search

J-Rios / TLG_JoinCaptchaBot

Telegram Bot to verify if users joining a group are human. The Bot sends an image captcha for each new user and kicks any of them who can't solve the captcha in a specified time.
GNU General Public License v3.0
532 stars 218 forks source link

[Request] Don't request solve captcha to invited users #1

Closed Xicnet closed 5 years ago

Xicnet commented 5 years ago

Hi there @J-Rios, we've started using your Bot within a couple Telegram groups and it seems to work fine.

We were wondering if it's possible to skip the captcha for users invited by current group members.

I haven't ever coded a Telegram bot, but I have experience with Python, so if you can provide some directions, I could try to help.

If you are more comfortable speaking spanish, you can send me a priv.

Thanks in advance and congratulations for your work!

J-Rios commented 5 years ago

Hi @Xicnet, is nice to read that you like it.

Make the Bot skip invited users is not complicated, however I won't going to add that feature to actual Bot code, cause doing it create a vulnerability that "no-users" (userbots) can uses to avoid the captcha. If I do what you ask, in groups where the option for let users invite other people is enabled:

1 - "Users" can join the group and without solve the captcha, they can invite others "users" that join without the human-test confirmation.

2 - Any bad-user or userbot that was already in the group before the captcha bot was added to it, can then invite others userbots withut the capctha confirmation.

:)

J-Rios commented 3 years ago

Long time ago, something what changed regarding this, now, when a user is added by an Admin of the group, then it won't be asked for captcha. If it is added by another non-admin member, then it will ask for the captcha.