[Plugin: Stop Spammer Registrations Plugin] Locked out of my own blog !

You are a star. Ty.

d

Just my .02 cents worth. I would not recommend using Opera Turbo/Mini to anyone unless they have no choice. Like some mobile users don’t have too many choices when it comes to the browsers they can install on their smart phone. When you use their service everything you do using their browser/service can be saved and easily viewed on their servers. Definitely not a good idea to pass any sensitive information like passwords through it regardless of their claims on security.

I found Opera Turbo to be very slow, but there are people who find it useful, so I had to support it.

Unfortunately, spammers are using the gateway to attack sites.

Keith

I’m all for allowing users to access their site using any popular browser and/or tool. But if your plugin allows spammers to bypass it by just using Opera Turbo and/or Mini, wouldn’t that be considered as a big fail? Maybe I’m misunderstanding how you’ll incorporate a bypass for the Opera tool. Or is this going to be an option that can be administered in the plugin options?

I quote from the Opera site:

No privacy worries

Even while using Opera Turbo, secured connections do not go through Opera’s servers. This means that when you are using your bank or transmitting sensitive data, you are talking directly with the website.

The plugin therefore has access to the original IP address, would be my guess. when doing the login. My recollection is that it whitelisted the correct IP when I hit the options page.

Mickey,

The plugin now handles Opera Turbo correctly. Opera Turbo does report the original IP with a separate header. I now check for the header in order to handle it.

The problem was the exact opposite. I had blacklisted Opera Turbo so that even legitimate users of Opera Turbo were blocked. By fixing the code, I can tell the difference between a spammer using the proxy or someone else.

Keith

Keith that sounds great. I would still say Opera Turbo/Mini is not safe to use just for a normal login. Even other moderators of a security forum where I’m a member agree with me. In fact, I would never trust any service like that for passing any sensitive data regardless of their claims.

So as long as it doesn’t give an absolute whitelisting for Opera Turbo/Mini, that sounds good.