Zb Block - Stop Spam & 'bots @ Server

[adwade]

I tripped across ZB BLOCK (a GPL V2 PHP Protection Script) this week by accident and have been pretty impressed at what all it does, completely for FREE. Anyway, for those unaware I just wanted to share the information so they could beef-up their own website's security against all the various nasty's out there.

ZB BLOCK
Don't let the robots in the door!
A GPL V2 PHP Protection Script for your site.

This php security script is designed to detect certain behaviors detrimental to websites, or known bad addresses attempting to access your site. It then will send the bad robot (usually) or hacker an authentic 403 FORBIDDEN page with a description of what the problem was. If the attacker persists, then they will be served up a permanently reccurring 503 OVERLOAD message with a 24 hour timeout.

What ZB Block is Excellent at:

• Saves money by reducing hacker bandwith usage! (by 2,500% on this site's index page alone!)
• Strengthing your site against defacement.
• Preventing PHP script exploitation.
• Ending Remote File Include (RFI) exploits.
• Protecting against directory traversal attacks.
• Stopping MySQL database injection and tampering.
• Removing access from known bad addresses and domain names.
• Blocking access from top level domains, like .cn (China) and .kp (North Korea).

What ZB Block is Good at:

• Avoiding website scraping/content theft.
• Deterring bad user agents.
• Halting referrer spam.
• Impeding some Cross Site Scripting (XSS) attacks.

What ZB Block will not do:

• Protect non-PHP pages.
• Stop access to non-exploitable resource files like .gif, .jpg, or .swf .

ZB Block is also fast, not only does ZB Block check for over 100,000,000 bad IPs/Hostnames and many thousands of bots, but standard execution times are around 1/10th of a second on an aged PIII 930, which is unnoticeable to the web surfer. This anti-exploit / anti-'sploit / anti-hacking / anti-injection script should find many uses around the web as it's good at detecting, and stopping exploitation probes from many of the worst known skript kiddie tools.

Moderator(s), MOVE this thread to wherever you think it will do the most good for fellow vB Adminstrators.