Protection from the email extractors

Learn about Security for code and servers. Learn how to secure your site and your code. Learn about hacking prevention, finding and identifying exploits, and recognising vulnerabilities. Plus, Weekly Security tips and Tutorials.
Forum rules
Post questions related to security, analyse and learn about vulnerabilities and exploits within code to protect yourself against hackers.

Protection from the email extractors

Postby _Chris_ » 09 Nov 2010, 14:08

How do you protect your forum from the email extractors please ?
_Chris_
Lt. Jr Grade
Lt. Jr Grade
 
Posts: 164
Joined: 19 Aug 2010, 09:06
Gender: Male
phpBB Knowledge: 1


Re: Protection from the email extractors

Postby topdown » 09 Nov 2010, 18:03

Enable
Users send e-mail via board:
Instead of showing the users e-mail address users are able to send e-mails via the board.

In the ACP -> Email Settings
Do not PM me for Support unless I give permission in a post......PM's only help one, posts help everyone !
User avatar
topdown    
STG Styles Leader
STG Styles Leader
 
Posts: 3021
Joined: 01 Oct 2007, 22:56
Location: Handyman's harddrive
Favorite Team: STG Teams
Gender: Male
phpBB Knowledge: 9

Re: Protection from the email extractors

Postby _Chris_ » 10 Nov 2010, 04:18

Thanks topdown, but how would you stop someone sending in an email extraction bot, from an external source ?
_Chris_
Lt. Jr Grade
Lt. Jr Grade
 
Posts: 164
Joined: 19 Aug 2010, 09:06
Gender: Male
phpBB Knowledge: 1

Re: Protection from the email extractors

Postby Sniper_E » 10 Nov 2010, 09:01

Chris, if you go to ACP / Users and Groups / Groups permission / select Bots / you will see all permissions set to No

Bots do not have permission to send e-mail and should be blocked from seeing the e-mail link....
along with being blocked from seeing a lot of things on your site.
Image
No is NEVER an Option and NEVER is the only Option when it comes to Giving Up!
User avatar
Sniper_E    
STG Jedi Master
STG Jedi Master
 
Posts: 6981
Joined: 31 May 2006, 06:29
Location: Shreveport, LA
Favorite Team: The STG Team
Gender: Male
phpBB Knowledge: 6

Re: Protection from the email extractors

Postby _Chris_ » 10 Nov 2010, 09:05

This isn't to stop them sending from the forums, it's to stop them collecting email address's from the forums.
_Chris_
Lt. Jr Grade
Lt. Jr Grade
 
Posts: 164
Joined: 19 Aug 2010, 09:06
Gender: Male
phpBB Knowledge: 1

Re: Protection from the email extractors

Postby Sniper_E » 10 Nov 2010, 11:03

Yes it is. It stops them from sending e-mail trough the forum.

topdown showed you how to enable e-mail to be sent through the forum.
That will keep even registered users from getting another user's e-mail address.
If you e-mail someone through the forum and they e-mail you back, then you both have each others e-mail address.

Bots can not get anyone's e-mail address, they can not even send e-mail to anyone.
phpBB has a lot of blocks setup for bots. Bots are very limited to what they can see and do.
There are even permissions in the ACP you can set to where bots can not see your forum at all.
Image
No is NEVER an Option and NEVER is the only Option when it comes to Giving Up!
User avatar
Sniper_E    
STG Jedi Master
STG Jedi Master
 
Posts: 6981
Joined: 31 May 2006, 06:29
Location: Shreveport, LA
Favorite Team: The STG Team
Gender: Male
phpBB Knowledge: 6

Re: Protection from the email extractors

Postby Hank the Cowdog » 10 Nov 2010, 11:47

Sniper, Chris is saying that he wants to stop Bots from going to his forum and collecting the E-Mail addresses of his users:
_Chris_ wrote:This isn't to stop them from sending from the forums, it's to stop them collecting email address's from the forums.


And Chris, Sniper is saying that Bots are already unable to see E-Mail addresses... and, like topdown suggested, enabling "Users send E-Mail via board" will make it so that users can't see the E-Mail addresses of anybody unless they send an E-Mail to another user and that user replies:
Sniper_E wrote:Yes it is. It stops them from sending e-mail trough the forum.

topdown showed you how to enable e-mail to be sent through the forum.
That will keep even registered users from getting another user's e-mail address.

If you e-mail someone through the forum and they e-mail you back, then you both have each others e-mail address.

Bots can not get anyone's e-mail address, they can not even send e-mail to anyone.
phpBB has a lot of blocks setup for bots. Bots are very limited to what they can see and do.
There are even permissions in the ACP you can set to where bots can not see your forum at all.


Hopefully that will clear up any confusion. :this:
~Hank the Cowdog, Jordan
Section 31 Admiral

Image
User avatar
Hank the Cowdog    
STG Moderator
STG Moderator
 
Posts: 2197
Joined: 16 May 2006, 16:06
Location: 47° 50' N / 117° 12' W
Favorite Team: 49ers/Seahawks
Gender: Male
phpBB Knowledge: 5

Re: Protection from the email extractors

Postby _Chris_ » 11 Nov 2010, 04:31

Thanks - yep, I am saying that I want to stop Bots from going to a forum and collecting the E-Mail addresses of the users.

There's some email extractors out there that can scour the forums for email address's, how do you stop them ?
_Chris_
Lt. Jr Grade
Lt. Jr Grade
 
Posts: 164
Joined: 19 Aug 2010, 09:06
Gender: Male
phpBB Knowledge: 1

Re: Protection from the email extractors

Postby Hank the Cowdog » 11 Nov 2010, 12:17

_Chris_ wrote:There's some email extractors out there that can scour the forums for email address's, how do you stop them ?

In the case of E-Mail extractors that are registered users, you'd have to enable that 'Users send E-Mail via board" option previously mentioned. If that is enabled, the extractors' only available method of gathering E-Mail addresses is to send an E-Mail to someone and hope they reply.

There's also the 'Hide E-mail addresses' option in the E-mail settings... I'm assuming that makes it so that users cannot see addresses or communicate through e-mail at all.
~Hank the Cowdog, Jordan
Section 31 Admiral

Image
User avatar
Hank the Cowdog    
STG Moderator
STG Moderator
 
Posts: 2197
Joined: 16 May 2006, 16:06
Location: 47° 50' N / 117° 12' W
Favorite Team: 49ers/Seahawks
Gender: Male
phpBB Knowledge: 5

Re: Protection from the email extractors

Postby _Chris_ » 11 Nov 2010, 12:20

It could also be for email extractors that are not users.
_Chris_
Lt. Jr Grade
Lt. Jr Grade
 
Posts: 164
Joined: 19 Aug 2010, 09:06
Gender: Male
phpBB Knowledge: 1

Next

Return to Security Class

Who is online

Users browsing this forum: No registered users and 0 guests