Recent Topics

1 Nov 25, 2007 23:38    

My b2evolution Version: 2.x

Is there a way I can do that? Yesterday I deleted about 400 "Direct-B" hits from my hitlog. No referer (of course) and a wide variety of IPs, but clearly some sort of malicious crap because all of them had "disp=http://something.ru" in them.

I don't think antispam will work because it is not showing up as a referer. In my .htaccess I use SetEnvIfNoCase to block undesirable 'User-Agent' and some 'Referer' visits. But this is a direct hit to a page that exists with a disp value that doesn't. So does anyone know how I can block a visitor who has "disp=http" in the requested URI?

v2.1.0

2 Nov 26, 2007 05:05


RewriteCond %{QUERY_STRING} disp=http [NC]
RewriteRule .* - [F]

That alone should cover it..

3 Nov 27, 2007 15:44

Thanks!

BTW I just found another one that decided on this tactic. Seems when I tested this earlier I either failed to upload it or for some reason deleted it. Anyway with this line in my .htaccess file I can not open one of these funky "direct" hits.

Case Closed!


Form is loading...