MyBB Community Forums

I let you all into a little secret, This is free and it works superb !!

* XSS protection
* UNION SQL Injection protection
* Bads bots protection
* Bads requests methods protection
* Small DOS protection
* Inclusion files protection
* Santy and others worms protection
* Server Protection
* URL Query protection
* Cookies sanitize
* Post vars sanitize
* Get vars sanitize
* IPs range reserved denied
* IPs range spam denied
* IPs protected
* Unset globals PHP var

been using it since it was released works on any MyBB version

get it here http://www.php-firewall.info/

upload folder then add this to global.php after < ?php

define('PHP_FIREWALL_REQUEST_URI', strip_tags( $_SERVER['REQUEST_URI'] ) );
define('PHP_FIREWALL_ACTIVATION', true );
if ( is_file( @dirname(__FILE__).'/php-firewall/firewall.php' ) )
	include_once( @dirname(__FILE__).'/php-firewall/firewall.php' );

Intriguing indeed, I will take a look through this.

I'm curious though, this does not increase load and such in a notable way ? ( You'll have it installed, but everything will work fine and no difference in performance for a human eye ? )

Nothing's changed for me.

(2010-08-22, 11:45 PM)laeresh Wrote: [ -> ]I'm curious though, this does not increase load and such in a notable way ? ( You'll have it installed, but everything will work fine and no difference in performance for a human eye ? )

It doesn't have any SQL or nothing linked to it. When your server starts executing queries is when you should worry about loads and performance changes. I haven't noticed too much of a speed change and it very well does a few of its stated jobs. Still looking through it.

Hmm very interesting, might have a look at integrating this with my site tomorrow (:

Thanks for sharing. I'm now using this on my forum.

All thanks go to Cryil Levert (author) i think for an awesome tool

Glad your all happy...........

It doesn't protect things that much..

Fair comment, but it protects more than a standard MyBB install...

even if they get through they are bound to trip it off trying.. and be logged