vBFirewall v1.0

This is my first mod for vBulletin and I have tried to make it as better as I could.

Click Install If You Use it!!

What is vBFirewall?
Its a PHP script which blocks all kinds of attacks on your vBulletin Forum! Like: URL Poisoning, Remote File Inclusion, SQL Injection, XSS and other kinds of attacks.

I have tested each and every function of this mod before releasing it and have used it myself for 1 month

It has a attacker logger, which logs the IP and many details of the attacker so that you can reach him

This is still in beta version and I will add more features in it to make your vBulletin more secure Suggestions are always welcome.


How to install?

1) Go to Admin and Import the xml file product-firewall_vb_rs.xml using the plugin manager.
2) Keep an eye on the log file which can be found here: www.yourvbforumurl.com/logfile_worms.txt (This file will only be created when a attack occour)
3) Your website is now secure from hackers



Thanks

[Itchy Nips]

just an update for others thinking about installing this:
vb3.8.3 - users cannot access their subscriptions page. this mod blocks their attempt and thinks its a hack attempt

disabled for now

[RvG2]

Originally Posted by Itchy Nips

just an update for others thinking about installing this:
vb3.8.3 - users cannot access their subscriptions page. this mod blocks their attempt and thinks its a hack attempt

disabled for now

a solution is given on previous pages.

[Itchy Nips]

thanks. i wasnt aware of that

[RvG2]

Originally Posted by Itchy Nips

it just prevented me from viewing the control panel log in the admincp. When I click on:

ADMINCP > USERGROUPS > ADMINISTRATOR PERMISSIONS > VIEW CONTROL PANEL LOG

it displays an error and emails me that a hack attempt was just made.

find:

'st=-', 'cat%20', 'include', '_path=');

add below:

$securityexclusions = array(
'do=viewsubscription','do=removesubscription', 'do=addsubscription', 'do=doaddsubscription', 'do=view&script'
);

in addition to the fix for subscription.

[d0cpaul]

How do I know what kind of attack I am getting? Here is an attack I received a couple times today.

1||1252094560||192.138.214.106||do=viewsubscription||http://www.loansafe.org/forum/usercp.php||Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.12) Gecko/20080219 Firefox/2.0.0.12 Navigator/9.0.0.6

[iEdster]

How can I remove it? I removed it via Product page, it still gives me hack attempts sent to my email. I wanna remove it completely, because it conflicts with other plugins, and gives me errors.

[badheeu]

Hello!

Hack Attempt has been successfully prevented for your vBulletin forums at:
KMA? Warez Forums

Report:
============================

1||1252849941||115.84.147.15||do=viewsubscription& folderid=all||http://www.kma-forum.com/usercp.php||Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/530.5 (KHTML, like Gecko) Chrome/2.0.172.43 Safari/530.5

============================

but no report logs created

[solarhosts]

sweet thanks.

[foroalfaromeo]

I've installed it, but it had no effect in my forum what so ever.
What parameters does it work on?

I only see a Menu that tuns log & notifications on or off.

[Kolbi]

There is an big bug. Users can´t unsubscribe from thread without getting blocked from the firewall.
Need to be fixed.