You DO NOT want to be on this list - Page 2 - GoFuckYourself.com

Juicy D. Links · 04-18-2003, 08:15 PM

50 biatch

SpaceAce · 04-18-2003, 08:15 PM

Quote:

Originally posted by Choker

LOL, yep see this is the shit I am talking about right here. If there were any security fixes needed we would implement them asap. But it seems that everyone who knows a little code thinks they can improve everybody elses script. If they are so good why can't they write thier own script? Yeah doesn't make sense does it? Seems like some people cheat and steal just for the sake of cheating and stealing.

You know, it's your script and I completely support your right to set the terms on distribution and use, but this is some cocky bullshit. You really make yourself look minor league with an ignorant statement like that. Just because you don't know of a problem doesn't mean it isn't there. I defy you to go out and find one successful, top-notch script of any kind that was perfect in the first version. There is no such thing, it doesn't matter how good you are. A good coder and a wise person knows that they don't know everything. Maybe the post should have been "what's the problem?" instead of "since I don't know about the problem, it doesn't exist".

The rest of your post after that is pretty silly, too. Just because you can do something doesn't mean you have to. Do you really believe that everyone with the talent and ability to make a quality trading program has already done so? There is no one left who can do it because if they could, they already would have, right? Baloney. There are dozens of experienced coders on this board. Just because each and every one of them has not written their own trading/content management/TGP/user database program does not mean they can't.

People should not be stealing your product, that's a fact. Another fact is that there are cyber thieves out there stepping on toes of people who likely have a lot more juice than you. All this posturing and threatening isn't going to get anything done. Just go about your business and shut down the assholes who are ripping you off.

SpaceAce

- Jesus Christ - · 04-18-2003, 08:15 PM

Quote:

Originally posted by Choker
I am sure that the host and the hosts upstream provider will agree with me on this.

I have never used your script, but I want to say that if you brought this case to any of the major upstream providers. (HE/Williams/Internap/Cogent BLAH BLAH) they would.

a) ignore you.
b) tell you to eat a dick.

(assuming the poeple doing the stealing are running servers they own)

I'm not saying I agree with poeple stealing and hacking your script, (Yes they are stealing) but your threats are hollow. The recources needed to get any BW providers to even pay attention to your complaint (IE Pay a lawyer to contact them) would far outway the ammount of traffic/money you would gain from shutting these guys down (IE 0$)

WebDork · 04-18-2003, 08:18 PM

Quote:

Originally posted by Choker

Then you would never buy a trading script. No trading scripts allow you to modify them. It's in the license agreement.

Your right. I use Google. Its a tad bigger and more effective.

But, perhaps you could start a trend and be the first to offer a trading script users *could* modify. It could differentiate you

As an alternative you could offer your existing one free and release a better version for $X with additional functionality AND that does all people to modify the script.

Choker · 04-18-2003, 08:19 PM

Quote:

but chokor alot of dutch webmasters are losing 2500 hits with your script, is this normal, are you happy when your sites are losing this amount of hits, answer that question.

Dude show me one site that is losing traffic with my script. Just one. I take it you are refering to that fucker that is scanning not just ttt but every trade script there is. I have yet to see anyone post about how this scanning is causing anyone to loose any traffic. You are the first to say this. Everyone that I have talked to about this bot that is scanning everyones tgps simply put the ip in thier htacess and that was the end of the problem. If it is not then of course we will make a fix asap. Notice I said "WE WILL MAKE A FIX". If it is needed and warranted. I have yet to see that it is needed. And no I did not get a email from you. TTT has a support board, a long ass thread on this and from what I gather on that thread htacess takes care of this scanning bot.

Quotealex · 04-18-2003, 08:19 PM

Quote:

Originally posted by Hansm
you are the php programmer

I think the programmer of TTT is Eskimoen. He comes here from time to time.

Fletch XXX · 04-18-2003, 08:20 PM

Hansm · 04-18-2003, 08:20 PM

chokor is thinking he is god.

chokor, forget it, the bw providers will really laugh about you, and all isps too.

they will say its your problem because its not ENCRYPTED.

if you can pay 800$ monthly for blacklist option you can pay money too for some good encrypt software like zend.

Kick Ass Chat · 04-18-2003, 08:28 PM

Quote:

Originally posted by Hansm
chokor is thinking he is god.

chokor, forget it, the bw providers will really laugh about you, and all isps too.

they will say its your problem because its not ENCRYPTED.

if you can pay 800$ monthly for blacklist option you can pay money too for some good encrypt software like zend.

Agreed, the hosts and providers will get a good laugh at this. These trade scripts help to attract spammers, and CP sites and CJ sites, all of which are a constant problem and annoyance to surfers. They will be glad to see your crap gone, and will not offer you any assistance whatsoever....
This is just my 2 cents.

Choker · 04-18-2003, 08:30 PM

Quote:

chokor is thinking he is god

Whatever you say dude. I'm not going to allow others to steal from me. Never have and never will. If this attitude of mine makes you think I think I am God, then whatever.

Quote:

I'm not saying I agree with poeple stealing and hacking your script, (Yes they are stealing) but your threats are hollow. The recources needed to get any BW providers to even pay attention to your complaint (IE Pay a lawyer to contact them) would far outway the ammount of traffic/money you would gain from shutting these guys down (IE 0$)

You are so wrong dude. Been there done that they do care very much, especailly when a attorney is involved like there will be in this case. I am simply telling the thieves they have 72 hours before I start legal action. It's gonna cost me $50 per C&D letter. If I have to spend that much I had might as well go all out and go after each one until the host shuts them down. I got a list of 21 sites right now. that's over $1000 just on C&D letters and phone calls from the attorney to the hosts. The upstreams will only be phoned if the hosts refuse to remove the violating websites. If me protecting my work, my time, my money, my ideas, etc from thieves makes me a asshole, then so be it.

Hansm · 04-18-2003, 08:37 PM

i only said what i read on forums about the problem, htaccess must solve it yeah if thats the problem.

i cant really say much about it, but if you want to protect your scripts in the further get a good encoder, i did look at your script i liked it, but im busy with more paysites now, later on im going to buy 5 licenses of your paid script without the 1% skim.

thanks for letting me know this.

Quote:

Originally posted by Choker

Dude show me one site that is losing traffic with my script. Just one. I take it you are refering to that fucker that is scanning not just ttt but every trade script there is. I have yet to see anyone post about how this scanning is causing anyone to loose any traffic. You are the first to say this. Everyone that I have talked to about this bot that is scanning everyones tgps simply put the ip in thier htacess and that was the end of the problem. If it is not then of course we will make a fix asap. Notice I said "WE WILL MAKE A FIX". If it is needed and warranted. I have yet to see that it is needed. And no I did not get a email from you. TTT has a support board, a long ass thread on this and from what I gather on that thread htacess takes care of this scanning bot.

- Jesus Christ - · 04-18-2003, 08:44 PM

Quote:

Originally posted by Choker

You are so wrong dude. Been there done that they do care very much, especailly when a attorney is involved like there will be in this case. I am simply telling the thieves they have 72 hours before I start legal action. It's gonna cost me $50 per C&D letter. If I have to spend that much I had might as well go all out and go after each one until the host shuts them down. I got a list of 21 sites right now. that's over $1000 just on C&D letters and phone calls from the attorney to the hosts. The upstreams will only be phoned if the hosts refuse to remove the violating websites. If me protecting my work, my time, my money, my ideas, etc from thieves makes me a asshole, then so be it.

I was wrong when it comes to determining how smart you are... I figured you would be smart enought to realize paying lawyers to put a genie back in a bottle was a waste ... I agree you can have shit done with your lawyers, I was assuming you werent going to waste money doing that.

"Your so wrong dude"

And your so cocky.

The only benifit I see is the fear your MIGHT instill...Fear of being proscuted. But when the offenders live outside the US its not going to work very well.

fnet · 04-18-2003, 08:47 PM

Quote:

Originally posted by - Jesus Christ -

I agree you can have shit done with your lawyers, I was assuming you werent going to waste money doing that.

Crucifixion a waste of time?

- Jesus Christ - · 04-18-2003, 08:48 PM

Quote:

Originally posted by fnet

Crucifixion a waste of time?

Toally over rated.

noshit · 04-18-2003, 09:00 PM

no one gives rats ass about your 'list' or your script.
if it's available it will be used and abused, if not , so what.
Plan in your next offerings

How many who use this script belong to millionaire club?
how many on script 'shit list' make 6 zeros?

Toker · 04-18-2003, 09:10 PM

Check It OUT !
http://www.sicfreehost.com

A friend of anyones?? LOL
http://cheerleaders.sicfreehost.com...p/69sex053.html
It redirects to this URL on some proxys
http://www.sicfreehost.com
Sicfreehost is part of opensrs.org, Seems like everything there is
Status:CLIENT DELETE PROHIBITED
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED

And I never saw this before either..
Domain ID5410125-LROR
Domain Name:OPENSRS.ORG
Created On:19-Apr-1999 04:00:00 UTC
Last Updated On:21-Mar-2003 04:32:46 UTC
Expiration Date:19-Apr-2004 04:00:00 UTC
Sponsoring Registrar:R11-LROR
Status:CLIENT DELETE PROHIBITED
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Registrant ID:11-C
Registrant Name:SEE SPONSORING REGISTRAR
Registrant Street1:Whois Server:whois.opensrs.net
Registrant Street2:Referral URL:www.opensrs.org
Registrant City:N/A
Registrant Postal Code:N/A
Registrant Country:CA
Registrant Email:[email protected]
Admin ID:11-C
Admin Name:SEE SPONSORING REGISTRAR
Admin Street1:Whois Server:whois.opensrs.net
Admin Street2:Referral URL:www.opensrs.org
Admin City:N/A
Admin Postal Code:N/A
Admin Country:CA
Admin Email:[email protected]
Billing ID:11-C
Billing Name:SEE SPONSORING REGISTRAR
Billing Street1:Whois Server:whois.opensrs.net
Billing Street2:Referral URL:www.opensrs.org
Billing City:N/A
Billing Postal Code:N/A
Billing Country:CA
Billing Email:[email protected]
Tech ID:11-C
Tech Name:SEE SPONSORING REGISTRAR
Tech Street1:Whois Server:whois.opensrs.net
Tech Street2:Referral URL:www.opensrs.org
Tech City:N/A
Tech Postal Code:N/A
Tech Country:CA
Tech Email:[email protected]
Name ServerNS1.TUCOWS.COM
Name ServerNS2.TUCOWS.COM
Name ServerNS3.TUCOWS.COM

__________________
Peace!

Darin · 04-18-2003, 09:11 PM

Damn cheaters!

TheDoc · 04-18-2003, 10:01 PM

Sup Choker...

Gota look at this in a different way and save your money if your really talking to lawyers. Spend the money and some software that will compile your php so it can't be taken.

Even if your terms say don't modify it, not much you can really do about it, all they have to say is they fixed a security hole and you don't have a case. After all, do you want to goto court and tell the judge that you released a script that has security holes?

The NL guys, yes they are untouchable.

You could contact the hosting company and shut them down.. Probably shut down 65% of them but why go piss off a group of people that probably work together and could cause trouble for you as well by jacking with your servers. Sometimes it's just not worth it. If it was us, which ofcourse it's not, our hosting company would just laugh.

Drop an e-mail and just hope they take it down, about all you really do, just hope for the best.

Good luck, either way ://

SomeCreep · 04-18-2003, 10:17 PM

Yep Choker, thats pretty petty for those bastards to change the 1% skim.

Didnt you encrypt the portion where you add your site to the skim, so that others with basic programming skills wouldnt be able to modify it?

Couldnt you make the portion of code that controls where the skimmed traffic goes a compiled module (which would make it more difficult to edit)?

Also, you gotta set flags in the script so that if the skim url is changed by the person, the flags will stop the script from working.

I'm not a professional programmer (yet), but those are my suggestions anyway

Choker · 04-18-2003, 10:33 PM

Quote:

The NL guys, yes they are untouchable

The NL guys are not the problem. NL guys tend to police themselves on matters like this. I have offered to even make a version of TTT just for NL users, then I get this shit of a very small group of them doing this crap to me. I trust NL sites just like I do a .com site.
One person refered to it being hopeless to putting the genie back in the bottle. Well to date less than 1% of the TTT users have changed the script. Shit I even give away like $1300 in cash and scripts every month for TTT users that do not change the script. I have been as nice and cool about this as possible. Anyone using TTT can see firsthand the time and effort put into this script, and the ongoing time spent by the writer and myself to keep making it better with every upgrade.

I am not the only guy with a script facing this problem with hackers. It has become a situation out of control for many scripts and writers. I don't want it to get this way for me. That's all.

beetle · 04-18-2003, 11:35 PM

Choker a message from me

I will tell, i have move my sites severel weeks to another server and have ask several times to move the scripts, i have payd for Epower, i have Eskimoen given al the install details of the scripts and he should move the scripts, but til now, the scripts are not moved and installed, it is not a problem for me if he wanna ask money or something for the moving, but when i wait so long i have removed the skim, You are right that it is not ok to remove the skim, and have have fixed it now,
for my other 3 sites i had ask for an upgrade to epower, but i still wait before the other scripts are moved
it are the domains
dutchcelebrity.com
indianorgy.com
juicyteeny.com
blackinvasion.com
kuthoer.com
tienersletjes.com

for all of this script i have licence to use Epower trader
You are right that it is not ok to remove the skim,

Choker · 04-18-2003, 11:49 PM

Quote:

Originally posted by beetle
Choker a message from me

I will tell, i have move my sites severel weeks to another server and have ask several times to move the scripts, i have payd for Epower, i have Eskimoen given al the install details of the scripts and he should move the scripts, but til now, the scripts are not moved and installed, it is not a problem for me if he wanna ask money or something for the moving, but when i wait so long i have removed the skim, You are right that it is not ok to remove the skim, and have have fixed it now,
for my other 3 sites i had ask for an upgrade to epower, but i still wait before the other scripts are moved
it are the domains
dutchcelebrity.com
indianorgy.com
juicyteeny.com
blackinvasion.com
kuthoer.com
tienersletjes.com

for all of this script i have licence to use Epower trader
You are right that it is not ok to remove the skim,

Thank you for coming forward and being honest about this and correcting the script. It takes a real man to do this. I will mention this server move to Eskimoen, I know he had problems with his old icq account he had to get a new one.

TheDoc · 04-18-2003, 11:49 PM

Ask Matt how you can protect it, i'm sure he has some ideas.

quiet · 04-18-2003, 11:49 PM

Quote:

Originally posted by noshit
no one gives rats ass about your 'list' or your script.
if it's available it will be used and abused, if not , so what.
Plan in your next offerings

How many who use this script belong to millionaire club?
how many on script 'shit list' make 6 zeros?

Choker · 04-18-2003, 11:56 PM

Quote:

Originally posted by TheDoc
Ask Matt how you can protect it, i'm sure he has some ideas.

Doc if we are talking about the same person I think we are, then hahahahahahah, that fucker left me high and dry. I will not forget what he did to me. EVER. Sooner or later he will want something from me, it will be most enjoyable for me to tell him to go fuck off.

TheDoc · 04-18-2003, 11:58 PM

Msg me on ICQ

stevent37 · 04-19-2003, 12:07 AM

Ummmm I really dont no much about this programming thing, but dont you think that by posting this here you have just told a whole bunch of people about the security hole then new about it before? You might have just created a larger problem than you solved.

goBigtime · 04-19-2003, 12:15 AM

I guess the question is...

If choker DID compile the php -- how many people would he lose?

I know of plenty people who won't run anything thats precompiled on their production servers.

They want to see source and be able to either audit it themselves, or feel confident knowing that others are able to do so.

goBigtime · 04-19-2003, 12:17 AM

oh.. and ChoKOR must be the cyborg robo-chicken version of Choker?

Choker · 04-19-2003, 12:38 AM

Quote:

Originally posted by stevent37
Ummmm I really dont no much about this programming thing, but dont you think that by posting this here you have just told a whole bunch of people about the security hole then new about it before? You might have just created a larger problem than you solved.

There is no security hole.

beetle · 04-19-2003, 02:51 AM

if u don't know what the other 3 sites are : sexymeisjes, indianjuicy and indiansluts, but even these are offcourse clean now

eskimoen · 04-19-2003, 05:04 AM

I think I need to say something here...

First to you beetle, I have searched my mailbox for mails with your domains. I found quite a few

I apparently have by accident deleted one of your emails. Im very sorry about this, Im usually pretty careful when I'm deleting mails.
The deleted email contains the installation instructions for:
neukfilmpjes.com
tienersletjes.com
kuthoer.com
indianorgy.net
juicyteeny.com
blackinvasion.com

When I look at these domains again I remember you. Again I'm very sorry about this screwup from my side.

beetle, please execpt my appology and I will give you 6 more copies of EPT. You might not need that many but I feel I have to have something to make up for this.

To the guys talking about security issues:
As Choker said this hitbot making HEAD requests to the out scripts are affecting ALL scripts. It is not a security issue. If you want to block all HEAD (including HEADs from SE spiders) you can do this with htaccess. I can post the code if anybody wants it.

To the guys talking about encoding the script:
Like another guy mentioned, "Who would use a free trade script that's encoded?". I personally wouldnt. I could have downloaded a script thats skimming 2 or 3 or maybe even 5%. The same goes to precompiled C scripts. Can I trust the programmer? Its all about trust. By not encoding TTT you acutally dont need to trust Choker

You can see with your own eyes that he's only skimming 1%

beetle · 04-19-2003, 06:18 AM

Eskimoen U are great.....

Is it possible that u re-install the scripts end of the week, this week there are a lot of changes....

Thnks a very lot...... i give a sign and the install details agian, because some are changed

eskimoen · 04-19-2003, 09:15 AM

I just replied to your email but it bounced.

Please contact me on icq 61567482 when you have time.

Manie · 04-19-2003, 10:24 AM

Howdie,
I read on the Dutch Forum there was quite a fuzz about TTT.
Which is considered a good script. But really isn't flawless.

I myself don't use free scripts. (Cause I got the knowledge to programme them myself, like I'm doing for 1,5 years now)

However, over the past month we got extreemly enoing head request fromout the States. (BeJa) doing head request on all know scripts on: 'index.php?randomrefererhere' or 'out.php?radnomouthere'.

And this is done by socket HEAD request. Which means it isn't stopped by HTACCESS. (Scripts still get executed).

You can imagine the shit that happens if your script thinks he just got 100 hits from a dude (who actually didn't sent you anything) and the other way arround.

I've made myself a fix for my own script stopping the PHP process as soon a HEAD request is encountered. And people tried to convice you from the need of the feature. But you probably don't see the need of it in your probably bussy schedual.

I for one (and yeah, you will say who are you for saying that?) had the opinion towards the others that they should just make the changes. As long as you keep the skimming and it's for protection. EVEN you should understand.

And don't give me the copyright notice crap.
I believe I don't need to explain you that if you really don't want people to get in your code. You should programm PHP code. But take something compiled.

I understand your motivation for this post.
(And people that do rip the shaving out should die from herpes)
But if it's a security issue. You of all should understand.

Regards,
Armand aka Manie

MarcieB · 04-19-2003, 12:58 PM

Quote:

Originally posted by Hansm
im not talking about the skiming thats fair.

but chokor alot of dutch webmasters are losing 2500 hits with your script, is this normal, are you happy when your sites are losing this amount of hits, answer that question.

and we are talking about sites with 10000 visits per day only, thats 1/4 of the traffic.

so if you arnt delivering new patches to your script, what must a adultwebmaster do, waiting till there site gets 100 visits a day, no, if its was me, then i would do the same and send you a email. and dont tell you didt get a email i know for sure you did get emails about this problem, because more then 25 webmasters are having this problem.

This is complete BS! Yes you're losing hits! Don't like it? buy a script! If you are losing 2500 hits and that's 1% than you have a extremely good dutch site that would bring in enough cash to buy 10 scripts!
Oh, and i don't believe a fucking word of ANY dutch site running 250K on a free script. Complete BS!

Za Ha · 04-19-2003, 01:06 PM

As usual I have nothing but good things to say about chocker.

Just installed the ttt script on 2 domains, heard some bs about the script but thoguht i would try it anyway, 1 day and the site is 20k, with no feeder,

I like the turbo option, some things are missing in the script but fuck, cant complain about a free script which in MY OPINION is almost as good as ucj.

boneless · 04-19-2003, 01:40 PM

Quote:

Originally posted by MarcieB

This is complete BS! Yes you're losing hits! Don't like it? buy a script! If you are losing 2500 hits and that's 1% than you have a extremely good dutch site that would bring in enough cash to buy 10 scripts!
Oh, and i don't believe a fucking word of ANY dutch site running 250K on a free script. Complete BS!

recalculate and then chill out he sais 1/4 which is not 1%.
dont fucking hit that reply button so fast.

and the losing of hits he mentioned is not the skim to choker but the fuckface who is head requesting our sites to death.

rowan · 04-19-2003, 04:19 PM

Quote:

Originally posted by Za Ha
As usual I have nothing but good things to say about chocker.

Just installed the ttt script on 2 domains, heard some bs about the script but thoguht i would try it anyway, 1 day and the site is 20k, with no feeder,

I like the turbo option, some things are missing in the script but fuck, cant complain about a free script which in MY OPINION is almost as good as ucj.

20k with no feeder traffic? So you just add in a bunch of trades, sit back, and somehow you get to 20k in 24 hours? :P

Kimmykim · 04-19-2003, 04:29 PM

Choker
In Love w/ KimmyKim

how cute Chocker!

OK back to whatever you guys were ranting about...

Za Ha · 04-19-2003, 05:56 PM

Quote:

Originally posted by rowan

20k with no feeder traffic? So you just add in a bunch of trades, sit back, and somehow you get to 20k in 24 hours? :P

Yes

a 20k site is nothing btw, doent make enough to pay daily lunch expenses

mxcreep · 04-20-2003, 03:16 AM

Manie / Armand is right, the hits from a HEAD request made by a socket still executes your php code and the false hits and clicks will be counted....
The only thing the .htaccess does is sending only an error header back to the client.
Next problem wih .htaccess in this case is that you're always later to discover a ip change, so if beja changes ip's (proxy or whatever) you're script is counting fake hits for a time until you discover...

It's now a point of heavily discussion and it doesn't only relate TTT, but wouldn't it just be better to add the check on HEAD requests as a standard feature, everyone who builds a script wants to make it very good protected against cheaters, so why not adding something for this...
I adjusted my own scripts (not TTT) and it's about 5 minutes of work...

Choker you would make a lot of people happy if you would add this feature to your script or at least create a test case where you check if whe are right about the execution of the script....

Choker you have no advantage in letting other people's site drop in traffic because of this HEAD request thing, if they're traffic drops, your 1% also drops...people are going to change scripts for these matters, so you won't get any hits again from them...

Be a sportive guy, we understand you're sick of the skimming problem that a lot of folks get out of the script, but this issue isn't related...

Grtzzz,

Werner

easyfun · 04-20-2003, 03:31 AM

Copyright is copyright - Simple as that.
These scripts clearly show what Choker is saying.
If a bug is there, if something can be improved upon, breaking copyright rules is not the answer.
I am certain if somebody went to Choker and said about a bug and offered the fix, Choker would have listened.

Isn't it about time webmasters got behind copyright? Or are you all happy to see your images, coding and grafix used by others without asking you first?

Porn Mickey · 04-20-2003, 06:58 AM

How much cost your script and where I can DL it? For FREE!

or just gimme trial ver.

mrreuben · 04-20-2003, 07:54 AM

Quote:

Originally posted by mxcreep
Manie / Armand is right, the hits from a HEAD request made by a socket still executes your php code and the false hits and clicks will be counted....
The only thing the .htaccess does is sending only an error header back to the client.
Next problem wih .htaccess in this case is that you're always later to discover a ip change, so if beja changes ip's (proxy or whatever) you're script is counting fake hits for a time until you discover...

It's now a point of heavily discussion and it doesn't only relate TTT, but wouldn't it just be better to add the check on HEAD requests as a standard feature, everyone who builds a script wants to make it very good protected against cheaters, so why not adding something for this...
I adjusted my own scripts (not TTT) and it's about 5 minutes of work...

Choker you would make a lot of people happy if you would add this feature to your script or at least create a test case where you check if whe are right about the execution of the script....

Choker you have no advantage in letting other people's site drop in traffic because of this HEAD request thing, if they're traffic drops, your 1% also drops...people are going to change scripts for these matters, so you won't get any hits again from them...

Be a sportive guy, we understand you're sick of the skimming problem that a lot of folks get out of the script, but this issue isn't related...

Grtzzz,

Werner

Sorry but all Internet commincations are done over sockets , browsers, telnet, ssh you name it. Using a server to open a direct socket to a another site is just a lower level function not a bypass. The server can still simply ignore the request.

apache does not execute a page where the .htaccess is coded correctly HEAD or whatever. Denying an ip is straightfoward and in my experience I have not had a script continue to count hits from blocked ip's.

Everytime I put one of his ips in my .htacess problem goes away. Yes that's a pain but that is part of the business.

Placing the code in the script to not count suspicious hits is good but if I can block him at the server level better.

msg · 04-20-2003, 08:08 AM

Quote:

Originally posted by Hansm
chokor is thinking he is god.

chokor, forget it, the bw providers will really laugh about you, and all isps too.

they will say its your problem because its not ENCRYPTED.

if you can pay 800$ monthly for blacklist option you can pay money too for some good encrypt software like zend.

agreed. Everyone else uses Zend why not you?

manuelk · 04-20-2003, 08:20 AM

lol - some of the replies are amusing - if there are security bugs out there and they didnt or wont get fixed - no one force you to use the script. but if you use the script - you have to follow the copyrights.

would you also say - Adobe cant go after people who use Photoshop as a cracked version because Adobe didnt protected it enough.. ?

Mr.Teen · 04-20-2003, 08:25 AM

juicy - pasta for sunday, and left overs for monday through thursday!

accept me

eskimoen · 04-20-2003, 09:34 AM

Quote:

Originally posted by mxcreep
Manie / Armand is right, the hits from a HEAD request made by a socket still executes your php code and the false hits and clicks will be counted....
The only thing the .htaccess does is sending only an error header back to the client.
Next problem wih .htaccess in this case is that you're always later to discover a ip change, so if beja changes ip's (proxy or whatever) you're script is counting fake hits for a time until you discover...

Sorry, but that's not true. If you block HEAD or any other requests in a htaccess your script will not be executed.

Here's the htaccess code to block HEAD requests.
RewriteEngine on
RewriteCond %{REQUEST_METHOD} ^HEAD$
RewriteRule .* - [F,L]

This code will send a 403 Forbidden response to the bot and your script will not be executed.

foe · 04-20-2003, 10:01 AM

Quote:

Originally posted by Choker

Sir what gives any .nl webmaster the right to edit this script? Are .nl webmasters above the law or something? I must be missing something here. When you download this script it clearly says that you are not allowed to edit this script in any way, and even in the zip it says this again. The conditions for anyone using this script is that you do not modfy it in any shape. If you are using a copy that has been modified as far I am concerned you are the one that modified it, and I am sure that the host and the hosts upstream provider will agree with me on this. I do appreciate your honesty and the fact that you are coming forward with this, but this is no excuse.

Zend.com Great tools for compilings scripts

04-18-2003, 08:20 PM	#57
Fletch XXX GFY HALL OF FAME DAMMIT!!! Join Date: Jan 2002 Location: that 504 Posts: 60,840	__________________ Want an Android App for your tube, membership, or free site? Need banners or promo material? Hit us up (ICQ Fletch: 148841377) or email me fletchxxx at gmail.com - recent work - About me

04-18-2003, 09:10 PM	#66
Toker Confirmed User Join Date: Feb 2003 Location: USA Posts: 891	Check It OUT ! http://www.sicfreehost.com A friend of anyones?? LOL http://cheerleaders.sicfreehost.com...p/69sex053.html It redirects to this URL on some proxys http://www.sicfreehost.com Sicfreehost is part of opensrs.org, Seems like everything there is Status:CLIENT DELETE PROHIBITED Status:CLIENT TRANSFER PROHIBITED Status:CLIENT UPDATE PROHIBITED And I never saw this before either.. Domain ID5410125-LROR Domain Name:OPENSRS.ORG Created On:19-Apr-1999 04:00:00 UTC Last Updated On:21-Mar-2003 04:32:46 UTC Expiration Date:19-Apr-2004 04:00:00 UTC Sponsoring Registrar:R11-LROR Status:CLIENT DELETE PROHIBITED Status:CLIENT TRANSFER PROHIBITED Status:CLIENT UPDATE PROHIBITED Registrant ID:11-C Registrant Name:SEE SPONSORING REGISTRAR Registrant Street1:Whois Server:whois.opensrs.net Registrant Street2:Referral URL:www.opensrs.org Registrant City:N/A Registrant Postal Code:N/A Registrant Country:CA Registrant Email:[email protected] Admin ID:11-C Admin Name:SEE SPONSORING REGISTRAR Admin Street1:Whois Server:whois.opensrs.net Admin Street2:Referral URL:www.opensrs.org Admin City:N/A Admin Postal Code:N/A Admin Country:CA Admin Email:[email protected] Billing ID:11-C Billing Name:SEE SPONSORING REGISTRAR Billing Street1:Whois Server:whois.opensrs.net Billing Street2:Referral URL:www.opensrs.org Billing City:N/A Billing Postal Code:N/A Billing Country:CA Billing Email:[email protected] Tech ID:11-C Tech Name:SEE SPONSORING REGISTRAR Tech Street1:Whois Server:whois.opensrs.net Tech Street2:Referral URL:www.opensrs.org Tech City:N/A Tech Postal Code:N/A Tech Country:CA Tech Email:[email protected] Name ServerNS1.TUCOWS.COM Name ServerNS2.TUCOWS.COM Name ServerNS3.TUCOWS.COM __________________ Peace! __________________ PeaceAlive and kicking

04-18-2003, 09:11 PM	#67
Darin Confirmed User Join Date: Aug 2002 Location: Las Vegas, NV Posts: 345	Damn cheaters! __________________ SIG TOO BIG! Maximum 120x60 button and no more than 3 text lines of DEFAULT SIZE and COLOR. Unless your sig is for a GFY top banner sponsor, then you may use a 624x80 instead of a 120x60.

04-18-2003, 10:01 PM	#68
TheDoc Too lazy to set a custom title Industry Role: Join Date: Jul 2001 Location: Currently Incognito Posts: 13,827	Sup Choker... Gota look at this in a different way and save your money if your really talking to lawyers. Spend the money and some software that will compile your php so it can't be taken. Even if your terms say don't modify it, not much you can really do about it, all they have to say is they fixed a security hole and you don't have a case. After all, do you want to goto court and tell the judge that you released a script that has security holes? The NL guys, yes they are untouchable. You could contact the hosting company and shut them down.. Probably shut down 65% of them but why go piss off a group of people that probably work together and could cause trouble for you as well by jacking with your servers. Sometimes it's just not worth it. If it was us, which ofcourse it's not, our hosting company would just laugh. Drop an e-mail and just hope they take it down, about all you really do, just hope for the best. Good luck, either way :// __________________ ~TheDoc - ICQ7765825 It's all disambiguation

04-18-2003, 10:17 PM	#69
SomeCreep :glugglug Join Date: Mar 2003 Location: Where the Wild Things Are Posts: 26,118	Yep Choker, thats pretty petty for those bastards to change the 1% skim. Didnt you encrypt the portion where you add your site to the skim, so that others with basic programming skills wouldnt be able to modify it? Couldnt you make the portion of code that controls where the skimmed traffic goes a compiled module (which would make it more difficult to edit)? Also, you gotta set flags in the script so that if the skim url is changed by the person, the flags will stop the script from working. I'm not a professional programmer (yet), but those are my suggestions anyway __________________ Webair Hosting I use and recommend Webair for hosting.

04-18-2003, 08:15 PM	#51
Juicy D. Links So Fucking Banned Industry Role: Join Date: Apr 2001 Location: N.Y. -Long Island -- Posts: 122,992	50 biatch

04-18-2003, 08:20 PM	#58
Hansm Confirmed User Join Date: Jun 2002 Posts: 871	chokor is thinking he is god. chokor, forget it, the bw providers will really laugh about you, and all isps too. they will say its your problem because its not ENCRYPTED. if you can pay 800$ monthly for blacklist option you can pay money too for some good encrypt software like zend.

04-18-2003, 09:00 PM	#65
noshit Confirmed User Industry Role: Join Date: Dec 2001 Location: Midwest USA Posts: 1,582	no one gives rats ass about your 'list' or your script. if it's available it will be used and abused, if not , so what. Plan in your next offerings How many who use this script belong to millionaire club? how many on script 'shit list' make 6 zeros?

04-18-2003, 11:35 PM	#71
beetle Registered User Join Date: Apr 2003 Location: holland Posts: 8	Choker a message from me I will tell, i have move my sites severel weeks to another server and have ask several times to move the scripts, i have payd for Epower, i have Eskimoen given al the install details of the scripts and he should move the scripts, but til now, the scripts are not moved and installed, it is not a problem for me if he wanna ask money or something for the moving, but when i wait so long i have removed the skim, You are right that it is not ok to remove the skim, and have have fixed it now, for my other 3 sites i had ask for an upgrade to epower, but i still wait before the other scripts are moved it are the domains dutchcelebrity.com indianorgy.com juicyteeny.com blackinvasion.com kuthoer.com tienersletjes.com for all of this script i have licence to use Epower trader You are right that it is not ok to remove the skim,

04-18-2003, 11:49 PM	#73
TheDoc Too lazy to set a custom title Industry Role: Join Date: Jul 2001 Location: Currently Incognito Posts: 13,827	Ask Matt how you can protect it, i'm sure he has some ideas. __________________ ~TheDoc - ICQ7765825 It's all disambiguation

04-18-2003, 11:58 PM	#76
TheDoc Too lazy to set a custom title Industry Role: Join Date: Jul 2001 Location: Currently Incognito Posts: 13,827	Msg me on ICQ __________________ ~TheDoc - ICQ7765825 It's all disambiguation

04-19-2003, 12:07 AM	#77
stevent37 Confirmed User Join Date: Aug 2002 Location: USA Posts: 266	Ummmm I really dont no much about this programming thing, but dont you think that by posting this here you have just told a whole bunch of people about the security hole then new about it before? You might have just created a larger problem than you solved.

04-19-2003, 12:15 AM	#78
goBigtime Confirmed User Join Date: Nov 2002 Posts: 7,761	I guess the question is... If choker DID compile the php -- how many people would he lose? I know of plenty people who won't run anything thats precompiled on their production servers. They want to see source and be able to either audit it themselves, or feel confident knowing that others are able to do so.

04-19-2003, 12:17 AM	#79
goBigtime Confirmed User Join Date: Nov 2002 Posts: 7,761	oh.. and ChoKOR must be the cyborg robo-chicken version of Choker?

04-19-2003, 02:51 AM	#81
beetle Registered User Join Date: Apr 2003 Location: holland Posts: 8	if u don't know what the other 3 sites are : sexymeisjes, indianjuicy and indiansluts, but even these are offcourse clean now

04-19-2003, 05:04 AM	#82
eskimoen Confirmed User Join Date: May 2001 Location: Denmark Posts: 146	I think I need to say something here... First to you beetle, I have searched my mailbox for mails with your domains. I found quite a few I apparently have by accident deleted one of your emails. Im very sorry about this, Im usually pretty careful when I'm deleting mails. The deleted email contains the installation instructions for: neukfilmpjes.com tienersletjes.com kuthoer.com indianorgy.net juicyteeny.com blackinvasion.com When I look at these domains again I remember you. Again I'm very sorry about this screwup from my side. beetle, please execpt my appology and I will give you 6 more copies of EPT. You might not need that many but I feel I have to have something to make up for this. To the guys talking about security issues: As Choker said this hitbot making HEAD requests to the out scripts are affecting ALL scripts. It is not a security issue. If you want to block all HEAD (including HEADs from SE spiders) you can do this with htaccess. I can post the code if anybody wants it. To the guys talking about encoding the script: Like another guy mentioned, "Who would use a free trade script that's encoded?". I personally wouldnt. I could have downloaded a script thats skimming 2 or 3 or maybe even 5%. The same goes to precompiled C scripts. Can I trust the programmer? Its all about trust. By not encoding TTT you acutally dont need to trust Choker You can see with your own eyes that he's only skimming 1%

04-19-2003, 06:18 AM	#83
beetle Registered User Join Date: Apr 2003 Location: holland Posts: 8	Eskimoen U are great..... Is it possible that u re-install the scripts end of the week, this week there are a lot of changes.... Thnks a very lot...... i give a sign and the install details agian, because some are changed

04-19-2003, 09:15 AM	#84
eskimoen Confirmed User Join Date: May 2001 Location: Denmark Posts: 146	I just replied to your email but it bounced. Please contact me on icq 61567482 when you have time.

04-19-2003, 10:24 AM	#85
Manie Registered User Join Date: Apr 2003 Location: The Netherlands Posts: 12	Howdie, I read on the Dutch Forum there was quite a fuzz about TTT. Which is considered a good script. But really isn't flawless. I myself don't use free scripts. (Cause I got the knowledge to programme them myself, like I'm doing for 1,5 years now) However, over the past month we got extreemly enoing head request fromout the States. (BeJa) doing head request on all know scripts on: 'index.php?randomrefererhere' or 'out.php?radnomouthere'. And this is done by socket HEAD request. Which means it isn't stopped by HTACCESS. (Scripts still get executed). You can imagine the shit that happens if your script thinks he just got 100 hits from a dude (who actually didn't sent you anything) and the other way arround. I've made myself a fix for my own script stopping the PHP process as soon a HEAD request is encountered. And people tried to convice you from the need of the feature. But you probably don't see the need of it in your probably bussy schedual. I for one (and yeah, you will say who are you for saying that?) had the opinion towards the others that they should just make the changes. As long as you keep the skimming and it's for protection. EVEN you should understand. And don't give me the copyright notice crap. I believe I don't need to explain you that if you really don't want people to get in your code. You should programm PHP code. But take something compiled. I understand your motivation for this post. (And people that do rip the shaving out should die from herpes) But if it's a security issue. You of all should understand. Regards, Armand aka Manie

04-19-2003, 01:06 PM	#87
Za Ha Confirmed User Join Date: Oct 2001 Location: Still lost Posts: 5,112	As usual I have nothing but good things to say about chocker. Just installed the ttt script on 2 domains, heard some bs about the script but thoguht i would try it anyway, 1 day and the site is 20k, with no feeder, I like the turbo option, some things are missing in the script but fuck, cant complain about a free script which in MY OPINION is almost as good as ucj.

04-19-2003, 04:29 PM	#90
Kimmykim bitchslapping zebras!!!!! Industry Role: Join Date: Jun 2001 Location: In a shack by the beach Posts: 16,015	Choker In Love w/ KimmyKim how cute Chocker! OK back to whatever you guys were ranting about...

04-20-2003, 03:16 AM	#92
mxcreep Registered User Join Date: Apr 2003 Location: Netherlands Posts: 4	Manie / Armand is right, the hits from a HEAD request made by a socket still executes your php code and the false hits and clicks will be counted.... The only thing the .htaccess does is sending only an error header back to the client. Next problem wih .htaccess in this case is that you're always later to discover a ip change, so if beja changes ip's (proxy or whatever) you're script is counting fake hits for a time until you discover... It's now a point of heavily discussion and it doesn't only relate TTT, but wouldn't it just be better to add the check on HEAD requests as a standard feature, everyone who builds a script wants to make it very good protected against cheaters, so why not adding something for this... I adjusted my own scripts (not TTT) and it's about 5 minutes of work... Choker you would make a lot of people happy if you would add this feature to your script or at least create a test case where you check if whe are right about the execution of the script.... Choker you have no advantage in letting other people's site drop in traffic because of this HEAD request thing, if they're traffic drops, your 1% also drops...people are going to change scripts for these matters, so you won't get any hits again from them... Be a sportive guy, we understand you're sick of the skimming problem that a lot of folks get out of the script, but this issue isn't related... Grtzzz, Werner Last edited by mxcreep; 04-20-2003 at 03:19 AM..

04-20-2003, 03:31 AM	#93
easyfun Confirmed User Join Date: Apr 2003 Location: Somewhere Posts: 731	Copyright is copyright - Simple as that. These scripts clearly show what Choker is saying. If a bug is there, if something can be improved upon, breaking copyright rules is not the answer. I am certain if somebody went to Choker and said about a bug and offered the fix, Choker would have listened. Isn't it about time webmasters got behind copyright? Or are you all happy to see your images, coding and grafix used by others without asking you first? __________________ <p><embed width="120" height="60" src="http://www.harlotcash.com/harlot_3.swf"><br> </p>

04-20-2003, 06:58 AM	#94
Porn Mickey we all love porn Industry Role: Join Date: Nov 2001 Location: Nowhere Posts: 2,840	How much cost your script and where I can DL it? For FREE! or just gimme trial ver. __________________ $150 SignUp Bonus

04-20-2003, 08:20 AM	#97
manuelk Confirmed User Join Date: Jul 2001 Location: dot com Posts: 146	lol - some of the replies are amusing - if there are security bugs out there and they didnt or wont get fixed - no one force you to use the script. but if you use the script - you have to follow the copyrights. would you also say - Adobe cant go after people who use Photoshop as a cracked version because Adobe didnt protected it enough.. ? __________________ ...

04-20-2003, 08:25 AM	#98
Mr.Teen Confirmed User Join Date: Jan 2003 Location: Long Island, New York Posts: 800	juicy - pasta for sunday, and left overs for monday through thursday! accept me __________________ <img src="http://dn5.com/Dead12.gif">