Block User Ip From Your (.htaccess)

[Snake]

Thanks. First install!

[Terminatoronly]

yeah first install i hope you like the hack

[Forza]

is this considered a hack nowadays? anyways i would also add the codes to protect the admincp folder and definitly the code to block the common shell extensions. very handy file

[StrifeX]

First of all, I wouldn't consider this to do anything with vBulletin whatsoever, second of all, apparently this only works with cPanel or what?

[Terminatoronly]

first i would like to say thanks for your replies and i know its not a product or plugin to add to vbulletin but this one is much better than the hacks that i find for blocking ip and for StrifeX question well this one its not about cpanel its about ur .htaccess file with this file you can protect your forum like lets say you want to protect your forum (admincp) the index file you can protect it from this file and you can protect config file so you can be safe with this file and i would like to tell you all that i posted this one because most of us need this file so i thought its handy for you but if you dont i am happy for your replies

[The Finman]

.htaccess is for Apache.

While it is possible to install Apache on a Windows server...why?

Why wouldn't you just use Apache instead?

First, .htaccess files are very powerful tools, and they (along with .htpasswd) are also probably one of the most underrated server tools available to a web admin running Apache.

But I think using them falls outside of vBulletin modifications, simply because many vBulletin admins don't run Apache. And even though I personally dislike Windows ASP servers, there are plenty of admins that do like (or don't have a choice when it comes to) Windows servers. While it is possible to install Apache on top of Windows in order to make use of .htaccess...why?

I love using .htaccess files....as there are a bunch of other uses for .htaccess in addition to blocking IPs or password (.htpasswd) protecting folders.

For example, If you have a "troll" board that is directly linking to your site or board, and they are clicking through that link they and coming over and infesting your board with their nonsense...you can use an .htaccess file to send anyone clicking through that link to anywhere you want (it doesn't work if they copy and paste the link in their browser window instead of clicking through it, but most trolls are not that smart).

Many a time I have forwarded links posted to my board from trolls, to complety different web sites (and/or servers for that matter) that can contain malicious (or prank) scripts.

You really want to see the "troll fur fly"? Watch as other trolls click through that link and are sent to a real nasty web page, causing either harm or the appearance of harm to their computer.

Trust me,they are not too happy with the troll that posted that link which just screwed up their computer (remember they have been redirected to an entirely different web site and server).

Anyway, I've seen "troll' turn against "troll" as they start attacking and/or banning each other.

For example...

Options +FollowSymlinks
RewriteEngine On
RewriteCond %{HTTP_REFERER} ^http://www.troll_bulletin_board.com
RewriteRule /* http://www.malicious_website.org [R,L]
RewriteCond %{HTTP_REFERER} ^http://troll_bulletin_board.com
RewriteRule /* http://www.malicious_website.org [R,L]

If Troll "A" posts a direct link on www.Troll_Bulletin_Board.com to your board at www.My_Bulletin_Board.net and you put the above code in an .htaccess file in your root folder (just like .htpasswd you can put it in any folder you want to protect), when Troll "B" and "C" click on that link...they be sent directly to www.Malicious_Website.org instead.

Troll's "B" and "C" will not be happy with Troll ""A"" since he/she posted a link to a site that either screwed up their computer, or gave them a scare that something messed up their computer.

Here are some other great ways to use .htaccess

.htacces Tutorial Introduction

Error
Documents
Password
protection
Enabling SSI
via htaccess
Blocking
users by IP
Blocking
users/ sites by referrer
Blocking bad
bots and site rippers (aka offline browsers)
Change your
default directory page
Redirects

Prevent
viewing of htaccess
Adding MIME
types
Preventing
hot linking of your images and other file types
Preventing
directory listing
Conclusion
and more information

http://www.javascriptkit.com/howto/htaccess.shtml

The problem is .htaccess only works on Apache, so Admins that aren't running Apache are basically screwed. While there are ways of accomplishing similar things with Windows...it's still a real hassle, and it leads back to...why?

Regardless, you can do some great stuff with .htaccess...but since not every vBulletin owner can use it, I'm not sure that this lends itself to a vBulletin hack.

Also for web admins that are running Apache and can use .htaccess, be careful...because .htaccess is powerful stuff. Banning IP ranges can knock out a whole (small) country or a part of a (large) country (state, city, Etc.) if you're not carful. Be sure you know what you are doing.

[The Finman]

I hope I didn't come off as criticizing, as that wasn't what I was trying to do. Just offering a different insight.

Cheers!

[Terminatoronly]

Ok The Finman thanks for your reply i think that this thread is not good maybe i will report it

[Forza]

well it can be handy for a lot of people who dont know .htaccess and what it can do. Since it is the easiest way to incease basic security I would keep it. I would however try to add more instructions to your post that can apply directly to a vbulletin forum (securing files/folders, .htpassword file, blocking certain files, blacklist referring domains). Additionally i would upload an example file that people can edit and then upload.