Banning users from site 1

[offdarock]

I designed and built a CF message board and I have about 625 registered members on there right now. I am far from a proficient CF programmer as this msg board was my first attempt at the CF language. Here is where my problem lies. I have had to ban certian members from the site but they keep coming back.

Here is what I have done so far.
1. ecah user must have a unique email. If someone is already registered with bill@microsorf.com then that person cant register again with the same email.

2. I track the IP's and put them in a blocked database that gets checked every time a user logs in.

3. I suspend their accounts by odifying the password.

4. I drop a cookie whick wont let them in the fron door.

This person must have a million email address and enought ip's to start to get under my skin...

Any help would be appriciated...

Craig

http://www.offdarock.com/virtualKitchen.cfm

 

[grtfercho]

Well, the IP banning is not a path that I would consider. Unless he has a dedicated connection then the IP is most likely to change everytime he connects to the internet.

Lets say you have 50 people connected to a network where the IPs are dynamic.If you block IP xxx.yyy.zzz.171 the only thing I have to do is run a command like c:\ipconfig /renew and I'll get a new IP ( depending on the LAN config). Now, if a true worthy user is on the same network and gets IP 171 after a reboot then he/she won't be able to login.

getting emails is so easy that as long as they offer them for free you won't have a way of blocking the guy.

blocking the user and changing their passwords? just get another email again and register from a different IP.

Cookies? I can just go and delete my whole folder and you are back to square zero.

Unless you make things more complicated and more secure to all your users then chances are whoever wants to be there, will be there. You could start asking for Credit Card Information and then only allow those who have a registered CC. BUt that solution obviously will create suspicion and you'll loose half your users the next day you implement something like that.

Why don't you implement something similar to a rating system of the users. Have small Icons next to the users name to show if he's a new one, if he's had bad reviews or warnings. Also try to implement a flag system where people can mark those posters who are writing unappropriate messages.
It won't block the guy but you'll work on his credibility.


grtfercho çB^]\..
"Imagination is more important than Knowledge" A. Einstein
-----------------------------------------------

http://www.llajta.com

 

[inlandpac]

There will NEVER be a 100% effective way of blocking someone.

There are just too many ways people can spoof ips, enter through anonymizers, etc.

So, short of using their email address to send a registration confirmation and activation before they can access the site (where they must go to the url specified in your email) and banning ip addresses like you have been doing, there really is not a whole heck of a lot you can do.

Also, keep in mind that a lot of people when browsing online use shared ip addresses, so blocking an ip address can have a negative impact. You just might block a legitimate user from your site that you may not want to block.

ICQ: 54380631

 

[offdarock]

Here is what I plan to do..not sure if it will work or not but it migh be fun to try

Then next time I catch him on my site I will not bann his ip or deactivate his account, I will leave it.

Then I will add some code in the cf page to ignore his post to all other members but when he loggs in he will see his post as usual, hopefully when he sees no one is responding to him, he will get board and leave....

 

[grtfercho]

tricky idea and a good one too.

Depending on your website policies though you may be breaking some agreement.

For example, I would be really pissed off if Tek-Tips starts banning my postings. I'm not sure if that can even be taken to court, I guess it all depends on the governing state or country.

again though, I think it is a very interesting idea to say the least.

grtfercho çB^]\..
"Imagination is more important than Knowledge" A. Einstein
-----------------------------------------------

http://www.llajta.com