vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 3.5 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=113)
-   -   Spider Watcher (https://vborg.vbsupport.ru/showthread.php?t=104582)

Brandon Sheley 01-23-2006 01:09 AM

good luck :)

Detomah 01-23-2006 01:59 AM

Quote:

Originally Posted by nitro
Nope you both failed to read.

Erm, sorry, but I didn't fail to read anything, he actually mentions the bot trap on the same page and even provides a link to said bot trap:

http://www.kloth.net/internet/bottrap.php

That was the main reason I posted the link to the page and it was the first thing I actually created for myself after reading the article.

Quote:

Hence he has a bot trap to deal with them instead. ;)
I know... :p

I thought it made sense to provide a link to something that would give a little better understanding of some of the spiders, for those installing this script that's all, I was only trying to be helpful, I just got myself a little confused with that reply above, after all i'm normally posting on here at 4-5 am after being up 18-20hrs. :(

nitro 01-23-2006 07:10 AM

Quote:

Originally Posted by Detomah
Erm, sorry, but I didn't fail to read anything, he actually mentions the bot trap on the same page and even provides a link to said bot trap:

http://www.kloth.net/internet/bottrap.php

That was the main reason I posted the link to the page and it was the first thing I actually created for myself after reading the article.

Sorry didnt mean it to sound in a bad way at all. ;)

Quote:

Originally Posted by Detomah
I know... :p

I thought it made sense to provide a link to something that would give a little better understanding of some of the spiders, for those installing this script that's all, I was only trying to be helpful, I just got myself a little confused with that reply above, after all i'm normally posting on here at 4-5 am after being up 18-20hrs. :(

I would guess most who post here do that more than once :D

The link was very useful and thanks for posting it. :)
I can verify the the bot-trap dir and blacklist.dat file works quite nicely. I have yet to implement the full function of the blacklist.dat for blocking to vb tho. Im not sure of the best way to do this. perhaps a simple include hook in global_start would work ?

Megareus Rex 01-23-2006 12:00 PM

Great hack, but I'm having the problem where it doesn't display my board's default timezone offset.

Is there a way to set it so it uses a user's offset preference?

mikelbeck 01-23-2006 06:35 PM

I working on version 1.0.0 Beta 4 right now. It should fix the time/date issue, a possible SQL injection exploit, and the high number of queries. I'm letting it run on one of my sites now to gather up a bunch of spider data so I can see if the number of queries drops. If it does, I'll package it up and will post an update tonight or tomorrow morning.

In the mean time, somebody notified me via e-mail that the plug-in can be exploited by a malicious user... So, for the time being, if you'd like to diable the "Spider Watcher" plug-in (under the global_start hook location) you can do that and you'll be safe. Or you can either wait for the update or modify the code yourself.

Here's the updated code for the plug-in:

Code:

if (!$vbulletin->userinfo['userid'])
{
    $ip_address_parts = explode(".", $_SERVER['REMOTE_ADDR']);
    $ip_address = $ip_address_parts[0] * pow(256,3) + $ip_address_parts[1] * pow(256,2) + $ip_address_parts[2] * pow(256,1) + $ip_address_parts[3] * pow(256,0);

$write_bot = $db->query_first("INSERT INTO " . TABLE_PREFIX . "bots (bot, ip_address, page, timestamp) VALUES ('" . $vbulletin->db->escape_string(trim($_SERVER['HTTP_USER_AGENT'])) . "','" . $ip_address . "','" . THIS_SCRIPT . "', NOW())");
}


the Sandman 01-23-2006 11:19 PM

I looked at your online demo and I didn't see any mention of activity in the archive. Does this script not track spiders there?

mikelbeck 01-24-2006 12:37 PM

Version 1.0.0 Beta 4 is now available.

- Corrected potentional SQL injection issue in plug-in
- Reduced the number of SQL queries required to display statistics
- Corrected date/time display issue

silurius 01-24-2006 03:39 PM

Upgraded w/o issues.

mikelbeck 01-24-2006 03:42 PM

Quote:

Originally Posted by silurius
Upgraded w/o issues.

Are the times & dates being displayed properly for you?
Have the number of queries decreased for you?

Guest210212002 01-24-2006 05:26 PM

[high]* Guest210212002 still can't install this.
[/high]

I'm this guy.


All times are GMT. The time now is 04:56 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01362 seconds
  • Memory Usage 1,745KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)bbcode_code_printable
  • (5)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (2)pagenav_pagelinkrel
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete