View Single Post
Old 08-10-2005, 06:35 PM  
iBOUNCER
Confirmed User
 
Join Date: Nov 2004
Location: Monster Rain
Posts: 214
Cross-site IP blacklisting - testers needed

Anyone interested in trying out an early version of our cross-site IP blacklisting system, please hit me up on ICQ. Currently it supports PHP-driven sites that have an existing security framework.

Anyone who helps us out in the testing by using it on one of their sites will get a free year of service once we launch the final product.

The concept of the current version:

Basically, if you detect a surfer leeching/hacking/logging into a blocked account/etc using your existing security functions, you can easily add their IP to the blacklist by calling a php include. The IP will remain blacklist for a to-be-determined amount of time. You will be one of many sites that are adding fuckos to the blacklist.

Then, on your pages where you start a session or take a login you can check the blacklist to see if that surfers IP exists in the list, and do something fun with them if it does.

It requires you to put two small PHP files onto your server (one to check the blacklist, one to add to it) and one 'include' for each file in the appropriate place in your existing PHP scripts.

Lots more to come in this system as posted in some other threads... this is just an early version with some core functionality that we are looking to get some statistics and feedback on.
__________________
Secure PHP Programming - Secure E-Commerce Design
Site & Server Security Reviews - Code Reviews

The new and improved iBOUNCER. Give us a try.

ICQ: 201971159 or http://www.iBOUNCER.com
iBOUNCER is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote