Secure your site with an IP trap

1 of 1494   Next >   Last >>   The following osCommerce contribution is a free Opensource code originated from official osCommerce website and provided for your reference only, you may download the original contribution file(s) and install it on your own; or you may request a Paid Installation Service from Agents Of Power; Agents Of Power does the "AS IS" installation on your website, we do not guarantee it will work properly on your website. Extra Paid service is available for repairing the problem from the original contribution or from your website. IP Trap Version 4 This release has updated code and a re-coded whitelist set. The includes / secret has been overhauled and a lot of code removed The code did check for an empty useragent which gave some problems with return tokens, i have removed this layer of security. Added a php.ini file (in the instructions) for those that have fopen() disabled. A very big thank you to Coopco and newtest for testing this release, and for their valuable feedback. Forum address is http://forums.oscommerce.com/topic/340290-ip-trap-version-3-released/ Please post your comments there. I suggest that anyone who already uses the IP trap upgrade to this version. Easy install of around 10 minutes, please read the included readme before installing and as always back up. All files are drop in, no osCommerce files are replaced. I came across this simple but effective way of blocking folder listing and thought I'd share it. All credits go to http://www.ibdhost.com/errors/ With this method, when you call the folder in a browser the fake index will load so you won't be able to see the list of files contained in the folder. The page will show the date and time of visit, the visitor's IP number, the folder they tried to view, and browser info. ***WARNING: do not use in folders that already contain an index.php file!*** Example: http://www.arlisa-bijoux.com/images Updated features Cleaned code, Added a Whitelist, with Search engine IP numbers loaded Redesigned the Blocked.php page. Added correct syntax for robots.txt Updated install file. You can see the trap in action by visiting http://www.development-server.net/j/personal you will be blocked! Some minor code change full package included. thanks to EricK for the heads up. Same version, last had a TYPO It DOES work on a windows server! Updated core code in the personal/index.php Updated core code in includes/secret.php added $DOCUMENT_ROOT=$_SERVER['DOCUMENT_ROOT']; over absolute path to give the user less set up to do. now install is only a couple of changes to make. Install takes only 5 minute to do, DOES NOT RUN ON WINDOWS    Posted on: 11/19/2008     See contribution details Request Installation with Paid service