Защита от Хакери

Ами те по принцип готовите системи са си добре защитени. Трябва да вземаш мерки когато ти си пишеш сайта.
Например като за начало виж тук:
http://web-tourist.net/login/login/view.php?st=2418
 
Както винаги ...

По принцип Форумите са лесни горе=долу може да го защитиш през .htaccess

Направил съм 1 общ който предпазва почти от всичко даже ако има желание някой да го сложи като урок:

Код: 
<Files ~ "^\.ht">
Order allow,deny
Deny from all

</Files>

ErrorDocument 404 /404.php


<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{QUERY_STRING} union [NC,OR]
RewriteCond %{QUERY_STRING} select [NC,OR]
RewriteCond %{QUERY_STRING} truncate [NC,OR]
RewriteCond %{QUERY_STRING} == [NC,OR]
RewriteCond %{QUERY_STRING} =, [NC,OR]
RewriteCond %{QUERY_STRING} <script> [NC,OR]
RewriteCond %{QUERY_STRING} =' [NC,OR]
RewriteCond %{QUERY_STRING} %27 [NC,OR]
RewriteCond %{QUERY_STRING} drop [NC,OR]
RewriteCond %{QUERY_STRING} update [NC]
RewriteRule .* %{REQUEST_URI}? [R,L]
</IfModule>


<IfModule mod_rewrite.c>
RewriteEngine on
RewriteCond %{HTTP:VIA}                 !^$ [OR]
RewriteCond %{HTTP:FORWARDED}           !^$ [OR]
RewriteCond %{HTTP:USERAGENT_VIA}       !^$ [OR]
RewriteCond %{HTTP:X_FORWARDED_FOR}     !^$ [OR]
RewriteCond %{HTTP:PROXY_CONNECTION}    !^$ [OR]
RewriteCond %{HTTP:XPROXY_CONNECTION}   !^$ [OR]
RewriteCond %{HTTP:HTTP_PC_REMOTE_ADDR} !^$ [OR]
RewriteCond %{HTTP:HTTP_CLIENT_IP}      !^$
RewriteRule ^(.*)$ - [F]
</IfModule>


<IfModule mod_rewrite.c>
RewriteEngine on
RewriteBase /
RewriteCond %{HTTP_USER_AGENT} anonymous [NC]
RewriteRule ^.* - [F,L]
</IfModule>

<IfModule mod_rewrite.c>
RewriteCond %{HTTP_REFERER} ^http://.*anonymous.*$ [NC]
</IfModule>


<Limit GET>
	Order allow,deny
	Allow from all
	Deny from 67.
	Deny from 64.
</Limit>
<Limit POST>
	Order allow,deny
	Allow from all
	Deny from 67.
	Deny from 64.
</Limit>

#------ blok na botowete!------------
RewriteEngine on

RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)

RewriteCond %{HTTP_USER_AGENT} ^arachnofilia*	[OR]
RewriteCond %{HTTP_USER_AGENT} ^aspseek*	[OR]
RewriteCond %{HTTP_USER_AGENT} ^bot*		[OR]
RewriteCond %{HTTP_USER_AGENT} ^check*		[OR]
RewriteCond %{HTTP_USER_AGENT} ^crawl* 		[OR]
#RewriteCond %{HTTP_USER_AGENT} ^google* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^infoseek* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^inktomi* 	[OR]
#RewriteCond %{HTTP_USER_AGENT} ^netoskop* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^NetSprint* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^openfind* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^roamer* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^robot* 		[OR]
RewriteCond %{HTTP_USER_AGENT} ^rover* 		[OR]
RewriteCond %{HTTP_USER_AGENT} ^scooter* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^search* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^siphon* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^slurp* 		[OR]
RewriteCond %{HTTP_USER_AGENT} ^spider* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^sweep* 		[OR]
#RewriteCond %{HTTP_USER_AGENT} ^szukaj* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^walker* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^WebStripper* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^wisenutbot* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^gulliver* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^validator* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^yandex* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^moget@* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^teomaagent* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^infoNavirobot* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^PPhpDig* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^gigabaz* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^Webclipping.com*	[OR]
RewriteCond %{HTTP_USER_AGENT} ^RRC* 		[OR]
RewriteCond %{HTTP_USER_AGENT} ^netmechanic* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^Wget* 		[OR]
#RewriteCond %{HTTP_USER_AGENT} ^GetRight* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^BackWeb* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^Bandit* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^BlackWidow* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^Buddy* 		[OR]
RewriteCond %{HTTP_USER_AGENT} ^Collector* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^Copier* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^Downloader* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^FileHound* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^Grabber* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^HTTPClient* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^HTTrack* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^Mirror* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^Offline* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^Recorder* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^Sauger* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^Snagger* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^Snake* 		[OR]
RewriteCond %{HTTP_USER_AGENT} ^Stripper* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^Sucker* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^SuperBot* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^Surfbot* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^Teleport* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^WebReaper* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^WebSpider* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^WebZIP* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^Zyborg* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^Pockey*                 [OR]
RewriteCond %{HTTP_USER_AGENT} ^QRVA*                   [OR]
RewriteCond %{HTTP_USER_AGENT} ^WebMiner*               [OR]
RewriteCond %{HTTP_USER_AGENT} ^WebCopier*              [OR]
RewriteCond %{HTTP_USER_AGENT} ^Web\ Downloader*        [OR]
RewriteCond %{HTTP_USER_AGENT} ^WebMirror*              [OR]
RewriteCond %{HTTP_USER_AGENT} ^Anarchie*               [OR]
RewriteCond %{HTTP_USER_AGENT} ^Mass\ Down*             [OR]
RewriteCond %{HTTP_USER_AGENT} ^WebStripper*            [OR]
RewriteCond %{HTTP_USER_AGENT} ^WebHook*                [OR]
RewriteCond %{HTTP_USER_AGENT} ^EmailSiphon   		[OR]
RewriteCond %{HTTP_USER_AGENT} ^EmailWolf         	[OR]
RewriteCond %{HTTP_USER_AGENT} ^ExtractorPro      	[OR]
RewriteCond %{HTTP_USER_AGENT} ^Mozilla.*NEWT     	[OR]
RewriteCond %{HTTP_USER_AGENT} ^Crescent          	[OR]
RewriteCond %{HTTP_USER_AGENT} ^CherryPicker      	[OR]
RewriteCond %{HTTP_USER_AGENT} ^[Ww]eb[Bb]andit   	[OR]
RewriteCond %{HTTP_USER_AGENT} ^WebEMailExtrac.*  	[OR]
RewriteCond %{HTTP_USER_AGENT} ^NICErsPRO         	[OR]
RewriteCond %{HTTP_USER_AGENT} ^Telesoft          	[OR]
RewriteCond %{HTTP_USER_AGENT} ^Zeus.*Webster     	[OR]
RewriteCond %{HTTP_USER_AGENT} ^Microsoft.URL     	[OR]
RewriteCond %{HTTP_USER_AGENT} ^Mozilla/3.Mozilla/2.01 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^EmailCollector		[OR]


RewriteCond %{HTTP_USER_AGENT} ^Szukacz/1.5.* 	[OR]
RewriteCond %{HTTP_USER_AGENT} ^Zyborg/1.0.*
RewriteRule ^.*$ http://www.google.com	[L]

Всичко добро във едно :) предпазва те от проксита,flood на сървъра,лоши ботове лимит на гет-пост заявки блокирване на почти всички USA Проксита и защита от SQL INJ частично.. до някаде ще те защити :) и направи 1 404.php пиши примерно в него

Код: 
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<HTML>
<HEAD>
<TITLE>404 Not Found</TITLE>
</HEAD>
<BODY>
<H1>Not Found</H1>
</BODY>
</HTML>

Да не ти се показва информацията на сървъра.. при желание може да се види де, но все пак.. :wink:
 
Страницата не пренасочва правилно



Firefox установи, че сървърът пренасочва заявките към този адрес по начин, който никога не може да приключи.


* Този проблем понякога се предизвиква от изключване или отказ от приемане на бисквитки.
 
И аз имам същия проблем.Както сложа това в .htaccess и не ми отваря сайта.Как да го оправя ?
 
Трябва да си влезнал или регистриран, за да отговориш тук.

Back
Горе