Announcement

Collapse
No announcement yet.

Block Gmail Alias Tricks (Dot & Plus) Mod for vBulletin 5 and 6

Collapse
This is a sticky topic.
X
X
Collapse
First Prev Next Last
 
  • Filter
  • Time
  • Show
Clear All
new posts

    Paid Mod Block Gmail Alias Tricks (Dot & Plus) Mod for vBulletin 5 and 6

    If you're running a vBulletin 5 or vBulletin 6 forum and struggling with users creating multiple accounts using Gmail alias tricks, this plugin is for you. The Block Gmail Alias Tricks Mod detects and blocks registration attempts that use Gmail’s dot (.) and plus (+) email alias features, which are commonly exploited by spammers and abusers to bypass account limits or forum rules. With customizable options and moderation flexibility, this mod helps you maintain the integrity of your user base and reduce spam registrations.

    Key Features:
    • Blocks Gmail addresses using excessive dots
    • Blocks Gmail addresses containing the plus (+) symbol
    • Admin options to:
      • Set a dot threshold (e.g., block if 2+ dots)
      • Enable or disable plus filtering
      • Choose to block or moderate flagged users
      • Log blocked users in a CSV file with log rotation based on file size (New in v1.1)​
      • Email blocked users (New in v1.2)
    Click image for larger version  Name:	image.png Views:	546 Size:	391.9 KB ID:	33059
    ​​Why Use It?
    Gmail aliases like [email protected], [email protected], or [email protected] all deliver to the same inbox. This plugin ensures your forum blocks or moderates users that abuse these Gmail features to create duplicate accounts or spam.

    The mod also saves blocked users to a CSV file with log rotation to allow forum admins to monitor and view the failed registration attempts using spreadsheet tools and do appropriate actions like blocking their IP addresses and/or their original and sanitized (without the dots and plus symbols) Gmail accounts.

    Compatibility:
    • Compatible with vB5 and vB6 (Self-hosted only)
    • Not compatible with vBCloud.

    Note:
    This mod does not block existing Gmail users before this mod was installed. To find those existing users, you can use this SQL query: (Do not forget to add table prefix to the user table and adjust the number of dots)
    Code:
    SELECT
        userid,
        username,
        email,
        ipaddress,
        FROM_UNIXTIME(joindate, '%Y-%m-%d %H:%i') AS joindate,
        FROM_UNIXTIME(lastvisit, '%Y-%m-%d %H:%i') AS lastvisit,
        FROM_UNIXTIME(lastactivity, '%Y-%m-%d %H:%i') AS lastactivity,
        CASE
            WHEN lastpost IS NULL OR lastpost = 0
            THEN ''
            ELSE FROM_UNIXTIME(lastpost, '%Y-%m-%d %H:%i')
        END AS lastpost
    FROM user
    WHERE email LIKE '%@gmail.com'
      AND (
           -- plus alias
           email REGEXP '^[^@]+\\+[^@]+@gmail\\.com$'
           OR
           -- at least 2 dots in local part (change {2,} to {3,} etc. if needed)
           email REGEXP '^[^@]*([.][^@]*){2,}@gmail\\.com$'
          )
    ORDER BY lastvisit DESC;
    Once you have the list, you can do whatever you want to do with those users. For example, you could ban or moderate them in AdminCP.


    Version History:
    v1.2
    • Added options to email blocked users with the specified email address or the existing Webmaster email address.
    • Improved log rotation logic.​
    v1.1
    • Added options to log blocked users to a CSV file and to create log rotation based on file size.
    v1.0
    • Initial version.​

    Demo:
    This mod is installed on this site.
    ​​
    Price:
    $40 (Branding-free)​
    Buy Now Add to Cart View Cart

    Need help or not comfortable installing this mod? Purchase the installation service below:

    Product Installation Add-On: $20
    Purchase this product add-on to get professional installation of this mod from us.

    Add to Cart View Cart


    Don't have a PayPal account yet or want to use a new account to purchase this mod? Sign up with PayPal now and get $5 reward!

    Want to pay using Credit/Debit Card? Contact us and we will send you an invoice where you can use your own card.

    Last edited by glennrocksvb; 09-29-2025, 09:38 PM. Reason: Released v1.2
    Buy me a coffeePayPal QR Code
    My Amazon Affiliate Link
    Fast vBulletin VPS Host:
    This site is hosted by IONOS

    #2
    Purchased and installed. Thank you very much for this MOD.
    The Linux Community has given me much. I do what I can to return the favor!

    Comment


      #3
      If Block Email Strategy is set to Block User from Registration, can the registration User Name and Email address be logged?
      The Linux Community has given me much. I do what I can to return the favor!

      Comment


        #4
        First, thanku you for your purchase.

        Where do you want it logged? If you want a record for this account, then I recommend choosing the other option, Allow Registration but Moderate User. From there you can do whatever you want with this account like banning them or moving them to a custom usergroup that has no permissions where they can't do anything.
        Buy me a coffeePayPal QR Code
        My Amazon Affiliate Link
        Fast vBulletin VPS Host:
        This site is hosted by IONOS

        Comment


          #5
          Originally posted by glennrocksvb View Post
          Where do you want it logged?
          To a specified log file, defined in Error Handling & Logging.

          As we are running vB 5.7.5; now EOL; any changes made to Error Handling & Logging won't get overwritten.
          The Linux Community has given me much. I do what I can to return the favor!

          Comment


            #6
            You don't need to modify existing PHP files to enable logging via the PHP Error Log option under Error Handling & Logging. You can simply call the vBulletin logging function directly from your plugin.

            However, keep in mind that if the function is triggered before the user is authenticated (i.e., while they're still a guest attempting to register), the username will be logged as "unknown". Additionally, mixing blocked user logs with general PHP errors and warnings can make it difficult to monitor and analyze specific incidents for blocked users.

            For better organization and easier monitoring, I recommend logging blocked user events to a dedicated log file. This keeps the data clean and makes it much easier to track these specific cases.
            Buy me a coffeePayPal QR Code
            My Amazon Affiliate Link
            Fast vBulletin VPS Host:
            This site is hosted by IONOS

            Comment


              #7
              Snowhog, just checking in — are you still interested in having the logging feature enabled?

              I’ve already implemented a logging system that writes to a CSV file on the server. This format is ideal for reviewing data, as it opens cleanly in Excel, Google Sheets, and other spreadsheet tools, making it easy to read, filter, and analyze.

              Let me know if you'd like me to release it.
              Buy me a coffeePayPal QR Code
              My Amazon Affiliate Link
              Fast vBulletin VPS Host:
              This site is hosted by IONOS

              Comment


              • glennrocksvb
                commented
                Editing a comment
                It logs the date, email, username, IP Address, and user agent (browser and device information)

              #8
              I have released v1.1 to add support for logging to a CSV file.

              Customers should receive an email confirmation containing the download link.

              Buy me a coffeePayPal QR Code
              My Amazon Affiliate Link
              Fast vBulletin VPS Host:
              This site is hosted by IONOS

              Comment


              • Snowhog
                commented
                Editing a comment
                Thank you!

              #9
              Saving blocked users to a CSV file is very useful. The mod is installed here and I got a user attempted to register about 5 times with different variations of dots in the email using different IPs and browsers. So I banned their IP addresses and their original and sanitized Gmail address without the dots.
              Buy me a coffeePayPal QR Code
              My Amazon Affiliate Link
              Fast vBulletin VPS Host:
              This site is hosted by IONOS

              Comment


                #10
                Important reminder: Do not place the CSV file in the Apache log directory (e.g. /var/log/apache2). Place it in a dedicated storage path, like /var/www/data or any directory outside the web root. Please read this thread for more details.

                MOD Request When we were on vBulletin 4.2.5, I had a custom MOD created for me that prevented the use of emails that contained 'too many periods' from being used when trying to create a new account. Real world example (got this one this morning): h.i.nde.rk.r.u.ca.ga.wi.lehe @ gmail.com (white space added to prevent this
                Buy me a coffeePayPal QR Code
                My Amazon Affiliate Link
                Fast vBulletin VPS Host:
                This site is hosted by IONOS

                Comment


                  #11
                  I updated the first post to add an SQL query to find existing users that have dots or plus symbols before this mod was installed.
                  Buy me a coffeePayPal QR Code
                  My Amazon Affiliate Link
                  Fast vBulletin VPS Host:
                  This site is hosted by IONOS

                  Comment


                    #12
                    I'm happy to release v1.2 to add options to email blocked users with the specified email address or the existing Webmaster email address. and to improve log rotation logic where the .lock file will only be created during log rotation.

                    ​Customers will receive an email confirmation containing the download link to the new version.​

                    Enjoy!
                    Buy me a coffeePayPal QR Code
                    My Amazon Affiliate Link
                    Fast vBulletin VPS Host:
                    This site is hosted by IONOS

                    Comment


                      #13
                      Here's a sample email sent by the mod.
                      Click image for larger version  Name:	image.png Views:	0 Size:	71.4 KB ID:	33192

                      The IP address is a clickable link that redirects to the ipinfo.io website that shows information about the IP address such as the location of the user. The site will also indicate if the IP has been flagged as abusive using the abuseipdb.com service. This information helps you decide if you want to ban the IP and/or email of the user to prevent them from registering again with the same information.​
                      Buy me a coffeePayPal QR Code
                      My Amazon Affiliate Link
                      Fast vBulletin VPS Host:
                      This site is hosted by IONOS

                      Comment


                        #14
                        Got our first blocked gmail email address attempted registration that used the + symbol and no dots. This raised a concern.

                        In the MOD you allow specifying how many dots used in an email address before the MOD is triggered, but not for the + symbol:

                        Click image for larger version  Name:	Screen Shot 2025-10-11 at 3.10.55 PM.png Views:	0 Size:	179.4 KB ID:	33274
                        It is not uncommon for a legitimate user to have/use a + symbol in their gmail address, typlically just one (e.g. john+smith @ gmail.com). The + symbol needs to be number specifiable just as Dots are.
                        The Linux Community has given me much. I do what I can to return the favor!

                        Comment


                          #15
                          Originally posted by Snowhog View Post
                          It is not uncommon for a legitimate user to have/use a + symbol in their gmail address, typlically just one (e.g. john+smith @ gmail.com).
                          No. Unlike dots, you can't register a Gmail address with a + symbol as shown in the Gmail registration form below.

                          Click image for larger version  Name:	image.png Views:	0 Size:	27.1 KB ID:	33276

                          So if a Gmail address has + symbol in it, it's 100% an alias and not their original email address. So it's doesn't matter how many + symbols a Gmail address has. For example, johndoe+forum @ gmail.com or johndoe+forum+vb @ gmail.com is the same as its original johndoe @ gmail.com. You can only add the +anything at the end of your original username. In your example john+smith @ gmail.com, the original email is john @ gmail.com. ​
                          Buy me a coffeePayPal QR Code
                          My Amazon Affiliate Link
                          Fast vBulletin VPS Host:
                          This site is hosted by IONOS

                          Comment

                          Latest Posts

                          Collapse

                          Working...
                          X
                          Searching...Please wait.
                          An unexpected error was returned: 'Your submission could not be processed because you have logged in since the previous page was loaded.

                          Please push the back button and reload the previous window.'
                          An unexpected error was returned: 'Your submission could not be processed because the token has expired.

                          Please push the back button and reload the previous window.'
                          An internal error has occurred and the module cannot be displayed.
                          There are no results that meet this criteria.
                          Search Result for "|||"