vb.org Archive - Integration with vBulletin - Zoints Thread Tags

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vBulletin 3.6 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=194)

- - Integration with vBulletin - Zoints Thread Tags - GREAT for SEO (https://vborg.vbsupport.ru/showthread.php?t=127244)

Quote:

Originally Posted by DChapman (Post 1120307)

What version of php and what version of vBulletin are you running?

vb 3.6.3 with PHP 5.0.5

I've got a new bug/weirdness going on:
http://www.bowlie.com/forum/tags/superlong/

That page returns a 403 not authorised.

Yet if you click Tags in the top menu, search for 'super'... you'll see that 'superlong' is returned in the results, but clicking on it triggers the 403.

Why would this be? Why would a tag return a 403?

The thread tagged with that is part of the auto-generated tags and relates to this:
http://www.bowlie.com/forum/music-ro...soul-mp3s.html

The record in the database include the tag 'superlong' and is for that threadid.

Can't think why the 403 gets generated.

here is an another bug. i dont know why this happens but this is a google sitemap problem . here are the sitemap "not found" results of my site

Quote:

the problem is the
/tags/tagname/blabla.php

it should be like xxx.com/blabla.php

if anyone has googlesitemap , just check your sitemap account and look at to your not found results.

Thank you for the report abramelin, we'll fix that in the next build.

Quote:

Originally Posted by buro9 (Post 1120776)

This is NOT a bug.

It's because of the word 'perl' being in the underlying querystring. I have a lot of server defenses and this one I put in place ages ago to defend against the PHP vunerability that was bouncing around two winters ago.

Anyhow, amusing PM from and to phlogiston on the matter, who I have to thank for finding it and reminding me of it:

Quote:

Originally Posted by buro9

Quote:

Originally Posted by phlogiston

I had a muck around trying to narrow down the 403 and I'm pretty certain it's from "perl" in the tagname (sniperlong 403'd as did a couple others) - do you have a forum named that which vbseo is trying to redirect to or a server setup which could use it as a special directory name or something? :S (servers are beyond my knowledge)

btw - I totally apologise if I may have killed your server by attempting going to http://www.bowlie.com/forum/tags/perl/
I was trying out a few tags and everything was fine until then. Afterwards server death :(

Ermm, sorry. Obv didn't want to post this in the public thread and having everyone else try incase it is the problem...

Ryan.

Heh, you must've been the one that just triggered my server defenses then:

Quote:

[Mon Nov 20 16:58:00 2006] [error] [client xx.xxx.xxx.xx] mod_security: Access denied with code 403. Pattern match "perl" at QUERY_STRING. [hostname "www.bowlie.com"] [uri "/forum/tags/index.php?tag =superlong"]
[Mon Nov 20 16:59:28 2006] [error] [client xx.xxx.xxx.xx] mod_security: Access denied with code 403. Pattern match "perl" at QUERY_STRING. [hostname "www.bowlie.com"] [uri "/forum/tags/index.php?tag=soperlongr"]
[Mon Nov 20 16:59:35 2006] [error] [client xx.xxx.xxx.xx] mod_security: Access denied with code 403. Pattern match "perl" at QUERY_STRING. [hostname "www.bowlie.com"] [uri "/forum/tags/index.php?tag=soperlong"]
[Mon Nov 20 17:00:15 2006] [error] [client xx.xxx.xxx.xx] mod_security: Access denied with code 403. Pattern match "perl" at QUERY_STRING. [hostname "www.bowlie.com"] [uri "/forum/tags/index.php?tag=sniperlong"]
[Mon Nov 20 17:00:43 2006] [error] [client xx.xxx.xxx.xx] mod_security: Access denied with code 403. Pattern match "perl" at QUERY_STRING. [hostname "www.bowlie.com"] [uri "/forum/tags/index.php?tag=perlong"]

That was indeed the solution, and thanks so much for hitting it several times :)

I'll update the post to stop any panic :)

Oh, and the server is fine... it just added you to the iptables and blocked you. In 15 minutes the block will be lifted. It's a set of defenses to stop any DoS or bot attack. I'd just totally forgotten about it :)

Thanks again :D

So, that was NOT a bug, it's my server security doing it's job :)

And if anyone is curious, it's mod_security in addition to iptables that does that :)

Thanks for the update Buro9. That one had me scratching my head. ;)

I had a horrible sinking feeling when the website stopped responding to me, glad it was just my IP blocked for a bit and not the whole interweb! :)

Quote:

Originally Posted by DChapman (Post 1121608)

Thanks for the update Buro9. That one had me scratching my head. ;)

No problem :) We have phlogiston to thank.

Of course, now I'm fearing a trickle of PMs over the next few weeks or when the next PHP worm comes around, when people start saying "I saw you've got mod_security, can you tell me how to install it.".

If anyone is interested, this is the URL:
http://www.modsecurity.org/

If I ever get arsed I'll write a security post on how to harden your server.

I'll quit with the thread hijack now ;)

Here thought I would share my stop word list, it's a bit long but it's very effective for the ones that need to fill that in:

Quote:

a
ii
about
above
according
across
39
actually
ad
adj
ae
af
after
afterwards
ag
again
against
ai
al
all
almost
alone
along
already
also
although
always
am
among
amongst
an
and
another
any
anyhow
anyone
anything
anywhere
ao
aq
ar
are
aren
aren't
around
arpa
as
at
au
aw
az
b
ba
bb
bd
be
became
because
become
becomes
becoming
been
before
beforehand
begin
beginning
behind
being
below
beside
besides
between
beyond
bf
bg
bh
bi
billion
bj
bm
bn
bo
both
br
bs
bt
but
buy
bv
bw
by
bz
c
ca
can
can't
cannot
caption
cc
cd
cf
cg
ch
ci
ck
cl
click
cm
cn
co
co.
com
copy
could
couldn
couldn't
cr
cs
cu
cv
cx
cy
cz
d
de
did
didn
didn't
dj
dk
dm
do
does
doesn
doesn't
don
don't
down
during
dz
e
each
ec
edu
ee
eg
eh
eight
eighty
either
else
elsewhere
end
ending
enough
er
es
et
etc
even
ever
every
everyone
everything
everywhere
except
f
few
fi
fifty
find
first
five
fj
fk
fm
fo
for
former
formerly
forty
found
four
fr
free
from
further
fx
g
ga
gb
gd
ge
get
gf
gg
gh
gi
gl
gm
gmt
gn
go
gov
gp
gq
gr
gs
gt
gu
gw
gy
h
had
has
hasn
hasn't
have
haven
haven't
he
he'd
he'll
he's
help
hence
her
here
here's
hereafter
hereby
herein
hereupon
hers
herself
him
himself
his
hk
hm
hn
home
homepage
how
however
hr
ht
htm
html
http
hu
hundred
i
i'd
i'll
i'm
i've
i.e.
id
ie
if
il
im
in
inc
inc.
indeed
information
instead
int
into
io
iq
ir
is
isn
isn't
it
it's
its
itself
j
je
jm
jo
join
jp
k
ke
kg
kh
ki
km
kn
kp
kr
kw
ky
kz
l
la
last
later
latter
lb
lc
least
less
let
let's
li
like
likely
lk
ll
lr
ls
lt
ltd
lu
lv
ly
m
ma
made
make
makes
many
maybe
mc
md
me
meantime
meanwhile
mg
mh
microsoft
might
mil
million
miss
mk
ml
mm
mn
mo
more
moreover
most
mostly
mp
mq
mr
mrs
ms
msie
mt
mu
much
must
mv
mw
mx
my
myself
mz
n
na
namely
nc
ne
neither
net
netscape
never
nevertheless
new
next
nf
ng
ni
nine
ninety
nl
no
nobody
none
nonetheless
noone
nor
not
nothing
now
nowhere
np
nr
nu
nz
o
of
off
often
om
on
once
one
one's
only
onto
or
org
other
others
otherwise
our
ours
ourselves
out
over
overall
own
p
pa
page
pe
per
perhaps
pf
pg
ph
pk
pl
pm
pn
pr
pt
pw
py
q
qa
r
rather
re
recent
recently
reserved
ring
ro
ru
rw
s
sa
same
sb
sc
sd
se
seem
seemed
seeming
seems
seven
seventy
several
sg
sh
she
she'd
she'll
she's
should
shouldn
shouldn't
si
since
site
six
sixty
sj
sk
sl
sm
sn
so
some
somehow
someone
something
sometime
sometimes
somewhere
sr
st
still
stop
su
such
sv
sy
sz
t
taking
tc
td
ten
text
tf
tg
test
th
than
that
that'll
that's
the
their
them
themselves
then
thence
there
there'll
there's
thereafter
thereby
therefore
therein
thereupon
these
they
they'd
they'll
they're
they've
thirty
this
those
though
thousand
three
through
throughout
thru
thus
tj
tk
tm
tn
to
together
too
toward
towards
tp
tr
trillion
tt
tv
tw
twenty
two
tz
u
ua
ug
uk
um
under
unless
unlike
unlikely
until
up
upon
us
use
used
using
uy
uz
v
va
vc
ve
very
vg
vi
via
vn
vu
w
was
wasn
wasn't
we
we'd
we'll
we're
we've
web
webpage
website
welcome
well
were
weren
weren't
wf
what
what'll
what's
whatever
when
whence
whenever
where
whereafter
whereas
whereby
wherein
whereupon
wherever
whether
which
while
whither
who
who'd
who'll
who's
whoever
NULL
whole
whom
whomever
whose
why
will
with
within
without
won
won't
would
wouldn
wouldn't
ws
www
x
y
ye
yes
yet
you
you'd
you'll
you're
you've
your
yours
yourself
yourselves
yt
yu
z
za
zm
zr
10
z
org
inc
width
length
.htaccess

That's quite an extensive list you've compiled, blogtorank! ;)

X vBulletin 3.8.12 by vBS Debug Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (8)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (4)pagenav_pagelink (3)pagenav_pagelinkrel (1)post_thanks_navbar_search (1)printthread (10)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages:

Phrase Groups Available:

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01920 seconds Memory Usage 1,814KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (8)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (4)pagenav_pagelink (3)pagenav_pagelinkrel (1)post_thanks_navbar_search (1)printthread (10)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: