Hello,

I am very new joomla and websites in general so please forgive me if my questions have obvious answers that I am overlooking.

I make jewelry on the side and also plating. I am making 2 different types of websites. I am building a shopping cart site at "examplejewelryshoppingcartsite.com" and then "exampleplatingshoppingcartsite.com"

But I am also building just a general corporate site, such as "examplejewelrycorpsite.com" and "exampleplatingcorpsite.com"

So all together I will have 4 different domains.

My questions:

1. Will I need to install this on the server as a whole to protect all 4 sites or will I have to install it into each joomla plug-in page?

2. I honestly tried reading the GPL3.0 link in your license area but I swear to god I fell asleep every time I tried reading it. Basically to be totally covered on all 4 sites my membership fees will be about £60.00 GBP or $100 USD per year correct?

3. I will be using virtue-mart and alpha registration extensions and I see those are compatible, however what if lets say i decide to use a plug in down the road that isn't compatible, can it be altered to ignore the pages with the incompatible plugin/module etc?

4. Regardless of the answer to question 3, can it be made compatible for a fee?

5. I don't have all 4 domain names picked out yet, I've noticed some plug ins you have to put the domains they will be purchased for in the order form, will I need the 4 names before ordering?


Thank you for your time,

Scott Cottrill


P.S. Obviously the websites above are just examples as I don't have my domains picked out yet. I tried editing this post multiple times and making them not show up as clickable links but I'll be damned if I could figure out how lol

1. RV2 needs to be installed into each Joomla site.

2. You can just purchase one subscription. What you are paying for is a subscription to the RV2 pages (i.e. documentation and download) - you are free to use RV2 on as many sites as you like. The licence is permanent, so even when your subscription expires (it is for a year), you can continue to use RV2 on all your sites - you just won't be able to download updates or access documentation without a current subscription.

3. RV2 is written such that support for other modules/components can be added quite easily. If there is one you start using that isn't supported, just let me know and I'll add support (if possible).

4. There is no fee for such updates. You will need a valid subscription to download the current version.

5. No. There is no domain limitation or any kind of activation/licence check in RV2. Once you have it, you are free to do with it as you like (this is the essence of GPL3.0).

Wow that is awesome.

Now I have one more question. I am kind of teaching myself website stuff on my brother-in-law's dedicated server. I installed Registration Validator 1 onto my brother-in-law's website.

When I submit a registration using a known spammer email address the browser turns to a blank white page with:

examplesite.com/index.php?option=com_user

It just stays frozen there.

The log shows the following:

31/05/2011 09:54:47 Registration Validator Start
31/05/2011 09:54:47 Email = This e-mail address is being protected from spambots. You need JavaScript enabled to view it , IP = 10.1.10.11, username = ziggy
31/05/2011 09:54:47 Checking local IP blocklist
31/05/2011 09:54:47 Finished checking local IP blocklist
31/05/2011 09:54:47 Checking Spamhaus blocklist
31/05/2011 09:54:47 Finished checking Spamhaus blocklist
31/05/2011 09:54:47 Checking local username blocklist
31/05/2011 09:54:47 Finished checking local username blocklist
31/05/2011 09:54:47 Checking local email blocklist
31/05/2011 09:54:47 Finished checking local email and Undisposable blocklist
31/05/2011 09:54:47 Checking Botscout blocklist
31/05/2011 09:54:47 Finished checking Botscout blocklist
31/05/2011 09:54:47 Checking StopForumSpam blocklist


From what I can tell from php info his server meets all requirements, and should work. I do know he runs his server pretty securely. He is in Afghanistan at the moment and unable to help me troubleshoot.

Any reasons you can think of why the software would not work?

Thank you for your time,

Scott Cottrill

According to the log, RV never returns from the StopForumSpam check, which is odd. As a test, can you disable this check from the plugin management page and see if that resolves the issue?

I will try that straight away,


Also I was going through the error file or log whatever. And it shows this:


mod_fcgid: stderr: PHP Fatal error: Call to undefined function curl_init() in /var/www/web/plugins/system/cedit_blockdisposable.php on line 377, referer: examplesite.com/index.php?option=com_user&view=register

mod_fcgid: stderr: PHP Fatal error: Class 'JLoader' not found in /var/www/web/libraries/loader.php on line 161, referer: examplesite.com/index.php?option=com_user&view=register

Maybe his settings are too secure or rigid perhaps?

Thank you for your time,

Scott Cottrill

Just turned off Stopforumspam and same thing happens.

log now shows this:


01/06/2011 04:32:05 Registration Validator Start
01/06/2011 04:32:05 Email = This e-mail address is being protected from spambots. You need JavaScript enabled to view it , IP = 10.1.10.11, username = ziggy
01/06/2011 04:32:05 Checking local IP blocklist
01/06/2011 04:32:05 Finished checking local IP blocklist
01/06/2011 04:32:05 Checking Spamhaus blocklist
01/06/2011 04:32:06 Finished checking Spamhaus blocklist
01/06/2011 04:32:06 Checking local username blocklist
01/06/2011 04:32:06 Finished checking local username blocklist
01/06/2011 04:32:06 Checking local email blocklist
01/06/2011 04:32:06 Checking Undisposable blocklist

Ok,

Following the same tactic I turned off checks one after another until it went through.

Once Botscout, stopforumspam, and undisposible.net were all turned off it would not get stuck.

The logs ironically still show all of them being checked?

01/06/2011 04:38:55 Registration Validator Start
01/06/2011 04:38:55 Email = This e-mail address is being protected from spambots. You need JavaScript enabled to view it , IP = 10.1.10.11, username = ziggy
01/06/2011 04:38:55 Checking local IP blocklist
01/06/2011 04:38:55 Finished checking local IP blocklist
01/06/2011 04:38:55 Checking Spamhaus blocklist
01/06/2011 04:38:55 Finished checking Spamhaus blocklist
01/06/2011 04:38:55 Checking local username blocklist
01/06/2011 04:38:55 Finished checking local username blocklist
01/06/2011 04:38:55 Checking local email blocklist
01/06/2011 04:38:55 Finished checking local email and Undisposable blocklist
01/06/2011 04:38:55 Checking Botscout blocklist
01/06/2011 04:38:55 Finished checking Botscout blocklist
01/06/2011 04:38:55 Checking StopForumSpam blocklist
01/06/2011 04:38:55 Finished checking StopForumSpam blocklist
01/06/2011 04:38:55 Registration Validator found no problems
01/06/2011 04:38:55 Registration Validator finished
01/06/2011 04:38:55 ------------------------


It was a known spammer email it allowed to register. Weird eh?


Thank you for your time,

Scott Cottrill

The error is the cause - the checks that it stops on are all HTTP checks (at least, in RV1 they are - in RV2 they aren't). For these, you need cURL installed (it isn't on your server). As the checks are disabled (as they need to be without cURL), this is most likely why the spammer wasn't rejected. The log in RV1 isn't ideal either...

lol well Im gonna be in trouble,

Curl was installed, he said it was and I saw something about curl in the php settings or info whatever you call it. Is it somehow easy to unistall or disable curl?


I did a search for curl through notepad++ and it did find this string:

suhosin.executor.eval.blacklist=include,include_once,require,require_once,
curl_init,fpassthru,file,base64_encode,base64_decode,exec,system,proc_open,
leak,syslog,pfsockopen,shell_exec,ini_restore,symlink,stream_socket_server,
proc_nice,popen,proc_get_status,dl, pcntl_exec, pcntl_fork, pcntl_signal,
pcntl_waitpid, pcntl_wexitstatus, pcntl_wifexited, pcntl_wifsignaled,
pcntl_wifstopped, pcntl_wstopsig, pcntl_wtermsig, socket_accept,
socket_bind, socket_connect, socket_create, socket_create_listen,
socket_create_pair,link,register_shutdown_function,register_tick_function


although he did that not me lol

Well cool, I will proceed with purchase immediately, and when he gets back from Afghanistan he can repair whatever I screwed up lol


Thanks for the top notch support Purple Pomegranite, awesome service.

Scott Cottrill

Ok,

I just purchased, god it makes me sad everytime I buy something from the UK lol Our dollar is quite pathetic. I bet if you throw a US dollar at a stripper in the UK she would be offended just as if you through quarters at a stripper here lol. Anyway, back on point, I got all the emails and have now downloaded RV 2.

Since it is not my server I don't want to fix whatever went wrong with Curl.

My question now, is if I uninstall RV1 and install RV2 but set it to ONLY use internal blocklists etc, then will it work without curl?


Thanks as always,

Scott Cottrill

To be honest, I haven't tried... RV2 is error-trapped such that it should fail gracefully... However, due to the loss of functionality, running it on a server without cURL is not recommended at all.

Having said this, if you look at the recommended settings, I don't advise using any of the HTTP lookup sites due to the speed overhead. RV2 supports Project Honeypot, and this database is DNS based and is very comprehensive (it has most of the blocks that the web-based sites do) - so try with the recommended settings.

Sounds awesome,

I'll start reading up on all I can on your site. thanks again for the amazing response times!


Scott Cottrill

I myself don't blame you , our old mighty dollar don't mean Jack to another country