SID Killer

[Aodhan]

Is the SID killer already a part of MS2? If not, which version is recommended for MS2?

 

Thanks, all!

 

Aodhan

[Aodhan]

bump

[Guest]

follow forum rules, bumping not allowed

[Guest]

search contributions for killer, htlps all of us if a search is performed first

[Aodhan]

Thanks, I had forgotton bumping wasn't allowed. And, I can find the contributions section.

 

My question was, is it already incorporated in MS2? And if not, which of the two or three SID killers is generally recommended?

 

Aodhan

[Goanna]

there is a section in the MS2 admin that says Allow Spiders and gives you true or false values. Is that what you want to know?

[Aodhan]

there is a section in the MS2 admin that says Allow Spiders and gives you true or false values. Is that what you want to know?

I'm not actually sure. My last experience with OsC was previous to MS1 release. I sold that store and am working on a new one, and I didn't know if the SID Killer (Ian's at the time) had been incorporated, or if I needed to add it in along with the other contributions that I'm adding. I saw that menu option in the admin, but I didn't know if it was that mod.

 

Thanks for your reply!

 

Aodhan

[Zima]

I am using osCommerce 2.2-MS2 . My settings in Admin are Not to allow Spider sessions. That seems to eliminate SIDs when I test the site using the Firebird browser to simulate googlebot (trick from another thread).

 

Other bots (looksmart crawler) still have the SID when I view in who's online.

 

I have read almost every thread on SID killers and I get more confused the more I read.

 

So is there an SID Killer contribution for MS2.2? Any recommendations?

 

(I don't want to force cookie use.)

 

Any suggestions will be greatly appreciated.

 

Zima

[♥MYC267]

I installed a SID Killer on my MS2.2 and I experienced logging in problems so I had to remove it. I am also interested to know if MS2.2 comes with a SID killer in built and if not what contribution to install that will work.

[mitchd]

FWIW, the 2.2-ms3-cvs from early januaray 04 I have installed came with spider checks.

 

Here's how it works:

 

osC checks for the setting mentioned earlier in this thread, SESSION_BLOCK_SPIDERS, if true it compares the the user agent against a flatfile located at DIR_WS_INCLUDES/spiders.txt (e.g. catalog/includes/spiders.txt by default) and only starts the session if the user agent making the request is not listed in that file.

 

This is only checked if SESSION_FORCE_COOKIE_USE is not true.

 

from <catalog_path>/includes/application_top.php (line 143 for me):

} elseif (SESSION_BLOCK_SPIDERS == 'True') {
   $user_agent = strtolower(getenv('HTTP_USER_AGENT'));
   $spider_flag = false;

   if (tep_not_null($user_agent)) {
     $spiders = file(DIR_WS_INCLUDES . 'spiders.txt');

     for ($i=0, $n=sizeof($spiders); $i<$n; $i++) {
       if (tep_not_null($spiders[$i])) {
         if (is_integer(strpos($user_agent, trim($spiders[$i])))) {
           $spider_flag = true;
           break;
         }
       }
     }
   }

   if ($spider_flag == false) {
     $osC_Session->start();
   }

 

 

Zima:

 

It looks like looksmart's bot is ZealBot which is not in my spiders.txt. If you have that setting in your admin for ms2.2 you probably have the same code in application_top.php. You might want to double check that and have a look at your spiders.txt.

 

Oh, and I'm pretty sure strpos is case-sensitive, so keep everything in spiders.txt lowercase.

 

 

Hope that helps,

 

Mitch

[Zima]

Thanks Mitch. I added zealbot to the spiders.txt file.

 

That said, does anybody have a current list of the most common/popular bots we should be worried about..? i.e top 40?