I think Im getting some spammers adding user accounts to my site. I've been checking the users section of my site daily and I'll see these strange email addresses. So I check on the reports and find that they are spammers. Has anyone encountered this problem? Im currently researching it to try and stop it.
The Spambot module is a great solution for protecting the registration form:
Spambot protects the user registration form from spammers and spambots by verifying registration attempts against the Stop Forum Spam (www.stopforumspam.com) online database. It also adds some useful features to help deal with spam accounts.
I'd definitely recommend it
Yeah, this happens a lot on public sites. I suggest looking into three solutions:
Mollom is a good CAPTCHA based form protector, but it is somewhat unique in that it doesn't always challenge users with the CAPTCHA. It uses some logic to detect the spamminess, and then presents the CAPTCHA on an as-needed basis. This may or may not work well on the user registration form (I am not sure if I have tried it here). It works very well on comment and contact forms.
reCAPTCHA is a module for integrating with the service we all have been used to the last few years.
Honeypot adds a hidden field to a form, and then double checks that the field is empty/unchanged upon submission. Typically, spambots autofill these fields. The end result is that the form protection is transparent to end-users, but does a good job of keeping out the bots. I have had good luck with this approach on user registration forms.
- Turn on Captcha, it will prevent bots from registering on your site.
- Enable Email verification, this will prevent users to enter valid email ids.
- Use contrib modules like spam bot, login tobagan which will automatically delete users who have not verified their accounts within X no of days.
This will save you trouble of verifying accounts manually, once its automated.
Check out the discussion on G.D.O., http://groups.drupal.org/node/77093.