Re: Spammers Using Self Registration

Re: Spammers Using Self Registration

by emmanuel oertle -
Number of replies: 4

Hi,

I also have the same problem for international website using moodle. I want to leave access to everybody but not to spammers.

I see you problem is already an old issue, did you find a solution? I had a look at all answers but didn't really find a solution.

I would need the feature you suggested: filtering and deleted all users not enrolled in any course. please let be know how to do this with bulk user action. As  I have over 2000 accounts to delete, I cannot do it manually.

For my other website, the accounts are linked with Joomdle for other purposes. In this regard some users might not be enrolled in any course but still legitimate users. So, another common feature from the spammers are that they let a website adress on their profile account. Is there a way to select all users that left the website not blank and delete those accounts?

I hope you could find a solution by the time and look forward for your support.

Emmanuel

THQN

Average of ratings: -
In reply to emmanuel oertle

Re: Spammers Using Self Registration

by Ken Task -
Picture of Particularly helpful Moodlers

You probably should have begun a new posting stating your problem rather than 'attaching' to this thread ... reason ... your situation is different ... not the same. ... in that you are using jmoodle.

In the setup of jmoodle, from what I recall, one had to choose which 'login' process/DB to use:  Joomla or Moodle?   So which is yours?

If Joomla is really ruling the roost, the 'spammers' might be coming from Joomla.   Do you have the most recent/secure version of jmoodle?  of Joomla?

In both Joomla and Moodle the Admin interface does allow one to set parameters/filters for what to display related to users.   Might need to compare them to see commonality of accounts that you consider 'spammer'.

So, in Moodle, Browse List of users, set filters ... like EMail address contains hotmail.com.   If the output of that does show those you consider 'spammers', use the Site Admin menu, Users, Bulk User Actions and you should notice the current set of users found by browsing users with filters is still shown.

Look at the bottom of the form ... with selected users ... and the drop down list has 'delete'.

Now be careful doing that as you might be kinda messing up the linkage between jmoodle and Moodle.

'spirit of sharing', Ken


In reply to Ken Task

Re: Spammers Using Self Registration

by emmanuel oertle -

Hi thanks for your answer.

My main problems are with the website that purely operates with Moodle. I still get all those spammers creating accounts every minute.

I could delete them using filters, but it was extremely time consuming and I don't know how to stop the new accoutns to be created. Please advise! I have email registration on. But they apparently follow the link in the email.

I cannot ban hotmail.com, as they use different email domains and as I also have some legitimate users with hotmail and yahoo.

Thanks for some help,

Emmanuel

Attachment Capture.JPG
In reply to emmanuel oertle

Re: Spammers Using Self Registration

by emmanuel oertle -

Is there a way to require a key/password for people to create an account? Then I could just ditribute the password to the right people?


Thanks,

Emmanuel

In reply to emmanuel oertle

Re: Spammers Using Self Registration

by Chris Wharton -

 Hi Emmanuel. Are you using captcha for your registration form? It is designed to stop spammer sign-ups. https://docs.moodle.org/28/en/Email-based_self-registration#Enable_reCAPTCHA_element

That page mentions the spam cleaner report, which may help to fix the current mess.

There is also the settings to delete unconfirmed and incomplete users after a certain number of days. https://docs.moodle.org/28/en/Cleanup#Delete_unconfirmed_users_after