Solved

VB Programs, blocking them from accessing forms

Posted on 2004-03-22
12
214 Views
Last Modified: 2013-11-13
Hey,

I have a chatroom, but I have had someone bot the room with a VB program.  One time there were like 75 bots in the room.  I heard there is a way to block VB programs.  I know nothing about VB, I was told that the person isn't actually going in by the form, but from sending data straight to the server.  

What can I do to prevent these VB programs from doing this?

Thanks
0
Comment
Question by:MothBall
  • 7
  • 5
12 Comments
 
LVL 19

Expert Comment

by:BrianGEFF719
ID: 10654663
Firstly, this "chatroom" that you speak of. What type of Chatroom is it? Is it an IRC Server? You need to be way more specific.


-Brian
0
 

Author Comment

by:MothBall
ID: 10654706
Sorry,

It's coded in Perl, which is uploaded to our server (well, not OUR server, but paid hosting).

It's a script from hotscripts.com called gtChat

I'm not too concerned about the chatroom, i'm more concerned about the website as well.  


Website is done in PHP, and you can register (post comments, submit downloads etc), and I have a feeling that this VB programmer will look for anything they can do.  

We had a case of this before, but on the forum host by ProBoards.com.  Someone used a VB program to register 1000's of clones, which took ages to delete.

We just need to do something for the website and maybe the chatroom.

Website, to prevent clones being registered
Chatroom, to prevent bots being loaded, or clones being registered

0
 
LVL 19

Expert Comment

by:BrianGEFF719
ID: 10654730
You have a few options you can try to log these users to see what there UserAgent is because if they are using the Microsoft Internet Explorer controls I think you might be able to detect that also they may be using the INET control or coding it straight using winsock control. Either way, first step is try to detect a use agent. They you can try using cookies to prevent automated logins. Another option would be to add those "Type the word from the image" things so that automated logins are not possible and every login requires printing the picture...we got a few options either way.


Let me know what you think
0
 

Author Comment

by:MothBall
ID: 10654755
For the registering for website, that's not really possible due to the way it's all setup.  It's sort of like an installed portal, but not so much of a portal, ....oh....what about getting an email to activate the acount?  I think there is that feature for the website system.  Will check that out.

As for the chatroom, registered members or guests can enter for that.

So I think the problem now would just be the chatroom.
0
 
LVL 19

Expert Comment

by:BrianGEFF719
ID: 10654761
well what you can do is make the Chatroom SSL. Do you have SSL on your website because if you setup SSL and the VB Program uses pure winsock to connect to your site the programmer will have a harder time.
0
 
LVL 19

Expert Comment

by:BrianGEFF719
ID: 10654765
You can also use an Image entry to enter the chat room. Have a picture that the users have to type what it says to prevent automated users from joining the chatroom
0
Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

 

Author Comment

by:MothBall
ID: 10654781
Sorry for the newbie question, what's SSL?

Some security thing?

How would I do check for that?

0
 
LVL 19

Expert Comment

by:BrianGEFF719
ID: 10654787
SSL is Secure Socket Layer. Its essentially 'HTTPS'. It requires the client to encrypt data and decrypt data.


-Brian
0
 
LVL 19

Accepted Solution

by:
BrianGEFF719 earned 80 total points
ID: 10654796
I think your best bet would just be to have the user enter the word from the picture.
0
 

Author Comment

by:MothBall
ID: 10654805
Is it not easy to set this SSL thing up?
0
 
LVL 19

Expert Comment

by:BrianGEFF719
ID: 10654892
Well SSL may not remove your problem it will only encrypt.Now, it was an idea, but when I think about it more, it may not be necassary.

-Brian
0
 

Author Comment

by:MothBall
ID: 10656157
i'll go with the image solution, thanks for the help :)
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Background What I'm presenting in this article is the result of 2 conditions in my work area: We have a SQL Server production environment but no development or test environment; andWe have an MS Access front end using tables in SQL Server but we a…
The purpose of this article is to demonstrate how we can use conditional statements using Python.
This tutorial explains how to use the VisualVM tool for the Java platform application. This video goes into detail on the Threads, Sampler, and Profiler tabs.
The viewer will be introduced to the technique of using vectors in C++. The video will cover how to define a vector, store values in the vector and retrieve data from the values stored in the vector.

912 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now