vBFirewall v1.0

This is my first mod for vBulletin and I have tried to make it as better as I could.

Click Install If You Use it!!

What is vBFirewall?
Its a PHP script which blocks all kinds of attacks on your vBulletin Forum! Like: URL Poisoning, Remote File Inclusion, SQL Injection, XSS and other kinds of attacks.

I have tested each and every function of this mod before releasing it and have used it myself for 1 month

It has a attacker logger, which logs the IP and many details of the attacker so that you can reach him

This is still in beta version and I will add more features in it to make your vBulletin more secure Suggestions are always welcome.


How to install?

1) Go to Admin and Import the xml file product-firewall_vb_rs.xml using the plugin manager.
2) Keep an eye on the log file which can be found here: www.yourvbforumurl.com/logfile_worms.txt (This file will only be created when a attack occour)
3) Your website is now secure from hackers



Thanks

[gmerin]

Originally Posted by Wicked One 612

Hey, I'm having a problem with vBFirewall.

If it's enabled and I go to Usergroups > Administrator Permissions > View Control Panel Log it gives me this error "1||1235699733||||||||Error Opening Logfile." (Semi-random numbers each time). If I disable vBFirewall this doesn't happen. It happens in other random places too, same error. It also emails me saying that vBFirewall has prevented an attack whenever I view the page.

Any ideas?

I had the same thing. the logfile did not have the correct permissions set. 0666 is sufficient to make the file writable.

[Wicked One 612]

Originally Posted by gmerin

I had the same thing. the logfile did not have the correct permissions set. 0666 is sufficient to make the file writable.

Which logfile?

[Wicked One 612]

Originally Posted by gmerin

I had the same thing. the logfile did not have the correct permissions set. 0666 is sufficient to make the file writable.

Alright, I set the vBFirewall log file to 666 permissions (had to create it first). Now when I visit those areas I get "1||1235774558||||||||Access Denied, you have been logged.".

Any ideas?

[as7apcool]

is this protect from spam

[Frondy]

It works, tryed to hack own page, thank you

[hmuchmo1]

Installed it and the logs were showing some things but no details, and it also blocked me from modifying my cookies and http header options.
So i disabled it for now.

[GonE]

I have a few recommedations for this

Firewall which automatically checks links against a blacklist database (Custom scripted database in the Admin CP) if its there, it blocks connection/linking to it.

Upload logs and details.
In the firewall when a member/user uploads a file it automatically Logs the IP, file name, description and what it contains.

--DOWNLOADED--

[Adromir]

Doesnt work with vBAdvanced in the AdminCP. If you want to open vBAdvanced settings in AdminCP you get a security notice

[Lahoria]

thanks

[angeldevil]

i used it, but have some error.
examples: i click more..very fast into a link in forum...have a errors

Forbidden

You don't have permission to access /forum/showthread.php on this server.

---> it's protect from hackers?

and i use mysqldumper for backup, but also have errors this.

i try again by disable this hack mod, but still errors, i cant backup database...

remember history? when disable this hack mod?

plz..help me!