Spoofing. Best way to stop it.
 

I seem to have a problem with spoofers, who get past my .htaccess like it isn't there.

Whats the best method to stop them accessing the members area?

Serious answers please!:Graucho

cheers

bump.
no one know how to stop spoofing?

Is it for an AVS site? I don't think there is really any other generic way to protect your members area - the AVS would need to pass control to a script on your site with some sort of key that validates the surfer. Authenticating by referer is a nice and clean way to do it as it's all done with a few lines of .htaccess without needing scripts on your side, but as you can see it's virtually useless these days.

If you control the login page then you could move to a form+cookie based login, or stick with good old HTTP basic auth.

Look into cookies, something that checks that they have permission because they've already gone through your "gateway", if they dont, 403. Session management cookies might do it.

basically its all my remaining members that signed up through ACPay. There are only about 150 members left that go through the acpayscript to enter my site.

If I added all these remaining ACPay members to my CCBill password file and removed the acpay from my htaccess file would that stop the problem?

Of course I would have to remove the acpay members by hand as they cancelled, but if it stopped the problem its worth it.

:1orglaugh

Did acpay use referer based authentication? Ouch, that's a HUGE hole for a 'real' paysite!! Yes, you'll probably save more bw in the long run by using proper authentication, even if your members get a week or two extra.

If ccbill allows you to 'deep link' products then email your acpay members a hidden URL that gives them a special rate for defecting from acpay to ccbill.

Personally I don't want to move the ACPay members to another processor, as it was the best processor out there for its short life.

Looks like I will have to get them to change the auth so that the hole is filled in. I wondered why my servers were getting a bit slow over the last 24 hours. It was filled up with fucking hahahahaing gate crashers!:mad: :feels-hot :1orglaugh