Discuz! X3.1 explanation of five security defense measures

It is understood that the new version of Discuz! X3.1 has made significant breakthroughs in the technical system and functional architecture, and enhanced and ensured Forum security through five functions: cloud verification code, cloud IP database, super waterproof wall, account guard, and security master, the concept of "cloud guard of Forum" is proposed to provide five policies for the forum to defend against spam posts and malicious registration, so that the forum's junk information can be swept away.

It is understood that the new version of Discuz! X3.1 has made significant breakthroughs in the technical system and functional architecture, and enhanced and ensured Forum security through five functions: cloud verification code, cloud IP database, super waterproof wall, account guard, and security master, the "cloud guard of the Forum" concept is proposed to provide five policies for the forum to defend against spam posts and malicious registration. the Forum junk information is swept away, so that the website security webmaster can rest assured.

　　Policy 1: cloud verification code-a powerful weapon against automatic cracking

Webmasters or moderators often encounter a large number of user accounts stolen, which not only creates a poor user experience, but also causes great troubles to webmasters. Discuz! The "cloud verification code" of X3.1 can resolve this conflict for the webmaster. The brand-new cloud verification code is based on a security center with strong technical strength. its powerful anti-cracking algorithms come from a long-term confrontation with cracking behaviors, changing the "single and passive" features of previous verification codes, it becomes more "changeable and active", greatly increasing the difficulty of Cracking verification codes. At the same time, after billions of tests by the security center, the cloud verification code has also proved to be a powerful weapon against automatic cracking of the industry chain.

　　

Figure: The "cloud verification code" issued the first protection during user registration

　　

Figure: When a user logs on, the "cloud verification code" sends out the second protection, making dual protection more secure.

　　Policy 2: cloud IP database-a natural barrier for defense against spam posts

Account theft is only the first step for malicious users to "corrupt behaviors". In general, they will also use the stolen user accounts to fill in and send spam posts, further threatening the forum, to curb such behavior, Discuz! X3.1 use the "cloud IP database" for prevention. Create a library of illegal IP addresses on the cloud. when users appear in a library of illegal IP addresses, they need to enter a verification code when registering, logging on to, and publishing content, which adds a second barrier to the community's junk post defense.

　　Policy 3: Super waterproof wall-more comprehensive mechanism and faster processing speed

Most webmasters may know that Discuz! In earlier versions, there was a waterproof wall, which played a certain role in Forum flood protection, while Discuz! The "super waterproof wall" in X3.1 is the upgrade and reinforcement version of the previous waterproof wall. it is mainly implemented through three Improvements. First, the cloud anti-DDoS mechanism is added to reduce the leakage; the second is to add a user-friendly reminder function to notify webmasters of the number of illegal users at the first time, so that webmasters can quickly handle the issue. The third is to be smarter during high-frequency periods at night to automatically ban malicious users, blocks malicious users from outside the Forum.

　　

Figure: Discuz! Take the official forum as an example. the waterproof wall filters out more than 0.5 million illegal posts

　　Policy 4: account guard-protect the security of your account

Policy 1 has mentioned that "cloud verification code" is a powerful weapon to prevent account theft. However, if the password set by the user's account is too simple, or abnormal logon occurs, attackers can also steal accounts. to further protect User account security, Discuz! X3.1 launched "account guard" to protect users' account security and protect the forum from account theft and harassment through "weak password" detection, abnormal logon detection, and secure logon methods.

　　Policy 5: Security Masters-optimize Forum security settings

The webmaster is a busy man with multiple roles. it is recognized in the circle that some negligence will inevitably occur in the process of website operation. in order to help the webmaster to be as thorough as possible, Discuz! The performance design of X3.1 is also more user-friendly. the "security master" is set in the background, and through detection, the hidden risk settings are listed to facilitate the webmaster to optimize the settings, avoid Forum bumping due to unreasonable background settings.

After a variety of "checks" and various "defense lines", the goal is to ensure the security of the forum, without spam information, so that the webmaster can rest assured that the operation Forum is safe. Discuz this time! X3.1 the efforts made in defending against forum spam and malicious registration are also in response to the needs of many webmasters to solve Forum security problems and are worth looking forward.