted: Fri May 28, 2004 3:08 am
by Grim...
kettle_drum wrote:How would you implement the stealth ban when the user logs out? or goes to the site on another computer - i.e. one that wouldnt know it was him?
One of the main plusses of this ban would be that the user wouldn't know he was banned - he would have no reason to change his login details so the flag would be held against his username.

As far as he is concerned, he has no reason to change it!

Posted: Fri May 28, 2004 4:24 am
by feyd
I'd go against user id over username...

Posted: Fri May 28, 2004 4:51 am
by Grim...
o_O

Surely the user id is connected to the username?

Posted: Fri May 28, 2004 5:30 am
by feyd
I took that suggestion as literally storing the username in the stealth ban list, not a reference to the user account, since you appeared to imply that they could circumvent the ban by changing their name.

Posted: Fri May 28, 2004 6:04 am
by Grim...
Apologies for being unclear: when I said changing their name, I meant creating a new login.

Posted: Fri May 28, 2004 11:23 am
by kettle_drum
No what i ment was, the ban would be against the user. So when the user was logged in, he would see his posts - even though other people wouldnt - the stealth ban. But when the user logs out, or visits the forum from another computer, his posts would be missing and he would know he was banned, so it just seems a bit of a waste to store posts that only that person can see - they could even just completly spam the forum to fill up the database, and other people woud be unaware of it.