I run a Drupal 7.10 / CentOS 6.2 website (where users can register after confirming their mail by clicking on a link) and there is a person registering at my site every night and then changing his name to obscene words.
First I've added a line to /etc/sysconfig/iptables to block his area:
-A INPUT -s 188.8.131.52/16 -j DROP
but this has blocked other users from that area (Alma-Ata city).
The pattern of this user is:
- His IP address: strpos($_SERVER['REMOTE_ADDR'], '2.132.') === 0
- His mail (changing every time): preg_match('/email@example.com/i', $mail)
- His name (usually): stripos($name, 'st') !== FALSE
As you see - I have all the components there, I just need to know a good spot to put this code in. Anywhere to make his registration more difficult. An ideal case would be to sent admin a mail for registration verification, but just bailing out of the registration script (which one is it please?) would be okay too.