Home Private Messages Search
CPG Dragonfly™ CMS Dedicated Server & Bandwidth Sponsored by DedicatedNOW
Toggle Content
 
Forums ⇒ DragonflyCMS ⇒ Explain Please :: Archives ⇒ 9.1.1 Security Feature - About Flood Protection: :: Archived


9.1.1 Security Feature - About Flood Protection: :: Archived
Ask questions and read explanations on how to use things/settings or why "X" is on page "Y."
Go to page Previous  1, 2
Post new topic    Revive this topic    Printer Friendly Page     Forum Index ⇒  Explain Please

Topic Archived View previous topic :: View next topic  
Author Message
Kendle
500+ Posts Club
500+ Posts Club

Offline Offline
Joined: Dec 16, 2004
Posts: 552

PostPosted: Sat Feb 03, 2007 2:40 pm
Post subject: Re: 9.1.1 Security Feature - About Flood Protection:

BrokenCrust wrote:
Whilst I don't want to be flooded, I don't want a system that requires users to navigate slowly. People will not put up with it and go elsewhere.

Ditto. How do I disable this feature? I feel it's my choice as webmaster how often I allow users to click.

edit: I commented out the call to Security::_flood() in the check function of security.php, seems to have done the trick, but it'd be nice to have an Admin panel option to turn off flood protection.

_________________
Gaming League / Cup - www.leaguecms.co.uk :: Other DragonFly modules - www.cmsdreams.co.uk

Kendle's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
Back to top
View user's profile Visit poster's website
xfsunoles
XHTML Specialist
XHTML Specialist

Offline Offline
Joined: Apr 30, 2004
Posts: 2502
Location: Melbourne, Florida
PostPosted: Sat Feb 03, 2007 3:11 pm
Post subject: Re: 9.1.1 Security Feature - About Flood Protection:

Kendle wrote:
BrokenCrust wrote:
Whilst I don't want to be flooded, I don't want a system that requires users to navigate slowly. People will not put up with it and go elsewhere.

Ditto. How do I disable this feature? I feel it's my choice as webmaster how often I allow users to click.

edit: I commented out the call to Security::_flood() in the check function of security.php, seems to have done the trick, but it'd be nice to have an Admin panel option to turn off flood protection.

Did your look in Admin > Security?

_________________

Firefox is my Favorite Browser

xfsunoles's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
Apache/1.3.34 (Unix)/4.0.25-standard/4.4.1/CVS
Back to top
View user's profile Visit poster's website AIM Address MSN Messenger Yahoo Messenger Photo Gallery
Kendle
500+ Posts Club
500+ Posts Club

Offline Offline
Joined: Dec 16, 2004
Posts: 552

PostPosted: Sat Feb 03, 2007 4:49 pm
Post subject: Re: 9.1.1 Security Feature - About Flood Protection:

LOL, what an idiot ! Whistling Thanks !!!

_________________
Gaming League / Cup - www.leaguecms.co.uk :: Other DragonFly modules - www.cmsdreams.co.uk

Kendle's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
Back to top
View user's profile Visit poster's website
FishySteve
Gold Supporter
Gold Supporter

Offline Offline
Joined: Apr 21, 2004
Posts: 158
Location: Australia
PostPosted: Fri Feb 09, 2007 11:16 pm
Post subject: Re: 9.1.1 Security Feature - About Flood Protection:

I've just turned mine off also, I had 1 user email me asking "what the hell why have you banned me?" but what was more of a worry were the 15 people that didn't email me.. I hope they come back..
Great feature, I think it may just need a little tweaking?
Cheers


FishySteve's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
Linux(Unix) - Apache/1.3.34 - MySQL Client API version 4.1.21 - PHP Version 4.4.2 - Perl Version 5.8 - DF 9.0.6.1
Back to top
View user's profile Visit poster's website Photo Gallery
rhuian
Newbie
Newbie

Offline Offline
Joined: Jan 15, 2007
Posts: 10

PostPosted: Fri Feb 16, 2007 1:52 pm
Post subject: Re: 9.1.1 Security Feature - About Flood Protection:

This may have been mentioned already but if you change to the default theme you will be able to delete the banned addresses with out having to hit the database. Something is missing in most custom themes and the ability to select ips to delete gets lost.

_________________
www.vmailishot.com
sap.noxordo.com


rhuian's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
Redhat E3/Apache 2.0.46/ MySQL 4.1.22/PHP 4.3.2/CPG 9.1.1
Back to top
View user's profile Visit poster's website
Phoenix
• Many Posts •
• Many Posts •

Offline Offline
Joined: Apr 19, 2004
Posts: 8799
Location: Netizen
PostPosted: Fri Feb 16, 2007 7:59 pm
Post subject: Re: 9.1.1 Security Feature - About Flood Protection:

What may be missing from custom themes is templates, though correctly designed themes should pick up the default module/admin templates (block templates are a different can or worms).

_________________
DonationsPro for DragonflyCMS, SMF, MyBB, vBulletin

Phoenix's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
Back to top
View user's profile Visit poster's website Photo Gallery
Sweetbomb
Newbie
Newbie

Offline Offline
Joined: Jan 07, 2007
Posts: 37
Location: Rhode Island
PostPosted: Thu Mar 29, 2007 4:04 pm
Post subject: Re: 9.1.1 Security Feature - About Flood Protection:

Howdy all,

I have users that are banned as well... I can not see how to remove them from within the database I have checked for the IP's and I do not see anything that looks like thier IP's within the database..

Also I have gone to Flooding details and I do not see any where to unban the IP's from within there as well.. I have upgraded to the latest version of Dragonfly as well...

Any help is much appreciated.

Regards,

_________________
-- The only easy day was yesterday! --

Sweetbomb

Sweetbomb's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
Linux - 2.6.14.7/MySQL - 4.1.20/PHP 4.3.11/DF - 9.1.2.1
Back to top
View user's profile Visit poster's website
sarah
Debugger
Debugger

Offline Offline
Joined: Mar 25, 2005
Posts: 2130

PostPosted: Thu Mar 29, 2007 5:49 pm
Post subject: Re: 9.1.1 Security Feature - About Flood Protection:

Are the templates uploaded to themes/[yourtheme]/template/admin/security/?

The IP addresses are expressed in the database as decimal not dotted decimal, so they won't be easy to recognize unless you translate the one you are looking for. Sorting the records by ban_time or ban_details might help locate the record you're looking for.

_________________
Diagon Alley - Top Design

sarah's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
Linux/1.3.37/4.1.21-standard/4.4.4/9.1.1
Back to top
View user's profile Send e-mail Visit poster's website
ladybugh
Newbie
Newbie

Offline Offline
Joined: Dec 31, 2005
Posts: 25
Location: Canada
PostPosted: Sat Mar 31, 2007 10:14 pm
Post subject: Re: 9.1.1 Security Feature - About Flood Protection:

Wow...I just upgraded to 9.1.2.1 and am having this problem with two of my family members accounts. Now I just was looking into it ..and for some reason, when the error first pops up - it says warning, so you click the link for the back button and it is this that it causing you to get the second warning. Then if you click the "go home" or "back" links then you will get a final warning.

I was able to remove the banned IPs by accessing the mysql database - but would be nice if I could get it to work in the admin menu without getting this error.

Now I am having problems in that I cannot change my theme back or in fact do any changes in settings without getting the "You tried to access this page through a bad link.."
Security Error


ladybugh's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
Linux /Apache 1.3.33/MySQL 4.1.11/ PHP 4.4.0/ Dragonfly 9.1.2.1
Back to top
View user's profile Visit poster's website
t31os
Supporter
Supporter

Offline Offline
Joined: Sep 22, 2004
Posts: 2025
Location: Somewhere in the intertubes... lolz
PostPosted: Sun Apr 01, 2007 11:46 pm
Post subject: Re: 9.1.1 Security Feature - About Flood Protection:

Definately needs some fine tuning, i've managed to get myself banned several times on a test site wether i'm logged in or not.

Its an inconvenience to have to unban myself from my own site.... all the same the idea is a very good one.

I don't blame people for turning it off, its causing more problems then its solving right now.


t31os's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
XP / 2.0 / 5.1 / 5.2 / none
Back to top
View user's profile Visit poster's website
ladybugh
Newbie
Newbie

Offline Offline
Joined: Dec 31, 2005
Posts: 25
Location: Canada
PostPosted: Sun Apr 01, 2007 11:50 pm
Post subject: Re: 9.1.1 Security Feature - About Flood Protection:

Definitely have to be careful. I got a warning here and oddly - I got "banned IP" on a site that I hadn't even been on in a year! And I only clicked once (dragonflied).


ladybugh's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
Linux /Apache 1.3.33/MySQL 4.1.11/ PHP 4.4.0/ Dragonfly 9.1.2.1
Back to top
View user's profile Visit poster's website
greenday2k
Forum Admin
Forum Admin

Offline Offline
Joined: Aug 11, 2005
Posts: 489
Location: CO
PostPosted: Mon Apr 02, 2007 1:37 am
Post subject: Re: 9.1.1 Security Feature - About Flood Protection:

In my site the security system works so fine.
It could fine the pssibility to ADD new Good Bots

_________________
www.greenday2k.net


greenday2k's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
Back to top
View user's profile Visit poster's website MSN Messenger Yahoo Messenger
xfsunoles
XHTML Specialist
XHTML Specialist

Offline Offline
Joined: Apr 30, 2004
Posts: 2502
Location: Melbourne, Florida
PostPosted: Mon Apr 09, 2007 6:21 pm
Post subject: Re: 9.1.1 Security Feature - About Flood Protection:

Back/Forward can trigger it.
This can happen to me without perfecting.

Forums > Viewforums > Viewtopic
Viewtopic < Viewforums > Viewtopic
Viewtopic < Viewforums > Viewtopic
Viewtopic < Viewforums < Forums Index
can Trigger Flood.. I got 2 flood requests less than 20 mins by doing that

Sad

_________________

Firefox is my Favorite Browser

xfsunoles's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
Apache/1.3.34 (Unix)/4.0.25-standard/4.4.1/CVS
Back to top
View user's profile Visit poster's website AIM Address MSN Messenger Yahoo Messenger Photo Gallery
NanoCaiordo
Developer
Developer

Offline Offline
Joined: Jun 29, 2004
Posts: 3878
Location: Melbourne, AU
PostPosted: Tue Apr 10, 2007 7:40 am
Post subject: Re: 9.1.1 Security Feature - About Flood Protection:

greenday2k wrote:
In my site the security system works so fine.
It could fine the pssibility to ADD new Good Bots

Report them to us and we will make them available at DragonflyCMS installation level.

_________________
.:: I met php the 03 December 2003 :: Unforgettable day! ::.

Linux 64bit / Apache 2.2 / PHP 5.4 / MySQL 5.5.22 / v9, v10
Linux 32bit / Apache 2.2 / PHP 5.3.10 / MySQL 5.5.22 / v9, v10
Windows 64bit / IIS 7.5 / PHP 5.3.10 / MySQL 5.5.22 / v9, v10


NanoCaiordo's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
mixed
Back to top
View user's profile Visit poster's website Photo Gallery
sarah
Debugger
Debugger

Offline Offline
Joined: Mar 25, 2005
Posts: 2130

PostPosted: Tue Apr 10, 2007 7:50 am
Post subject: Re: 9.1.1 Security Feature - About Flood Protection:

I'm going to have a big list of user-agents. (It's banning Blackberries and things like this when it's on.)

(This should probably go in Requests and Ideas but) what about a small log in the security admin panel.

This | banned for bad ip | option to remove ban | option to whitelist
Blackberry | banned for bad user-agent | option to remove ban | option to whitelist
Some IP | banned for flooding | option to remove ban | option to whitelist

Something like that.

_________________
Diagon Alley - Top Design

sarah's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
Linux/1.3.37/4.1.21-standard/4.4.4/9.1.1
Back to top
View user's profile Send e-mail Visit poster's website
Display posts from previous:   
Post new topic    Revive this topic    Printer Friendly Page    Forum Index ⇒  Explain Please
Page 2 of 2
All times are GMT
Go to page Previous  1, 2

Archive Revive
Username:
This is an archived topic - your reply will not be appended here.
Instead, a new topic will be generated in the active forum.
The new topic will provide a reference link to this archived topic.
 
   Toggle Content User Info

Welcome Anonymous

Nickname
Password
(Register)

   Toggle Content Last CVS commits
· Fixed .ico Expires header.
· Removed domain name from cookies so subdomains wont access them anymore.
· CSS and JS, case insensitives.
· CSS and JS, send correct HTTP 1.1 headers and fixed issues where themes and...
· Further security class improvements.
· 301 redirects on LEO changes
· Option to force 3xx http status codes
· Validate googlebot.com and google.com crawlers.
· CCBot
· Rss with etag and atom.

read more...

   Toggle Content Community

Support for DragonflyCMS in a other languages:

Deutsch
Español

   Toggle Content X-links
UltraEdit Browse Happy logo Firefox MySQL PostgreSQL Valid CSS! Valid XHTML 1.0! Unicode Encoded Badge NukeBiz Resources Raven DragonflyCMS Dedicated Now InsideSupport Lampe Berger

You are seeing squares or questionmarks on this page?

All content of this website is copyrighted by the Creative Commons NC-SA
The logos and trademarks used on this site are the property of their respective owners
We are not responsible for comments posted by our users, as they are the property of the poster.
Our server runs on a P3 1.2GHz with 512MB RAM with no accelerators
Support GoPHP5.org
Interactive software released under GNU GPL, Code Credits, Privacy Policy