I´ve created a snippet that helps prevent from misuse or abuse.
An abusing user is being warned before completely blocked by .htaccess (e.g. "deny from 127.0.0.1").
You can call this snippet from any place from your site, best placed in a template.
You can control how many times a user is being warned, how many times a site has to be reloaded before reported as site-absue.
You control the warning message, the time in which an attempt to load the site more than once is being reported as absue.
Snippet makes use of the database, a simple table needs to be added to the database.
Instructions on how to use this snippet are included in the package.
A major purpose of this snippet might be preventing attacks via brute force etc...
Any comments on this are appreciated.
Cheers.
$cd /pub
$more beer
I totally agree.
But what if a human user is trying to figure out some flaws of your MODx-implementation?
This snippet would deny (almost) any abuse of $_GET or $_POST for example.
It´s intention is to make life harder for the bad guys looking for some points to attack...
It ain´t a solution for all security issues or attacks against servers (like DOS), that´s for sure.
That´s not my intention and not what that snippet is inteded to be...
$cd /pub
$more beer
-
☆ A M B ☆
- 3,112 Posts
Nice, Katz.
Will try this soon.
Any flush capable?
Rico
Genius is one percent inspiration and ninety-nine percent perspiration.
Thomas A. Edison
MODx is great, but knowing how to use it well makes it perfect!
www.virtudraft.com
Security, security, security! |
Indonesian MODx Forum |
MODx Revo's cheatsheets |
MODx Evo's cheatsheets
Author of
Easy 2 Gallery 1.4.x,
PHPTidy,
spieFeed,
FileDownload R,
Upload To Users CMP,
Inherit Template TV,
LexRating,
ExerPlan,
Lingua,
virtuNewsletter,
Grid Class Key,
SmartTag,
prevNext
Maintainter/contributor of
Babel
Because it's hard to follow all topics on the forum, PING ME ON TWITTER
@_goldsky if you need my help.
I’d love to see this code to see if I could use it as a basis for allowing access based on port knocking, but the link in the first post is 404. Can you repost, @Katzenfutter?
