need help with my paysite - i think password trading is happening
 

I run a paysite - www.chezchris.ca - and my traffic is through the roof! I think password trading is happening. So i shut down my members area while i figure things out.

Is there some code i can add to my .htaccess to prevent multiple ips from using the same passcode?

Also - i'm thinking of simply making it an avs site instead therefore allowing someone else to take on the processing etc. What avs sites have a real good .htaccess code to prevent my bandwidth from going crazy with hackers?


Chris

Man, just a buy a password protection script for 100 bucks.

Hey...sounds like you will need to write up a custome code...:(

either write or pay someone to write a small script to monitor your logs for accounts with multiple logins from different ips at the same time. when you find the account/s, change the pass and mail the owner the new pass.

you can hit me up on icq and i can help give you some direection depending on your setup

StrongBox

password sentry $60

use www.proxypass.com

what he said. been using pw sentry in its various versions for going on 4 years now, very solid and affordable solution. don't convert to an AVS site unless you like letting the lions' share of your profits go to someone else..

SHE

what is "throught the roof"? Try to isolate the user/pass that causing this and forward it to some autoinstalling trojans and 2 or 3 dialers, a few bookmark injectors and a homepage changer.

:2 cents:

bump for my bro chris :thumbsup

get a password protection... and dont let the users choose the password :) :thumbsup

OMG....dude! If you have a member base, the legit members are gonna be extremely pissed....not a good idea to cut them all off.

Get Password Sentry so you can monitor logins, set the # of IP's each user can have and get email alarms when a user is suspended .

I can't believe you cut off ALL your members though.....

Good luck with that

Ivy

try this......the best one we've used so far... http://webmastersguide.com/htaccess-cgi/strongbox/

:1orglaugh

Make it work for you!