I have a virtual terrorist attacking

[offdarock]

my website,

I am co-owner of a cf message board and I booted this guy off several months ago for various reasons. He keeps coming back. I have implemented several features to make it more difficult for him but he still persistant.

I was wondering if there is anyway in coldfusion to pick up some unique information from his computer like his computer name for instance and use that info to block him.

any and all ideas welcomed

 

[webmigit]

#cgi.remote_addr# and #cgi.remote_host# will pick up his ip address.. that might be of some use.

What is it that he's doing?

Btw, "virtual terrorist" is a little bit overboard... its a hacker, or a phisher, or flamer or something alone those lines... But that's just my opinion.. the term doesn't matter.

ALFII.com

http://www.alfii.com

---------------------
If this post answered or helped to answer your question, please reply with such so that forum members with a similar question will know to use this advice.

 

[offdarock]

I am already capturing his ip address but he is always changing it. I also implemented one account per email so everytime he registers now he must get a new email address, that slowed him down a bit but not much.

The reason I called him is Virtual terrorist is because of my site. I own a Newfoundland oriented website and I have my forums called the "Virtual Kitchen Party", It also has Virtual email or (vMail) and a few other virtual options.

The term "Kitchen Party" is famous in Newfoundland. When someone has a house party, eventually everyone ends up in the kitchen, hence, the name of the forum....

check it out....

http://www.offdarock.com/virtualKitchen.cfm

Craig Wiseman

 

[TruthInSatire]

you could block his whole subnet. his over all IP will change but he'll have the same subnet. The only problem is anyone using his same ISP will have the same subnet and will also be blocked.


Human beings, who are almost unique in having the ability to learn from the experience of others, are also remarkable for their apparent disinclination to do so.
-Douglas Adams (1952-2001)

 

[webmigit]

Follow the trend of this forum and many others, allow users to red-flag posts... They understand you can't perfectly censor, but feel comfortable that the admin will read the post themselves if they report it.

ALFII.com

http://www.alfii.com

---------------------
If this post answered or helped to answer your question, please reply with such so that forum members with a similar question will know to use this advice.

 

[TruthInSatire]

I've seen some forums that are a pain in the tookus to get access to.

You could also restrict users who have web mail like "hotmail" or "yahoo" or "msn" or "email" or any other webmail. that would make it hard to just make a new email account.
the problem with that is there are TONS of webmail sites out there that you would have to filter. and it makes it hard for people who are real users but have a webmail account.

I take it you require them to click a register link in the email to make sure it is a legit account? I've also seen forums that keep you from posting until you are x days old.

there is no way to keep someone from recreating an account but you can make it hard for them. Just try not to make it so hard for real users.



Human beings, who are almost unique in having the ability to learn from the experience of others, are also remarkable for their apparent disinclination to do so.
-Douglas Adams (1952-2001)

 

[TruthInSatire]

I think your best bet is to just moderate his/her posts. eventualy they'll get tired of them being deleted and give up.

I think there may be a problem blocking an IP or block of ips like i suggested (bad idea anyway). I think you can only block it for 24 hours before taking legal actions. That's the way it is for web site hosts anyway.

Human beings, who are almost unique in having the ability to learn from the experience of others, are also remarkable for their apparent disinclination to do so.
-Douglas Adams (1952-2001)

 

[offdarock]

it it possible to use the <cfregistry> to modify the registry then check for the modification befor allowing access

 

[TruthInSatire]

change what in the registry?
cfregistry provides information about the servers registry, not client.

Human beings, who are almost unique in having the ability to learn from the experience of others, are also remarkable for their apparent disinclination to do so.
-Douglas Adams (1952-2001)

 

[offdarock]

oh....I just seen this tag for the first time today...Oh well....