Solved

VB Programs, blocking them from accessing forms

Posted on 2004-03-22
12
212 Views
Last Modified: 2013-11-13
Hey,

I have a chatroom, but I have had someone bot the room with a VB program.  One time there were like 75 bots in the room.  I heard there is a way to block VB programs.  I know nothing about VB, I was told that the person isn't actually going in by the form, but from sending data straight to the server.  

What can I do to prevent these VB programs from doing this?

Thanks
0
Comment
Question by:MothBall
  • 7
  • 5
12 Comments
 
LVL 19

Expert Comment

by:BrianGEFF719
Comment Utility
Firstly, this "chatroom" that you speak of. What type of Chatroom is it? Is it an IRC Server? You need to be way more specific.


-Brian
0
 

Author Comment

by:MothBall
Comment Utility
Sorry,

It's coded in Perl, which is uploaded to our server (well, not OUR server, but paid hosting).

It's a script from hotscripts.com called gtChat

I'm not too concerned about the chatroom, i'm more concerned about the website as well.  


Website is done in PHP, and you can register (post comments, submit downloads etc), and I have a feeling that this VB programmer will look for anything they can do.  

We had a case of this before, but on the forum host by ProBoards.com.  Someone used a VB program to register 1000's of clones, which took ages to delete.

We just need to do something for the website and maybe the chatroom.

Website, to prevent clones being registered
Chatroom, to prevent bots being loaded, or clones being registered

0
 
LVL 19

Expert Comment

by:BrianGEFF719
Comment Utility
You have a few options you can try to log these users to see what there UserAgent is because if they are using the Microsoft Internet Explorer controls I think you might be able to detect that also they may be using the INET control or coding it straight using winsock control. Either way, first step is try to detect a use agent. They you can try using cookies to prevent automated logins. Another option would be to add those "Type the word from the image" things so that automated logins are not possible and every login requires printing the picture...we got a few options either way.


Let me know what you think
0
 

Author Comment

by:MothBall
Comment Utility
For the registering for website, that's not really possible due to the way it's all setup.  It's sort of like an installed portal, but not so much of a portal, ....oh....what about getting an email to activate the acount?  I think there is that feature for the website system.  Will check that out.

As for the chatroom, registered members or guests can enter for that.

So I think the problem now would just be the chatroom.
0
 
LVL 19

Expert Comment

by:BrianGEFF719
Comment Utility
well what you can do is make the Chatroom SSL. Do you have SSL on your website because if you setup SSL and the VB Program uses pure winsock to connect to your site the programmer will have a harder time.
0
 
LVL 19

Expert Comment

by:BrianGEFF719
Comment Utility
You can also use an Image entry to enter the chat room. Have a picture that the users have to type what it says to prevent automated users from joining the chatroom
0
What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

 

Author Comment

by:MothBall
Comment Utility
Sorry for the newbie question, what's SSL?

Some security thing?

How would I do check for that?

0
 
LVL 19

Expert Comment

by:BrianGEFF719
Comment Utility
SSL is Secure Socket Layer. Its essentially 'HTTPS'. It requires the client to encrypt data and decrypt data.


-Brian
0
 
LVL 19

Accepted Solution

by:
BrianGEFF719 earned 80 total points
Comment Utility
I think your best bet would just be to have the user enter the word from the picture.
0
 

Author Comment

by:MothBall
Comment Utility
Is it not easy to set this SSL thing up?
0
 
LVL 19

Expert Comment

by:BrianGEFF719
Comment Utility
Well SSL may not remove your problem it will only encrypt.Now, it was an idea, but when I think about it more, it may not be necassary.

-Brian
0
 

Author Comment

by:MothBall
Comment Utility
i'll go with the image solution, thanks for the help :)
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

I was working on a PowerPoint add-in the other day and a client asked me "can you implement a feature which processes a chart when it's pasted into a slide from another deck?". It got me wondering how to hook into built-in ribbon events in Office.
Since upgrading to Office 2013 or higher installing the Smart Indenter addin will fail. This article will explain how to install it so it will work regardless of the Office version installed.
The goal of the video will be to teach the user the concept of local variables and scope. An example of a locally defined variable will be given as well as an explanation of what scope is in C++. The local variable and concept of scope will be relat…
The viewer will learn how to user default arguments when defining functions. This method of defining functions will be contrasted with the non-default-argument of defining functions.

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now