View Single Post
  #31  
Old 06-06-2008, 12:07 AM
 
Scotty85 Scotty85 is offline
 

Advanced Member
  
Join Date: Mar 2008
Posts: 94
 

Default Re: [PATCH] Blocking those pesky hackers

I got it.... for those interested...

In /auth.php change this:
Quote:
if(strpos($v, 'http://')!==false) {

To this:
Quote:
if(strpos($v, 'http')!==false) {

Change:
Quote:
func_add_ip_to_slist($REMOTE_ADDR, 'H');
To this:
Quote:
func_add_ip_to_slist($REMOTE_ADDR, 'M');

Change:
Quote:
if($stop_list = func_query("SELECT * FROM $sql_tbl[stop_list] WHERE ip LIKE '$REMOTE_ADDR' AND reason = 'H'")) {
To this:
Quote:
if($stop_list = func_query("SELECT * FROM $sql_tbl[stop_list] WHERE ip LIKE '$REMOTE_ADDR' AND reason = 'M'")) {


Please note that this is AFTER you apply the patches from the original poster. (this is on a Windows 2003 server.... since it doesn't use the .htaccess file, this is easier than going into IIS everytime you wanna add a blocked IP)
The 'H' and 'M' reflect whichever admin account you normally use to add your blocked IPs. Having it the same as what the mod uses, it covers the ones you add manually as well.

Thanks again for a very cool mod!


Scotty
__________________
Xcart Version 4.1.9
Upgraded to 4.1.10 (clean install with mods added back)
Reply With Quote