защита - phpbb 2.0.23

ddevil · 9 Юни 2009

Имали мод / код , който да защити phpbb 2.0.23 от хакове ?

KlaXeN · 9 Юни 2009

Единствената защита е да премахнеш качването на дб през админ панела. За други защити не ти трябват освен за анти спам.

0u7 · 9 Юни 2009

http://www.phpbb-bg.org/viewtopic.php?f=29&t=358

federer_11 · 10 Юни 2009

www.phpbbhacks.org :?:

Little_Bitch · 10 Юни 2009

config.php

Код:

<?php

session_start();
function za6titi($tekst)
{
if ( (int)$tekst )
return $tekst;
else
{
$tekst = addslashes($tekst);
$tekst = htmlspecialchars($tekst, ENT_NOQUOTES);

return $tekst;
}
}

$_GET = array_map("za6titi", $_GET);
$_POST = array_map("za6titi", $_POST);
$_SESSION = array_map("za6titi", $_SESSION);
$_COOKIE = array_map("za6titi", $_COOKIE);
$_SERVER = array_map("za6titi", $_SERVER);

// phpBB 2.x auto-generated config file
// Do not change anything in this file!

$dbms = 'mysql4';

$dbhost = 'localhost';
$dbname = 'dbname';
$dbuser = 'dbuser';
$dbpasswd = 'db password';

$table_prefix = 'phpbb_';

define('PHPBB_INSTALLED', true);



?>

404.php

Код:

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<HTML>
<HEAD>
<TITLE>404 Not Found</TITLE>
</HEAD>
<BODY>
<H1>Not Found</H1>
</BODY>
</HTML>

.htaccess

Код:

<Files ~ "^\.ht"> 
Order allow,deny 
allow from all

</Files> 

ErrorDocument 404 /404.php 


<IfModule mod_rewrite.c> 
RewriteEngine On 
RewriteCond %{QUERY_STRING} union [NC,OR] 
RewriteCond %{QUERY_STRING} select [NC,OR] 
RewriteCond %{QUERY_STRING} truncate [NC,OR] 
RewriteCond %{QUERY_STRING} == [NC,OR] 
RewriteCond %{QUERY_STRING} =, [NC,OR] 
RewriteCond %{QUERY_STRING} <script> [NC,OR] 
RewriteCond %{QUERY_STRING} =' [NC,OR] 
RewriteCond %{QUERY_STRING} %27 [NC,OR] 
RewriteCond %{QUERY_STRING} drop [NC,OR] 
RewriteCond %{QUERY_STRING} update [NC] 
RewriteRule .* %{REQUEST_URI}? [R,L] 
</IfModule> 


<IfModule mod_rewrite.c> 
RewriteEngine on 
RewriteCond %{HTTP:VIA}                 !^$ [OR] 
RewriteCond %{HTTP:FORWARDED}           !^$ [OR] 
RewriteCond %{HTTP:USERAGENT_VIA}       !^$ [OR] 
RewriteCond %{HTTP:X_FORWARDED_FOR}     !^$ [OR] 
RewriteCond %{HTTP:PROXY_CONNECTION}    !^$ [OR] 
RewriteCond %{HTTP:XPROXY_CONNECTION}   !^$ [OR] 
RewriteCond %{HTTP:HTTP_PC_REMOTE_ADDR} !^$ [OR] 
RewriteCond %{HTTP:HTTP_CLIENT_IP}      !^$ 
RewriteRule ^(.*)$ - [F] 
</IfModule> 


<IfModule mod_rewrite.c> 
RewriteEngine on 
RewriteBase / 
RewriteCond %{HTTP_USER_AGENT} anonymous [NC] 
RewriteRule ^.* - [F,L] 
</IfModule> 

<IfModule mod_rewrite.c> 
RewriteCond %{HTTP_REFERER} ^http://.*anonymous.*$ [NC] 
</IfModule> 


<Limit GET> 
   Order allow,deny 
   Allow from all 
   Deny from 67. 
   Deny from 64. 
</Limit> 
<Limit POST> 
   Order allow,deny 
   Allow from all 
   Deny from 67. 
   Deny from 64. 
</Limit> 

#------ blok na botowete!------------ 
RewriteEngine on 

RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK) 

RewriteCond %{HTTP_USER_AGENT} ^arachnofilia*   [OR] 
RewriteCond %{HTTP_USER_AGENT} ^aspseek*   [OR] 
RewriteCond %{HTTP_USER_AGENT} ^bot*      [OR] 
RewriteCond %{HTTP_USER_AGENT} ^check*      [OR] 
RewriteCond %{HTTP_USER_AGENT} ^crawl*       [OR] 
#RewriteCond %{HTTP_USER_AGENT} ^google*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^infoseek*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^inktomi*    [OR] 
#RewriteCond %{HTTP_USER_AGENT} ^netoskop*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^NetSprint*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^openfind*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^roamer*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^robot*       [OR] 
RewriteCond %{HTTP_USER_AGENT} ^rover*       [OR] 
RewriteCond %{HTTP_USER_AGENT} ^scooter*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^search*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^siphon*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^slurp*       [OR] 
RewriteCond %{HTTP_USER_AGENT} ^spider*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^sweep*       [OR] 
#RewriteCond %{HTTP_USER_AGENT} ^szukaj*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^walker*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^WebStripper*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^wisenutbot*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^gulliver*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^validator*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^yandex*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^moget@*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^teomaagent*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^infoNavirobot*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^PPhpDig*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^gigabaz*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Webclipping.com*   [OR] 
RewriteCond %{HTTP_USER_AGENT} ^RRC*       [OR] 
RewriteCond %{HTTP_USER_AGENT} ^netmechanic*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Wget*       [OR] 
#RewriteCond %{HTTP_USER_AGENT} ^GetRight*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^BackWeb*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Bandit*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^BlackWidow*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Buddy*       [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Collector*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Copier*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Downloader*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^FileHound*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Grabber*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^HTTPClient*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^HTTrack*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Mirror*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Offline*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Recorder*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Sauger*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Snagger*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Snake*       [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Stripper*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Sucker*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^SuperBot*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Surfbot*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Teleport*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^WebReaper*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^WebSpider*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^WebZIP*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Zyborg*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Pockey*                 [OR] 
RewriteCond %{HTTP_USER_AGENT} ^QRVA*                   [OR] 
RewriteCond %{HTTP_USER_AGENT} ^WebMiner*               [OR] 
RewriteCond %{HTTP_USER_AGENT} ^WebCopier*              [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Web\ Downloader*        [OR] 
RewriteCond %{HTTP_USER_AGENT} ^WebMirror*              [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Anarchie*               [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Mass\ Down*             [OR] 
RewriteCond %{HTTP_USER_AGENT} ^WebStripper*            [OR] 
RewriteCond %{HTTP_USER_AGENT} ^WebHook*                [OR] 
RewriteCond %{HTTP_USER_AGENT} ^EmailSiphon         [OR] 
RewriteCond %{HTTP_USER_AGENT} ^EmailWolf            [OR] 
RewriteCond %{HTTP_USER_AGENT} ^ExtractorPro         [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Mozilla.*NEWT        [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Crescent             [OR] 
RewriteCond %{HTTP_USER_AGENT} ^CherryPicker         [OR] 
RewriteCond %{HTTP_USER_AGENT} ^[Ww]eb[Bb]andit      [OR] 
RewriteCond %{HTTP_USER_AGENT} ^WebEMailExtrac.*     [OR] 
RewriteCond %{HTTP_USER_AGENT} ^NICErsPRO            [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Telesoft             [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Zeus.*Webster        [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Microsoft.URL        [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Mozilla/3.Mozilla/2.01    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^EmailCollector      [OR] 


RewriteCond %{HTTP_USER_AGENT} ^Szukacz/1.5.*    [OR] 
RewriteCond %{HTTP_USER_AGENT} ^Zyborg/1.0.* 
RewriteRule ^.*$ http://www.google.com   [L]

защита - phpbb 2.0.23

ddevil

Registered

KlaXeN

Registered

0u7

Registered

federer_11

Registered

Little_Bitch

Registered