305 replies to this topic

[cwh]

Hi there!
I just finally got this to sort of work...not really....

My ip get's block even though it's on my whilelist.txt file. I deleted the entire content of the whitelist.text file because otherwise I never got to be blocked!!! I tried removing the IP address with only 3 parts (as suggested on earlier posts) and that did not work. So i tried deleting everything and it sort of work.

The only way I don't get blocked out is when I removed my ip from the ip trapped text file and get the whilelist text files with only the IP's with 4 parts on it. Like this then I don't think the script works as when I type mysite.com/store/personal/ it goes back to mysite.com/store/index.php

Any suggestions as how this is suppose to be working as it should be?

[MichelleDW]

I installed the trap (changing the name of "personal" to "admin") and was getting redirected to the index page too. I tried changing the file names to all lowercase as suggested by Jörg, but now have an Internal Server Error 500. I deleted the whitelist.txt file but that didn't have any effect.

Please help.

[dvharrison]

Hi all

I have installed this add-on as I think it would revolutionise our website and its recent problem.

I am working with OSCommerce 2.3.1 on XAMPP set up. I have followed the instructions v.v. carefully and when someone visits the now admin file, they get the blocked page, but The IP Address displays as ::1 on both page and email.

Also the Whitelist and banned_IP numbers do not record anything therefore the website can still be accessed.

Please advise what I am doing wrong. I noticed in the instructions you have

Quote

If you want to prevent snoopers from viewing your files in banned folder add
the following to your .HTACCESS file

But no code is listed. It just goes straight onto the stop those bots and scammers section

Please advise.

[dvharrison]

Does it work like this because I am on localhost? If thats the case then fair enough.

[ShopAdminNL]

I am about to install this addon to my osc 2.3.1 webshop, but there's a question I have;
Could it be that search engines and/or crawlers IP addresses are also getting banned when indexing my page? I'm about to go live and announce it to some search engines, but ofcourse I would not have things like Google be banned from my site

And also, why are there a ton of IP addresses in the whitelist.txt already in the version I just downloaded?

And one more thing about the install.txt from the addon, I see this:

@@@@@@@@@@@@@@@@@@@@@@@@@@@

If you want to prevent snoopers from viewing your files in banned folder add
the following to your .HTACCESS file


Trap those bots and snoopers!
-----------------------------

But there's no text or anything there to put in my .htaccess

[ShopAdminNL]

No worries, got this one working like a charm now! Thanks for the contri

I made some little twists to make it work:

- changed the file names of IP_Trapped and Whitelist without caps and set chmod permissions for ip_trapped to 664

- in .htaccess in the /banned/ directory I wrote some extra security like:
<Files .htaccess>
order allow,deny
deny from all
</Files>
<Files ip_trapped.txt>
order allow,deny
deny from all
</Files>
<Files whitelist.txt>
order allow,deny
deny from all
</Files>

- added 999.999.999.9999 to the cleared whitelist (what were those IPs doing there?), otherwise my own IP wouldn't get recognized (I think because of a lack of an hard Enter in the list)


Now I've got this working all I have left to do is change the folder name /personal/ to /admin/ and alter this in my robot.txt

Edited by ShopAdminNL, 25 April 2012, 10:07.