Osclass forums

Support forums => General help => 3.7.x => Topic started by: Aficionado on June 15, 2017, 05:44:48 pm

Title: Deactivated account and banned IP, still can post ads
Post by: Aficionado on June 15, 2017, 05:44:48 pm
This morning i Deactivated a spam account from Egypt and also banned his IP via Osclass Ban users.

Still, this user can post ads until this very moment. From the same IP.




Title: Re: Deactivated account and banned IP, still can post ads
Post by: _CONEJO on June 15, 2017, 06:13:43 pm
Did you deactivated or disabled the account?
Title: Re: Deactivated account and banned IP, still can post ads
Post by: Aficionado on June 15, 2017, 06:14:49 pm
Did you deactivated or disabled the account?

Deactivated. AND banned the IP.
Title: Re: Deactivated account and banned IP, still can post ads
Post by: _CONEJO on June 15, 2017, 06:18:58 pm
Users could re-activate their accounts. When the login, a message will appear "your account needs to be activated.... send email" . A disabled account could only be enabled by the admin (or a plugin).

The ban on the IP should have worked, I just tested it and it stops me, if you are behind some proxy... it may change the IP... but then it should show a different one. We should definitely investigate this issue.
Title: Re: Deactivated account and banned IP, still can post ads
Post by: Aficionado on June 15, 2017, 06:22:17 pm
Users could re-activate their accounts. When the login, a message will appear "your account needs to be activated.... send email" . A disabled account could only be enabled by the admin (or a plugin).

The ban on the IP should have worked, I just tested it and it stops me, if you are behind some proxy... it may change the IP... but then it should show a different one. We should definitely investigate this issue.

BUT the account shows as inactived in my user admin (the RED Activate shows).

Also about IP blocks, you promised last time

https://forums.osclass.org/3-6-x/ip-ban-rules-34380/

but never did.

 :'(
Title: Re: Deactivated account and banned IP, still can post ads
Post by: Aficionado on June 15, 2017, 06:38:05 pm
Doing some more tests myself, trying to replicate this. I will update here with my findings.

Title: Re: Deactivated account and banned IP, still can post ads
Post by: Aficionado on June 15, 2017, 06:45:38 pm
Users could re-activate their accounts. When the login, a message will appear "your account needs to be activated.... send email" .


Somehow i don't see what you say. A deactivated user, just sees this:

"The user has not been validated yet"

No option as you describe above.
Title: Re: Deactivated account and banned IP, still can post ads
Post by: Aficionado on June 15, 2017, 06:48:58 pm
Ok, what i found is that is the user is LOGGED IN and posts ads, if you DEactivate him ... it doesn't matter until he logs off.

Apparently no check is done ?
Title: Re: Deactivated account and banned IP, still can post ads
Post by: _CONEJO on June 15, 2017, 06:57:55 pm
The ban on the IP should have worked, it's checked on publish.

I opened this issue regarding the deactivated/disabled users  https://github.com/osclass/Osclass/issues/2205
Title: Re: Deactivated account and banned IP, still can post ads
Post by: Aficionado on June 15, 2017, 07:13:26 pm
The ban on the IP should have worked, it's checked on publish.

I opened this issue regarding the deactivated/disabled users  https://github.com/osclass/Osclass/issues/2205

The IP ban ... i suspect that something is not right when wildcards are used. In my case when an IP is a problem, i ban the whole last part (ex: 154.118.59.*). Maybe that * creates problems.