pennywize? Is anything better?
 

There is some jerk that has found away my pennywize protection and has been causing my members section to run at like 80Mbit contantly....... Need a fix ASAP... every time i just hard disable his login, he gets another one......

When i say fix... i need a better program than Pennywize

google iprotect.

Proxy pass ... proxypass.com

I am surprised that pennywise is allowing something like this to happen. Not what I would expect. The main problem I have seen before is the extortionate pricing, not holes... Has anyone else seen this hole?

Also, from the sounds of it, you either have someone who hacked your box - or more likely, someone who has the authorization code for your processors script. Call your IPSP & tell them to make sure you have the latest version of their password management script, rebuild your user database & issue you a new authcode.

Shhhh... MemLogin :winkwink: - For bruteforce protection anyway.

For password sharing prevention, nothing beats a nice solid apache module like iprotect.

But it sounds like he is having a problem with someone whos hacked his box or got ahold of his processors authcode list more than anything.

That is weird .. pennywise works great for me!

Try iProtect
http://www.digital-concepts.net/cgi-iprotect.html
John is letting it go and installed for a really low price right now.

Who is John?

I use stopthathacker.com - Not affiliated just a happy customer.
Works great and support is TOP Notch. Talk to them and see if they can help to correct your problem.
:thumbsup

yes..this happened to us and pennywise didn't stop it. Dragged our server into the ground. Proxy pass stopped it.

Actually i've already done that with ibill..... Each account that is made is made through my online check subscription option.... Which i don't want to kill because the check option generates alot of money..l....

Do you have any of john's contact info.... i am very interested....

I think he means Chris

DynaMite:winkwink:

Is anyone using Investment Guard (they're new)?

http://realtimescripts.com/docs/investment_guard.htm

They appear to have some very interesting features.

Try Bot Buster an excellent program and very cost effective.

http://www.botbuster.com


Cindy xx
:thumbsup :thumbsup

Cant say enough good things about Iprotect.
Solid solid solid.
Most of the webmasters running paysites with us are really satisfied.
:thumbsup

I would be very interested in hearing more about this myself.

Yes, I'd be very intersted to know if anyone has had Investment Guard installed and if they found it worked well at protection. I'm opening up a movie site soon and I really don't want to push out 50 megabits just cause a password was posted and pennywize didn't stop it.

Driven

IProtect.

I USED to use pennywize..

I protect is a one time FEE.. and thats it you own it!

Also it WORKS!!

Prob with pennywize is EVERY members request goes through to the pennywize server for authentication and logging. That is not very good if you have a glitch or time out.

Iprotect is all self contained on your own server! and it is VERY efficient and fast.

We've been using iprotect for over 4 years, not one problem with hacks since. One-time fee, includes installs, doesn't bring down the server.

Passwordcop is a one time fee - guaranteed to work - our techs install it.

It is installed on over 3,000 paysites.

http://passwordcop.com

Quoted for emphasis.

Sorry guys/gals, I ment Chris, not John. I don't know why I said John. You can find out about IProtect and find out how to contact him at
http://www.digital-concepts.net/cgi-iprotect.html

Anyone have any experience of:

http://realtimescripts.com/docs/investment_guard.htm

At all? Looks like it has some really interesting features?

Good link. This guy has some kick assed scripts.

necoeds,
contact us http://www.proxypass.com/ppass.php?page=contact and we'll get you up and rolling.

Best regards,

PxG




:thumbsup

by FAR the best is proxypass... I have 30 sites on PXP and they are all GOLDEN... for stupid reasons one of my sites runs iprotect and I have to babysit it all the time! its cheaper than pennywize too and WAY hassle free

We have Protector PRO, if you need something like Pennywize, just try it: http://wmcgi.com/protector/

chances are VERY HIGH it's your processor scripts. the old epoch script and the old jettis (was identical to epoch's a while back) had some severe holes in them. they'd allow random people to add users at any time.

but that's really the least of your trouble.

they also allow anyone to modify anything on your site, that can be written to by your CGI user.

others have had holes as well.

contact your processors, make sure that you're using the latest scripts. that's for everyone! not just the guy who started the thread. it could save you tons and tons of grief.

Use monster script by sentry

come back and say that after another six months of getting raped by the "hackers" who have no other skill except using fraudulent checkS info to get into your site....

I just got a rejection email from ccbill about a dude who tried to sign up with a credit card with insufficient funds.....He used to rape me every fucking week with the check shit...then he would post the password and then EMAIL ME to brag about how there was nothing I could do about it...

I loved sending him that email cussing him out yesterday...now that there are no checks on my site, he can't do SHIT......

ProxyPass