So, Someone posted this url in another thread.
http://www.phpgenious.com/2009/03/block-proxy-servers-using-htaccess/
I Feel this deserves a suggestion of it's own.
Or perhaps this would be better forwarded to an admin instead, since this has to do with website security, and not the community.
Perhaps this could be implemented.
While I DO recognize that proxies can be undetectable, the mainstream HTTP proxy would be blocked by this, making is much harder for a casual abuser to use a proxy on sythe.
I know nothing about HTACCESS, however at a glace it appears to me that this method has to do with how the connections are formed, and blocking them at that point.
I'm posting here to call administrator attention to this possible security improvement.
Also: I just tested it, you can easily register with any http proxy (I Didn't complete it totally, but I made it to the second page then stopped.)
~ Kerr
Please no "Support" or "Yea Sounds like a good idea" posts, Only post if you know htaccess and have something important to say about this.
http://www.phpgenious.com/2009/03/block-proxy-servers-using-htaccess/
I Feel this deserves a suggestion of it's own.
Or perhaps this would be better forwarded to an admin instead, since this has to do with website security, and not the community.
Article said:Block Proxy Servers using .htaccess
March 10, 2009 admin 9 Comments and 0 Reactions
Hello Friends !!
We all know about spamming.
In my last post we can block IP address using .HTACCESS. But suppose proxy server used for spamming then what will you do ? In using proxy server, every time IP address changed.
Generally hackers are also use proxy servers to hack the site.
Don’t worry about this. I found some code of .HTACCESS which blocks proxy servers to access your site.
How to Block Proxy Servers
This code help you to block proxy servers to access your site.
RewriteEngine on
RewriteCond %{HTTP:VIA} !^$ [OR]
RewriteCond %{HTTP:FORWARDED} !^$ [OR]
RewriteCond %{HTTP:USERAGENT_VIA} !^$ [OR]
RewriteCond %{HTTP:X_FORWARDED_FOR} !^$ [OR]
RewriteCond %{HTTPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:XPROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:HTTP_PC_REMOTE_ADDR} !^$ [OR]
RewriteCond %{HTTP:HTTP_CLIENT_IP} !^$
RewriteRule ^(.*)$ – [F]
You have to simply copy this code into your site̢۪s root htaccess file.
Upload to your server, and test it. If any problem then comment me.
Original article by Perishable Press: http://perishablepress.com/press/2008/04/20/how-to-block-proxy-servers-via-htaccess/
Thanks….
Posted in: HTACCESS, PHP Tags: .HTACCESS Tips
Perhaps this could be implemented.
While I DO recognize that proxies can be undetectable, the mainstream HTTP proxy would be blocked by this, making is much harder for a casual abuser to use a proxy on sythe.
I know nothing about HTACCESS, however at a glace it appears to me that this method has to do with how the connections are formed, and blocking them at that point.
I'm posting here to call administrator attention to this possible security improvement.
Also: I just tested it, you can easily register with any http proxy (I Didn't complete it totally, but I made it to the second page then stopped.)
~ Kerr
Please no "Support" or "Yea Sounds like a good idea" posts, Only post if you know htaccess and have something important to say about this.
