vb.org Archive - Mini Mods - Blocking Proxy Scams

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vBulletin 3.7 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=228)

- - Mini Mods - Blocking Proxy Scams (https://vborg.vbsupport.ru/showthread.php?t=183501)

Blocking Proxy Scams

I came across the article/website below and feel if we can make it easier and safer for our members to come to our sites all the better.

The article and where credit should be given:
http://www.proxyscam.com/

I am not a coder, take absolutly zero credit for this. I posted this in the programming discussion forum but got no replies so no idea if I am implementing it correctly (cosses fingers). I read a reply to a thread on another modification that it was better to call javascript due to it being cached at the browser level thus saving bandwidth which why I did not add it directly to the template.

Unzip file and upload it to your /forums/clientscript/ directory.

OR

In notepad save the following code to vbulletin_proxyscam.js and upload to your /forums/clientscript/ directory.

Code:

// Tells the web-browser "If you're in a frame break out and load the page normally"

<script language="JavaScript" type="text/javascript">

var sThisURL = window.location.href;

function doFramesBuster()

{

if ( top.location != self.location )

{

top.location.replace( sThisURL );

}

}

</script>

Next edit your headinclude template, and add the following:

Code:

<script defer type="text/javascript" src="clientscript/vbulletin_proxyscam.js?v=$vboptions[simpleversion]">

</script>

No idea why but everyone else does it...

Reserved...

i'm interested in this ... but need some testers ... :p

I read but don't understand what it is?

The second page on the site explains what could technically happen.

Quote:

Please explain defer.

So what does this do ?????

hmmm ?????????????????????

yea plz explain wot this actualy does.

No offense, but this just wastes server space. All it does is remove those proxies that have the url frames at the top of the page. It will still load other proxies fine, in which not all of them use frames and since many of the account stealers no longer use frames this script is just stopping some of the good proxies.

Quote:

For example at the top of the html code there was this JavaScript:
<script language="JavaScript">
var sThisURL = window.location.href;
function doFramesBuster()
{
if ( top.location != self.location )
{
top.location.replace( sThisURL );
}
}
</script>
Which tells the web-browser "If you're in a frame break out and load the page normally". This is a small security measure by EBay to break out of any IFrame where a person can read an unsuspecting persons inputs into the UserID, and Password input boxes, but it didn't break out of our PHP Script.

As you can see ebay breaks out of iframes and not php. The best solution is to stop proxy servers all together. Plus it will stop those pesky members you ban their IP and they come back on those proxy servers. Here is a nice mod that will prevent web proxies:
https://vborg.vbsupport.ru/showthread.php?t=147280

Quote:

Originally Posted by Stoebi (Post 1558975)

Please explain defer.

http://www.websiteoptimization.com/speed/tweak/defer/

Quote:

Originally Posted by TheInsaneManiac (Post 1559021)

...many of the account stealers no longer use frames this script is just stopping some of the good proxies.

It does not block anything. All it does is break you out of a frame nothing more. If you are sent to a site within a frame technicaly the proxy then can record what ever you input (i.e. account information). While many don't there are still some that do. All it takes is 1 bad proxy. Why take the chance? If you consider 4k wasting space well ok.

Stopping proxies all together is a completly different scenario. Apples and oranges. Here we are just trying to stop potential account hijacking not block banned users or stop users from spoofing their IP address.

X vBulletin 3.8.12 by vBS Debug Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (2)bbcode_code_printable (4)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)post_thanks_navbar_search (1)printthread (11)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages:

Phrase Groups Available:

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01704 seconds Memory Usage 1,736KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (2)bbcode_code_printable (4)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)post_thanks_navbar_search (1)printthread (11)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: