Blocking Proxy Scams

[Hostboard]

I came across the article/website below and feel if we can make it easier and safer for our members to come to our sites all the better.

The article and where credit should be given:
http://www.proxyscam.com/

I am not a coder, take absolutly zero credit for this. I posted this in the programming discussion forum but got no replies so no idea if I am implementing it correctly (cosses fingers). I read a reply to a thread on another modification that it was better to call javascript due to it being cached at the browser level thus saving bandwidth which why I did not add it directly to the template.

Unzip file and upload it to your /forums/clientscript/ directory.

OR

In notepad save the following code to vbulletin_proxyscam.js and upload to your /forums/clientscript/ directory.


// Tells the web-browser "If you're in a frame break out and load the page normally"
<script language="JavaScript" type="text/javascript">
var sThisURL = window.location.href;
function doFramesBuster()
{
if ( top.location != self.location )
{
top.location.replace( sThisURL );
}
}
</script>



Next edit your headinclude template, and add the following:

<script defer type="text/javascript" src="clientscript/vbulletin_proxyscam.js?v=$vboptions[simpleversion]">
</script>

[Hostboard]

No idea why but everyone else does it...

Reserved...

[KURTZ]

i'm interested in this ... but need some testers ... :p

[soundbarrierpro]

I read but don't understand what it is?

[Hostboard]

The second page on the site explains what could technically happen.

[Stoebi]

<script defer type="text/javascript" src="clientscript/vbulletin_proxyscam.js?v=$vboptions[simpleversion]"></script>Please explain defer.

[neto614]

So what does this do ?????

hmmm ?????????????????????

[mark370]

yea plz explain wot this actualy does.

[TheInsaneManiac]

No offense, but this just wastes server space. All it does is remove those proxies that have the url frames at the top of the page. It will still load other proxies fine, in which not all of them use frames and since many of the account stealers no longer use frames this script is just stopping some of the good proxies.

For example at the top of the html code there was this JavaScript:
<script language="JavaScript">
var sThisURL = window.location.href;
function doFramesBuster()
{
if ( top.location != self.location )
{
top.location.replace( sThisURL );
}
}
</script>
Which tells the web-browser "If you're in a frame break out and load the page normally". This is a small security measure by EBay to break out of any IFrame where a person can read an unsuspecting persons inputs into the UserID, and Password input boxes, but it didn't break out of our PHP Script.

As you can see ebay breaks out of iframes and not php. The best solution is to stop proxy servers all together. Plus it will stop those pesky members you ban their IP and they come back on those proxy servers. Here is a nice mod that will prevent web proxies:
https://vborg.vbsupport.ru/showthread.php?t=147280

[Hostboard]

Please explain defer.

http://www.websiteoptimization.com/speed/tweak/defer/

[Hostboard]

...many of the account stealers no longer use frames this script is just stopping some of the good proxies.

It does not block anything. All it does is break you out of a frame nothing more. If you are sent to a site within a frame technicaly the proxy then can record what ever you input (i.e. account information). While many don't there are still some that do. All it takes is 1 bad proxy. Why take the chance? If you consider 4k wasting space well ok.

Stopping proxies all together is a completly different scenario. Apples and oranges. Here we are just trying to stop potential account hijacking not block banned users or stop users from spoofing their IP address.