Potential IP Banning Contribution

[Admiral Keth]

After reading about how some OSCommerce admins experienced spiders which crawled their site and created multi-thousand dollar carts, I though it might be a good idea to implement some kind of blocker.

 

I liked Manuel Muzas's Ban IP concept. However, I am creating a system for someone else, thus they needed the ability to add, delete, and modify banned IP addresses without having to directly edit a file.

 

I determined that the structure and methodolgy of the manufacturers.php was almost what I needed, so I tinkered with it and came up with The IP Banning Contribution.

 

You can now add, modify, and delete banned IP addresses from the Admin Control Panel. That's pretty much it.

 

I'd like a couple of people to give it a try prior to public consumption. Read the instructions, install it on a non-critical system, and generally see where I've made errors. I'm no slouch at PHP/MySql, so I think it is moderately solid. Constructive criticism is welcome, but keep in mind that I don't intend to take this contribution much further than it is in its current state.

 

This is installed and tested on MS1, but should work for MS2.

 

I have uploaded it to here for convenience.

 

I'll be on- and off-line throughout the next week (really hectic schedule), but I'll try and respond as time permits.

[Guest]

I am game....I will try over the weekend and let you know.

[Admiral Keth]

By the by, this works well when also using BURT's Purchaser IP Address contribution. It then effectively allows you to identify offenders once they have posted one or more orders, then ban them.

 

I do realize that many people have DHCP addresses, that IP's can be spoofed, and that blocking a specific address may actually screen a large number of people, but I take the approach of safe versus sorry.