vBFirewall v1.0

This is my first mod for vBulletin and I have tried to make it as better as I could.

Click Install If You Use it!!

What is vBFirewall?
Its a PHP script which blocks all kinds of attacks on your vBulletin Forum! Like: URL Poisoning, Remote File Inclusion, SQL Injection, XSS and other kinds of attacks.

I have tested each and every function of this mod before releasing it and have used it myself for 1 month

It has a attacker logger, which logs the IP and many details of the attacker so that you can reach him

This is still in beta version and I will add more features in it to make your vBulletin more secure Suggestions are always welcome.


How to install?

1) Go to Admin and Import the xml file product-firewall_vb_rs.xml using the plugin manager.
2) Keep an eye on the log file which can be found here: www.yourvbforumurl.com/logfile_worms.txt (This file will only be created when a attack occour)
3) Your website is now secure from hackers



Thanks

[invisiblea]

Originally Posted by 7lanet

My path of the Forum www.7lanet.com/vb
Do I make file logfile_worms.txt in the folder of (vb)
Do give file logfile_worms.txt the license logfile_worms.txt 666

When a attack occours it will be created itself.

Originally Posted by Koidl

works for 3.7 too ?

All Versions

Originally Posted by tiekie

sound very good ... does it work on 3.6.8?

Yes, all versions

Originally Posted by dtv100

does this work with 3.7?
will this slow down server or forum?

Yes, and it doesnt slow down the forum

[dtv100]

OK i get a error when click to check subscriptions:

1||1227227664||xx.xx.xxx.xx||do=find&subscriptionid=5&status=1||http://www.mydomain.com/forums/admincp/subscriptions.php?do=modify||Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506)

[invisiblea]

Originally Posted by dtv100

OK i get a error when click to check subscriptions:

1||1227227664||xx.xx.xxx.xx||do=find&subscriptionid=5&status=1||http://www.mydomain.com/forums/admincp/subscriptions.php?do=modify||Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506)

PM me the plugin you are using, I will check it out

[ebk]

Check subscriptions errors for me as well.

[edermix]

I do not understand what this log to say, please help me to understand it:

1||1227218866||189.110.83.180||do=viewsubscription ||http://www.xxxxxxxx.net/profile.php?...c||Mozilla/5.0 (Windows; U; Windows NT 5.1; pt-BR; rv:1.9.0.4) Gecko/2008102920 Firefox/2.0.0.14;MEGAUPLOAD 1.0

1||1227218871||189.110.83.180||do=viewsubscription &daysprune=-1&folderid=all||http://www.xxxxxxxx.net/profile.php?...c||Mozilla/5.0 (Windows; U; Windows NT 5.1; pt-BR; rv:1.9.0.4) Gecko/2008102920 Firefox/2.0.0.14;MEGAUPLOAD 1.0

[Barakat]

i tried that hack and support it , in the past ,,,,,,,,,,

https://vborg.vbsupport.ru/showthread.php?t=110030


P.S Befor secureing your Vbulletin you need to know on What SErVer you are running your fourm or scripts ,

coz what ever your old vbulletin where haveing some security holes ,,,, the server security will prevent all the attempt what ever it was .,

[mikesz]

So this hack just filters query input through an array of known hacker attacks phrases. How can you be sure your array is complete or that "attack" isn't a legitimate request? I don't see any checks, just a blanket replace ?

[RvG2]

vbulletin might not need this but I need this in my other mods which may or might be attacked by hackers

[Josh1]

Nominated for MOTM.

[rainyleaves]

Thanks,
Do I need change CHMOD 777 of Root Directory?