Registration Validator Plugin

- Block disposable email addresses (internal list and check against undisposable.net).
- Block domains and/or subdomains.
- Block usernames.
- Block IPs or IP ranges.
- Block bots by checking against BotScout database.
- Perform DNS lookup on email domains.
- Perform Spamhaus lookup on IP addresses (SBL, XBL)
- Reject contact submissions containing URLs.
- Reject contact submissions based on Undisposable, BotScout, StopForumSpam.

Works with Community Builder 1.2.
Works with Virtuemart.
Works with CBE.
Works with AjaxRegistration.

If the email address passes the internal check, it is still checked against undisposable.net. Registration is allowed if either undisposable.net is unavailable (which seems to be constantly, at the moment) or the address does not come back as invalid.

1.0.7: Added several domains to internal list. Added Virtuemart support.

1.0.8: Fixed bug whereby changes were lost if you clicked Apply followed by Save when editing domains.

1.0.9: Fixed bug whereby when adding a domain, the bottom one of the list was being lost. Added domains to internal list.

1.1.0
- Added subdomain blocking.
- Added IP blocking.
- Added username blocking.
- Incorporated BotScout validation.
- Changed name to "Registration Validator", as it does much more than simply block disposable email addresses now.
- Fixed bug that prevented plug-in working with certain SEF configured sites.

1.1.1
- Added new domains to internal list.
- Implemented protection for Contact forms. If enabled, all parameters except username are also validated for Contact forms (prevents bot submissions, banned users, etc.).

1.1.2
- Added DNS lookup to validate email address.

1.1.3
- Added support for CBE (thanks to Jan-Hedrik Piatkowski).

1.1.4
- Added redirect for rejected contact form submissions.
- Added extra check for contact form submissions (due to my first receipt of spam via my contact form).

1.1.5
- Added support for AjaxRegistration.

1.1.6
- Added extra contact form check: can now reject any contact form submissions that contain URLs.
- Rewrote the code that checks whether a registration is taking place.

1.1.7
- BUGFIX: AjaxRegistration code wasn't working properly (causing invalid redirects).
- URL checking for contact forms now doesn't require "Extra" contact form checking. The "Extra" contact form checking currently rejects email addresses of the form john@john.com, fred@fred.com (i.e. name before @ is same as name after). I was getting a fair bit of spam formatted this way, hence the block.

1.1.8
- Added additional check against www.stopforumspam.com.

1.1.9
- Modified function used to retrieve StopForumSpam and BotScout results to ensure it passes registration if lookup fails (depending upon the failure, it may have prevented registrations).
- Added IP check against sbl.spamhaus.org and xbl.spamhaus.org.
- Added new disposable domain.

Report

Editor's Note
  • This extension requires registration to download.
byzigzag on November 3, 2009
Having been plagued by persistent spam registrations for the last couple of months I've tried every single captcha plugin and component available, none of which stopped any of the spam sign ups on my site.

I stumbled across this plugin by accident and a bit half heartedly decided to give it a go. I have to say that it's got to be the easiest system to use and there's absolutely nothing to modify unlike most of the captcha plugins. I've finally gone more than 2 days without any spam registrations which is a big relief!
byeffess on October 27, 2009
Easy to install, works great. I tested with a fake email address and it appeared on the user's list. The developer emailed me to click the "Enabled" column twice so it will list all the unenabled (i.e. unactivated) accounts at the top of the list, and that's a good thing to do every now and then.
bynahrafqifahs on October 26, 2009
Before this, i use AlphaRegistration on my production site. There is no problem from bot attack. Unfortunately, i have to uninstall it because another security reason. Then, I use Joomla default registration form. Tomorrow, there was a registration from this email,antiquariat-plus@mail.ru. I search through Google and found there are several report about this spam bot. Then i found this great plugin, install with easy, register with BotScout.com to get API Key, then publish it. Still now, this plugin save my day and work perfectly! No more worries about spam bot anymore! Must have for every Joomla! site and thank you very much Mr David Barrett (cedit) for great plugin for Joomla Commmunity! TQ! :)
This plug-in works easy. Just go to the plug-in manager and enable it. (eventually
Fill in Plug-in Parameters) I Need the BotScout API-Key (because of more than 20 - BotScout - Checks a day)…
Still waiting for the key however…. But that’s not the fault of the perfect plugin…..
I need to have more patient perhaps…

Perfect Plug-in, You definitely need to reject al those fake users (bot’s).
Owner's reply

I had problems obtaining a Botscout key also - apparently various tlds are blocked from Botscout (.biz in my case), so I had to use another email address to register. Contacting the site admin resolved it very quickly though.

byMyCatsHeaven on October 10, 2009
Easy to install. Nothing to do! I wasn't sure because it was so easy so I tested with BotScout. Works like a charm! Thanks ....
byP.M. on August 17, 2009
I like this tool very much! The best on this tool is, that there are a lot of spam mail domains allready installed! Works great!

Thank You!
Keeping spammers at bay is a constant battle. This plugin is a great tool in your spam defense. I tested it against 3 known and 2 lesser known disposable email services. 5/5 emails were blocked.
bydatto510 on August 3, 2009
Thank you very much, I have been plagued with .gmail spammers. This solves all of that nicely.
Thanks for making this possible.
This should also be standard in joomla like noaixcl and jlord restricted access.

Works great!
Finally i can block does nasty domains who only try to hack you.
You can even add domains yourself.
Like people who register every day but never activate their account like mail.ru and gawab.com.

Thanks!