Mini Mods - Prevent guests/users from using proxies at your forum

This hack will allow you to prevent guests/users from using proxies at your forum. You can dissallow proxies for the forum as a whole or to prevent only registrations with proxies. You can enable and disable it at the Acp of your forum where you can control the settings for the mod.

Note: As you know there is no such way of preventing proxies 100% but it helps a lot. I tested it with a dozen proxies and it stopped 8 of them.

[ArtakEVN]

Uninstalled. Some users without proxy can't enter the forum.

[iDHKHCM]

Originally Posted by borbole

You can add their IP at the white list option.

where are you paid mods? i went to your site didnt see any? thanks in advance

[SᴩiDᴇЯ]

Great Mod i love that you are stopping those missarable spammers.

I have just started an awesome Gamers Community Site here: http://XGamesBB.com and spammers are hitting me hard. I don't know why? Maybe it's my awesome looking skin not sure.

If i paid you to add an Exception rule ie, Exclude user groups by their ID, would you do this for me?

Please PM me asap.

Thank you in advance.

[HHelp1]

Is it work for 4.1.8 ?

[steviewonder44]

My forum just slowed right down with this and shows half my visitors with error
message

[Nirjonadda]

Not Supported for 4.1.10

[FinalFantasy]

Here is a 100% working proxy detection script, hope you can update your mod

<?php
//
// Script php : Detection Proxy
// By : lemoussel - Aout 2009
//
//
//
//@error_reporting(E_ALL | E_NOTICE);
@set_time_limit(0);
@error_reporting(E_ALL ^ E_NOTICE);
  
function get_ip() {
  if($_SERVER) {
    if($_SERVER['HTTP_X_FORWARDED_FOR'])
      $ip = $_SERVER['HTTP_X_FORWARDED_FOR'];
    elseif($_SERVER['HTTP_CLIENT_IP'])
      $ip = $_SERVER['HTTP_CLIENT_IP'];
    else
      $ip = $_SERVER['REMOTE_ADDR'];
  }
  else {
    if(getenv('HTTP_X_FORWARDED_FOR'))
      $ip = getenv('HTTP_X_FORWARDED_FOR');
    elseif(getenv('HTTP_CLIENT_IP'))
      $ip = getenv('HTTP_CLIENT_IP');
    else
      $ip = getenv('REMOTE_ADDR');
  }
  
  return $ip;
}
  
function detect_proxy($myIP) {
   $scan_headers = array(
            'HTTP_VIA',
            'HTTP_X_FORWARDED_FOR',
            'HTTP_FORWARDED_FOR',
            'HTTP_X_FORWARDED',
            'HTTP_FORWARDED',
            'HTTP_CLIENT_IP',
            'HTTP_FORWARDED_FOR_IP',
            'VIA',
            'X_FORWARDED_FOR',
            'FORWARDED_FOR',
            'X_FORWARDED',
            'FORWARDED',
            'CLIENT_IP',
            'FORWARDED_FOR_IP',
            'HTTP_PROXY_CONNECTION'
        );
  
   $flagProxy = false;
   $libProxy = 'No';
  
   foreach($scan_headers as $i)
            if($_SERVER[$i]) $flagProxy = true;
  
   if (    in_array($_SERVER['REMOTE_PORT'], array(8080,80,6588,8000,3128,553,554))
        || @fsockopen($_SERVER['REMOTE_ADDR'], 80, $errno, $errstr, 1))
      $flagProxy = true;
  
   // Proxy LookUp
   if ( $flagProxy == true &&
        isset($_SERVER['REMOTE_ADDR']) &&
        !empty($_SERVER['REMOTE_ADDR']) )
         // Transparent Proxy
         // REMOTE_ADDR = proxy IP
         // HTTP_X_FORWARDED_FOR = your IP  
         if ( isset($_SERVER['HTTP_X_FORWARDED_FOR']) &&
              !empty($_SERVER['HTTP_X_FORWARDED_FOR']) &&
              $_SERVER['HTTP_X_FORWARDED_FOR'] == $myIP
            )
             $libProxy = 'Transparent Proxy';
               // Simple Anonymous Proxy           
              // REMOTE_ADDR = proxy IP
              // HTTP_X_FORWARDED_FOR = proxy IP
         else if ( isset($_SERVER['HTTP_X_FORWARDED_FOR']) &&
                   !empty($_SERVER['HTTP_X_FORWARDED_FOR']) &&
                   $_SERVER['HTTP_X_FORWARDED_FOR'] == $_SERVER['REMOTE_ADDR']
                 )
                 $libProxy = 'Simple Anonymous (Transparent) Proxy';
              // Distorting Anonymous Proxy           
              // REMOTE_ADDR = proxy IP
              // HTTP_X_FORWARDED_FOR = random IP address
              else if ( isset($_SERVER['HTTP_X_FORWARDED_FOR']) &&
                        !empty($_SERVER['HTTP_X_FORWARDED_FOR']) &&
                        $_SERVER['HTTP_X_FORWARDED_FOR'] != $_SERVER['REMOTE_ADDR']
                      )
                      $libProxy = 'Distorting Anonymous (Transparent) Proxy';
                   // Anonymous Proxy
                   // HTTP_X_FORWARDED_FOR = not determined
                   // HTTP_CLIENT_IP = not determined
                   // HTTP_VIA = determined
                   else if ( $_SERVER['HTTP_X_FORWARDED_FOR'] == '' &&
                             $_SERVER['HTTP_CLIENT_IP'] == '' &&
                             !empty($_SERVER['HTTP_VIA'])
                           )
                           $libProxy = 'Anonymous Proxy';
                        // High Anonymous Proxy           
                        // REMOTE_ADDR = proxy IP
                        // HTTP_X_FORWARDED_FOR = not determined                   
                        else
                           $libProxy = 'High Anonymous Proxy';
  
   return $libProxy;

}
  
$ip = get_ip();
  
echo 'Proxy Server Detection<br>';
echo '=================<br><br>';
$typeProxy = detect_proxy($ip);
echo 'Use Proxy Server : '.$typeProxy.'<br>';
echo '<br>';
echo 'Brief IP Information'.'<br>';
echo '--------------------'.'<br>';
echo 'Your IP : '.$ip.'<br>';
echo 'Language : '.$_SERVER['HTTP_ACCEPT_LANGUAGE'].'<br>';
echo '<br>';
echo 'Detail IP Information'.'<br>';
echo '---------------------'.'<br>';
echo 'HTTP_ACCEPT : '.$_SERVER['HTTP_ACCEPT'].'<br>';
echo 'HTTP_ACCEPT_ENCODING : '.$_SERVER['HTTP_ACCEPT_ENCODING'].'<br>';
echo 'HTTP_ACCEPT_LANGUAGE : '.$_SERVER['HTTP_ACCEPT_LANGUAGE'].'<br>';
echo 'HTTP_ACCEPT_CHARSET : '.$_SERVER['HTTP_ACCEPT_CHARSET'].'<br>';
echo 'HTTP_CONNECTION : '.$_SERVER['HTTP_CONNECTION'].'<br>';
echo 'HTTP_HOST : '.$_SERVER['HTTP_HOST'].'<br>';
echo 'HTTP_KEEP_ALIVE : '.$_SERVER['HTTP_KEEP_ALIVE'].'<br>';
echo 'HTTP_USER_AGENT : '.$_SERVER['HTTP_USER_AGENT'].'<br>';
echo 'REMOTE_HOST : '.@gethostbyaddr($_SERVER['REMOTE_ADDR']).'<br>';
echo 'REMOTE_PORT : '.$_SERVER['REMOTE_PORT'].'<br>';
echo '<br>';
echo 'REMOTE_ADDR : '.$_SERVER['REMOTE_ADDR'].'<br>';
echo 'HTTP_VIA : '.$_SERVER['HTTP_VIA'].'<br>';
echo 'HTTP_X_FORWARDED_FOR : '.$_SERVER['HTTP_X_FORWARDED_FOR'].'<br>';
echo 'HTTP_PROXY_CONNECTION : '.$_SERVER['HTTP_PROXY_CONNECTION'].'<br>';
echo 'HTTP_CLIENT_IP : '.$_SERVER['HTTP_CLIENT_IP'].'<br>';


?>

This is from your No proxy Allowed.xml

if( @fsockopen( $_SERVER['REMOTE_ADDR'], 80, $errstr, $errno, 1 ) || @fsockopen( $_SERVER['REMOTE_ADDR'], 443, $errstr, $errno, 1 ))
        {

What if i change it to

if (    in_array($_SERVER['REMOTE_PORT'], array(8080,80,6588,8000,3128,553,554))
        || @fsockopen($_SERVER['REMOTE_ADDR'], 80, $errno, $errstr, 1))
{

[the one]

Final Fantasy what file do i add that proxy detection script is it my config.php or my htaccess

many thanks

Also this plugin slowed my website down as well how would i stop that from happening can i tweak my settings in WHM

[kh99]

Originally Posted by michelle81

Also this plugin slowed my website down as well how would i stop that from happening can i tweak my settings in WHM

I looked at the code and it's very simple, so there's no easy tweak for speeding it up. Well, maybe there's a way to have a shorter timeout for fsockopen, if anyone knows how to do that.

You could also only turn on the registration portion. The "Prevent guests visiting your forum" checks in hook global_start, so basically every request, and there doesn't appear to be any check for guests only (but maybe the description meant 'guest' as anyone using your forum, registered or not). Maybe it could be modified to only check when posting (or maybe just check for an http POST).

I don't really understand how this works in general. I think it's been said before in this thread, but it looks like it checks the user's ip for open ports 80 and 443. Maybe a lot of proxies have those ports open, but they're also the default ports used by web servers, so you'd also be blocking anyone with a web server running from their ip (which as people mentioned earlier, could be your own web site, you company's, your isp's, or could just be the admin port on a router).

[the one]

Would this code work in my htaccess file http://www.blackhatworld.com/blackha...ml#post3066559

Do i just add that to my httacces file in cpanel

I did something like that before but nothing changed.Does it take time for it to start working

Many thanks kh99

Or is there a script i can use and what file do i put it in

Thanks again