Firewall

[treicadani]

Hello,

I am using this php firewall with my website and is very effective, identifies the bots and won't let them access the website, i want to share it with you.
There is no configuration changes needed unless you really need to.

Default configs are :

Code:

Hidden content for guests

Installation :

add the php-firewall folder to your root directory, then at the very begin of the header.php between <?php ?> add the following code :

Code:

Hidden content for guests

You can disable it by modifying this line and set it to false :

Code:

Hidden content for guests

If you are going to use it, share your experience here if is effective for you.

[Galaxian]

This looks interesting, how exactly does it check if it's a bot or not? What are the chances of a real user being blocked without using a bot?

[treicadani]

The chances to block a user is 0% as it uses defined names to block as array, you can add as many as you want if any of the well known bot ain't in that list.

The function looks like :

Code:

Hidden content for guests

Regards

[Galaxian]

What exactly do those bots do that you would like to block them? I thought that this was some kind of a block for users that are botting points

[treicadani]

auto register in your site then spam you with clicks, makes coins, widthdraw etc....etc....etc....depends on what the "user" tells it to do. The VPN users, registering in your site as many accounts as they want, you can block those by adding the right dns of the networks to block.

There are many ways to prevent things to happen.

[sultime]

Hidden content for guests

and it works

[treicadani]

Yea sorry, it was a BBCode for the color, but it seemd to display the code, edited the main post.

Dani

[giadone]

Thanks a lot!

Hidden content for guests

[gareth]

Thanks for this handy script treicadani I think i have it installed ok but not sure if my header code is right

PHP Code:

Hidden content for guests 


Thanks for your help no idea on how we test it lol

[treicadani]

You can run a few cURL commands with empty headers to check if works or returns error. Activating get post protection, will stop some services from harvesting your website urls such as css / js.

You may see first what can it do for you and check against that configuration.