Follow-ups Cookies [was Re: BadBehavior] BadBehavior January 31, 2016, 10:20:31 pm As I've said a couple of times now, I'm rewriting BadBehavior to be more object oriented, maybe fix some bugs, and add tests. Big thing is I want it to be cleaner code.https://github.com/joshuaadickerson/BadBehavior
Re: BadBehavior Reply #1 – February 01, 2016, 04:00:01 am It would be incredibly helpful if people could post their BadBehavior log and especially helpful if I could get the access log entry (including IP, user agent, a request string) for any SPAM that gets through BB. It would be way too much to log headers but that would be awesome. Maybe I'll setup a honeypot forum for that.
Re: BadBehavior Reply #2 – February 01, 2016, 05:32:32 pm I can provide any info you need if this can help, but how do I export my log? From phpmyadmin?PM me your email address and I'll send it
Re: BadBehavior Reply #4 – February 02, 2016, 04:06:25 am Hmm... do we require a cookie to be logged in or can it be done just by rewriting the session string on the links?Reason I ask is because if we create a cookie and then check for that cookie, on POST, that is an easy way of stopping bots. I think most bots don't allow cookies to be saved.
Re: BadBehavior Reply #5 – February 02, 2016, 04:09:01 am I am thinking about writing some scrapers and "bots" to test people's strategies.
Re: BadBehavior Reply #6 – February 02, 2016, 09:51:42 pm Hmm, you might actually want to update the core of that, it got updated as well and can surely save some work.
Re: BadBehavior Reply #7 – February 02, 2016, 10:10:25 pm Thanks. The only thing that I don't have that the download has is all of the extraneous plugin stuff. All of that will be stripped out and put in its own repo at some point after I get it working and get composer setup properly. At that point, it will be found in my repos as [joshuaadickerson/] BadBehavior-ElkArte, BadBehavior-Wordpress, BadBehavior-Mediawiki so plugins can be maintained on their own.
Re: BadBehavior Reply #9 – February 03, 2016, 03:53:41 pm @radu81 I sent you a PM with my email. If you sent me the dump already it might have gone to SPAM. Let me know what email address you're sending from if so.
Re: BadBehavior Reply #10 – February 03, 2016, 04:26:30 pm I replied yesterday, as soon as I got your email address. My email is radu*****com. Should I resend the email?
Re: BadBehavior Reply #11 – February 03, 2016, 04:33:49 pm I just sent you an email. If you get it, it might be easier to just reply to it so it gets passed the SPAM filters.
Re: BadBehavior Reply #12 – February 03, 2016, 04:37:17 pm That's very strange, I did not receive it I sent you a PM
Re: BadBehavior Reply #13 – February 03, 2016, 04:41:53 pm Quote from: radu81 – February 03, 2016, 04:37:17 pmThat's very strange, I did not receive it I sent you a PMGot it. Thanks.
Re: BadBehavior Reply #14 – February 07, 2016, 04:12:05 pm Looking at a couple of logs, it appears http:BL is very valuable. It stops a lot of spammers and scrapers.