Cerb's Anti-Proxy Hack - 15 seconds install

This is my Anti-Proxy hack, works with any vBulletin version.

Just download the attachment.


What this hack does

This hack prevents anyone from accessing your site through a proxy.

This is pretty useful if you have a large/semi-large community like mine (www.bnfreak.com) with a lots of young / immature members.

If someone gets banned he will most likely try to come back through a proxy, this is what this hack prevents.



You can also customize it (like I did on my forums) to simply prevent new registrations from proxies rather than the whole site. To do this, just edit register.php instead of global.php



Don't forget to click Install

[Paul M]

I assume this hack is not aimed at the uk, since you would kill off a major number of potential members (the major uk ISP's such as ntl and freeserve use proxy servers).

[Jenta]

nice, just what i was looking for
some of us dont care if 99% of internet users can not see our site

dont like it, dont use it
no need to bash something because its not useful to you particularly

thanks for the hack
will help me stop abuse

[Ayumu Yumi]

I tried this exact same hack before. 3 seconds after I installed it, every AOL user on the site IM'ed me saying they were blocked from the site. I visited my own site through my AOL and this variable existed:

$_SERVER['HTTP_VIA'] = "HTTP/1.1 (Velocity/1.1.1 [uScMs f p eN:t cCMp s ]), HTTP/1.1 dtc-ad09[CDBC74CB] (Traffic-Server/5.3.8 [uScM])"

As much as I would like to ban proxies or ban by IP at all, I just figured it would be easier to turn on admin validation for new user registrations.

If AOL didn't use proxies such as that one then I would probably use it. Of course if you didn't use AOL's default browser and opened up an external browser, then the AOL proxy vars aren't there anymore. But most AOL users aren't smart enough to do that, or they are just too lazy to.

[Jenta]

hehe @ the aolers
im about to add deny from aol.com to my .htaccess file

[Ayumu Yumi]

That's fine, if you're don't mind blocking a large chunk of the internet community from accessing your site... whatever spins your wheel I guess

[Chadi]

It doesn't work when I tested it with www.guardster.com

Any way around this?

[Keyser S?ze]

if someone used this code here, to detect what the real IP address is, (unless sent by a annonomous proxy) how could, or could u use that to help stop banned users from coming back under a proxie? or would this help in any other way

if (getenv("HTTP_FORWARDED") != ""){$ip = getenv ("HTTP_FORWARDED");$proxy_used = 1;}
elseif (getenv("HTTP_X_FORWARDED_FOR") != ""){$ipt = explode (",",getenv ("HTTP_X_FORWARDED_FOR")); $ip=trim($ipt[0]);$proxy_used = 1;}
elseif (getenv("HTTP_CLIENT_IP") != ""){$ip = getenvgetenv("HTTP_CLIENT_IP");$proxy_used = 1;}
else {$ip = getenv ("REMOTE_ADDR");}

[Keyser S?ze]

ok a guy just emailed me, hack is working ;D hes at work, they have a proxy so he cant register, but instead of just getting a page that says no proxies, he got this error message

Warning: in_array(): Wrong datatype for second argument in /home/asylum/public_html/forums/register.php on line 18 No Proxies

so i need to fix that also id like to put as the message "Sorry but this site does not allow people using a proxie"

[poolking]

Originally Posted by Jenta

nice, just what i was looking for
some of us dont care if 99% of internet users can not see our site

dont like it, dont use it
no need to bash something because its not useful to you particularly

thanks for the hack
will help me stop abuse

If you do happen to stop by this thread at some point, care to re-read what I've quoted, if your site was getting you a whole load of revenue then you would care that 99% of internet users couldn't access your site, so a suggestion don't complain if your traffic takes a nose dive that you cannot pull out from, he wasn't bashing it he was just pointing it out.

To jog your memory I was talking about your reply to PaulM

[Jenta]

Originally Posted by poolking

If you do happen to stop by this thread at some point, care to re-read what I've quoted, if your site was getting you a whole load of revenue then you would care that 99% of internet users couldn't access your site, so a suggestion don't complain if your traffic takes a nose dive that you cannot pull out from, he wasn't bashing it he was just pointing it out.

To jog your memory I was talking about your reply to PaulM

did u see me quote paulm? i was talking about the ones bashing the hack
you know that one guy that sits here all day refreshing the main page waiting for a hack to be released so he can make negative comments?

btw, dont u go worrying yourself about my site as i could care less
im not into making a popular sites for the masses...its a small semi private site so this hack is perfect for me
only wish i didnt have 2 users that sometimes use aol or i would make it sitewide instead of register.php only