typo3bloke.net

In this article I am going to discuss advanced guestbook spam blocking. "Advanced" means that techniques will require not TYPO3 configuration but compiling, configuring and installing additional server components. This article is intended to web server administrators who are not afraid to protect their customers by installing non-traditional software.

I have to put standard disclaimer here: this technique works well for me. However it may not work for you. It may block some of your customers...

While I was writing "Extended domains" extension, I thought that I should disable access to third-party IDNA library that I use. It is generally good not to allow anyone to access directly anything what they should not access. So I added a simple .htaccess file to the directory above IDNA library:

deny from all

I uploaded extension and looked into TER. And I realized that my .htaccess is not there. So I went looking into Extension Manager (EM) and discovered that EM by default disallows...

Usually I analyze security logs for my web server daily. And each day I see various haching attempts. While I do not understand what causes people doing it (this is not a political site!), I am very interested to see how they do it.