vBFirewall v1.0

This is my first mod for vBulletin and I have tried to make it as better as I could.

Click Install If You Use it!!

What is vBFirewall?
Its a PHP script which blocks all kinds of attacks on your vBulletin Forum! Like: URL Poisoning, Remote File Inclusion, SQL Injection, XSS and other kinds of attacks.

I have tested each and every function of this mod before releasing it and have used it myself for 1 month

It has a attacker logger, which logs the IP and many details of the attacker so that you can reach him

This is still in beta version and I will add more features in it to make your vBulletin more secure Suggestions are always welcome.


How to install?

1) Go to Admin and Import the xml file product-firewall_vb_rs.xml using the plugin manager.
2) Keep an eye on the log file which can be found here: www.yourvbforumurl.com/logfile_worms.txt (This file will only be created when a attack occour)
3) Your website is now secure from hackers



Thanks

[vspro]

When have a update ^^ ???

[massi64]

well i installed and since i did a look like that have no effect to spiders they just keep coming on page on the forum that just admin should be able to see

any idea ??

[cairocairo]

Why not this code to add also

PHP Code:


unset($config['Database'], 
$config['MasterServer'], $config['SlaveServer'], 
$vbulletin->config['Database'], 
$vbulletin->config['MasterServer'], 
$vbulletin->config['SlaveServer']); 


[massi64]

Originally Posted by cairocairo

Why not this code to add also

PHP Code:


unset($config['Database'], 
$config['MasterServer'], $config['SlaveServer'], 
$vbulletin->config['Database'], 
$vbulletin->config['MasterServer'], 
$vbulletin->config['SlaveServer']); 


where should i put this code ??

[Dr.LoVe]

is there any update ??

[Itchy Nips]

installed and I guess its working for me. All addons are working for me, as of right now. I do not have those two addons that are specified in a couple posts above, though

[massi64]

still dosen't work i mean a dose not his job , bots users keep registering , and on the log (logfile_worms.txt) the only log it is my ip , probably when i made a mistake with my password.
any idea to make this mod work right ?

[Itchy Nips]

it just prevented me from viewing the control panel log in the admincp. When I click on:

ADMINCP > USERGROUPS > ADMINISTRATOR PERMISSIONS > VIEW CONTROL PANEL LOG

it displays an error and emails me that a hack attempt was just made.

[CMD]

Originally Posted by Itchy Nips

it just prevented me from viewing the control panel log in the admincp. When I click on:

ADMINCP > USERGROUPS > ADMINISTRATOR PERMISSIONS > VIEW CONTROL PANEL LOG

it displays an error and emails me that a hack attempt was just made.

Same problem...

[xyzmary2001]

Oh, well, since no one specialized offers any help, I will offer myself. This is - or should be embarrassing - to let a lawyer who knows nothing about coding to solve the technical problems caused to other ppl by your own hack.
After 30 minutes of testing the most weird things on the test forum, I did as follows:

1. I created the logfile_worms.txt and uploaded it in forum root.

2. CHMOD-ed it to 0666.

3. Disabled the addon and noticed that the error was gone.

4. Uninstalled the addon - the error still gone

5. Deleted the damned .txt file from the root and felt very proud of myself )

Hope this will work for everyone.

Extremely disappointed of this type of lack of responsibility.