NEWS FLASH: ZB BLOCK IS EFFECTIVE AGAINST LATEST BOTS!

Now Protects from Casper Bot, MaMa CaSpEr Bot, plaNETWORK Bot, and their variants.

Through a new protection subsystem, ZB Block has over 40 new signatures to detect the BEHAVIOR of the latest "HTTP_POST" attack bot families. These behavior detections, along with the weaker but still important detections of the 9 most popular "HTTP_USER_AGENT" names, allow ZB Block to essentially kill off these bots. ZB Block is compatible with the most popular CMSes, Bulletin Boards, Forums, and PHP Scripts out there, and protects from thousands of older bots and exploits not only by name on some, but they way they attack YOUR site. Read more about ZB Block here: ZB BLOCK

Protection Scripts and Block Lists

Free Spam Protection and Hack Protection for your website.

IN a world where having a website opens you up to the pain of exploitation by robots, where your blog or CMS is ruthlessly loaded with spam, I decided that I should sit down, and write a php script that helps to stop this relentless suffering thrown at us. In the beginning Spambot Protection was one of my main goals, but became just as equally important was Hacking Protection.

Spambot Protection, and Hack Bot Protection are provided through ZB Block, mentioned below, and more on it's own page. This free script will signifigantly cut down the amount of sucessful comment, and post spam your site gets. It will also end known php exploits, plus many future script exploits due to intelligent inspection of accesses made to your site.

I hope you find my research useful... Please read on.

ZB BLOCK

Don't let the robots in the door!
A GPL V2 PHP Protection Script for your site.

This php security script is designed to detect certain behaviors detrimental to websites, or known bad addresses attempting to access your site. It then will send the bad robot (usually) or hacker an authentic 403 FORBIDDEN page with a description of what the problem was. If the attacker persists, then they will be served up a permanently recurring 503 OVERLOAD message with a 24 hour timeout.

What ZB Block is Excellent at:

  • Saves money by reducing hacker bandwith usage! (by 2,500% on this site's index page alone!)
  • Strengthing your site against defacement.
  • Preventing PHP script exploitation.
  • Ending Remote File Include (RFI) exploits.
  • Protecting against directory traversal attacks.
  • Stopping MySQL database injection and tampering.
  • Removing access from known bad addresses and domain names.
  • Blocking access from top level domains, like .cn (China) and .kp (North Korea).

What ZB Block is Good at:

  • Avoiding website scraping/content theft.
  • Deterring bad user agents.
  • Halting referrer spam.
  • Impeding some Cross Site Scripting (XSS) attacks.

ZB Block is also fast, not only does ZB Block check for over 100 million bad IPs/Hostnames and many thousands of bots, but standard execution times are around 1/10th of a second on an aged PIII 930, which is unnoticable to the web surfer. more...

Forum and Blog Safety

Why installing isn't the end of the job.

So you have your PHP/MySQL driven forum, cms website, estore,and or blog up and running. You are feeling pretty good, but the job is not done yet!

Let's go through some basic things important to all dynamically generated content on a website. Some dos, and don'ts.

  1. Re-read those dang install instructions (and act on them). Usually, for safety, there are some steps you need to take after installation, to make sure someone can't easily come along and mess up all your hard work. For instance, with PHP, this involves more...