i need URGENT HELP !! .htaccess problem

[pantymaniac]

do you think i can .htacess my out.php
for not be called from anoher site , another server ??

Someone use my Traffic Trading Out.php From His Site
And hitbotting my trades and my sponsor like crazy

i need urgent .htacess code to
stop this fucker

[SportLife]

I thinbk you could set the refferer for out.php to your own ip/server/domain.

[pantymaniac]

someone know how to do it ?

[SportLife]

.htaccess HOWTO?

[zoic]

Put this at the start of you out.php to redirect them...


if (strpos($_SERVER['HTTP_REFERER'], 'somedomain.com') ! = = FALSE) {
header('Location: http://www.someotherdomain.com/');
exit;
}


(remove the spaces in ! = = seems to be a banned word!)

Dave

[psili]

Don't know if this is what you're talking about but....(and please be double check my syntax as it could be bad.

do a mod.rewrtie:


RewriteEngine on
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^http://yoursite.com/.*$ [NC]
RewriteRule out\.php$ http://redirectto.com/ [R,NC]

// that basically says is a request to out.php isn't coming from yoursite, redirect them somewher else.


or you could lock your "out.php" file from EVERYONE by denying access to that file in .htaccess:

<FilesMatch out.php>
Order deny, allow
Deny from all
</FilesMatch>

Then, when you want to use the file's functions, say in "sendTraffic.php", and let noone else:

if(// check for host / domain coming from you)
{
include_once("/d2/mydir/out.php");
// do out code.
}
else
header("Location: http://send.fucker.elsewhere/");

[psili]

yea, Dave's is actually quicker and easier. do his.

[darius]

I think some people used to move their out.php into its own folder and then put an htaccess like this in the folder.

AuthUserFile /dev/null
AuthGroupFile /dev/null

RewriteEngine On

RewriteCond %{HTTP_REFERER} !^http://yourdomain.com [NC]
RewriteCond %{HTTP_REFERER} !^http://www.yourdomain.com [NC]
RewriteRule /* http://www.yourdomain.com/error.html [R,L]


you just have to change the include line on your main page to point into this folder.

[Calvinguy]

Don't use htaccess. Use some scripting like Dave's

[darius]

nice code Dave

that would be easier

[vending_machine]

If it really is a hitbot, keep in mind that there probably will not be any referrer info..

[swedguy]

Originally posted by vending_machine
If it really is a hitbot, keep in mind that there probably will not be any referrer info..

Think about it for a sec.

Lets say that domainA.com is hitbotting you.
How does 99% of the trade scripts work? The prod/return is based on how many times a person from domainA.com clicks.

If the hitbot doesn't carry a referer, then domainA.com isn't sending productive traffic. The trade script doesn't send back to unproductive traffic.

Lets take couple of examples

Hits sent with referer:
domainA.com send 1000 hits with referer
those 1000 hits clicks 2000 times = 200% prod
The trade script willl send good traffic back to domainA.com

Hits sent without referer:
domainA.com send 1000 hits without referer
those 1000 hits clicks 2000 times, but no referer was sent so the trade script doesn't know that it's coming from domainA.com = 0% prod
The trade script will not send back anything.


So why would a hitbot not send a referer?