Abuse

[skidpanda]

Hello there,

Recently i have been recieving alot of abuse on my sites guestbook - www.method-band.co.uk - Everytime someone signs the guestbook their name and IP address are sent to my email address as a notification.
This person's IP has stayed the same for a week now with every post, is there any standard protocol for stopping abuse like this ? can i report his/her IP to anyone that can find their email address them and ask them to stop?

I use a flash/PHP guestbook and i have no way of blocking IP's or whatever, i'm pretty new to this so excuse anything i'm saying wrong please :)

Thanks for any help with this annoying problem! I dont understand why total strangers have to be so nasty and do things like that.

Cheers!

Skid :nerd::)

[upuaut]

Sorry my friend.. I've no answers for you. Just wanted to write to say that I empathize with you. I had a similar problem a couple years back.. All I ended up doing was editing his posts every night until he got bored and stopped. That of course wont work on everyone. Good luck with it.

[lostinbeta]

You can do wonders with an IP address:evil:

But I am not going to get into that because my ideas are technically illegal. I used to mess with my friends comp all the time. And yes, his was the only one I messed with, I am a firm believer in treating others they way you would like to be treated and I do/will not "hack" computers without permission.

Other than that, the only think I can think of is IP Banning in PHP, but since I am still learning PHP I can't help you out much there. I didn't get up to that.

[skidpanda]

Ah well, I'll just keep on deleting his posts.

Thanks :nerd: :)

[RenaissanceGirl]

I can think of a quick fix! You can ban him permanently from your site using htaccess. A few months back, I had a very similar problem (someone kept leaving dirty comments in my weblog). I denied said IP from my domain entirely and the comments have stopped ever since. If you've never fiddled with htaccess before: you can find a tutorial here: htaccess tutorial (http://www.freewebmasterhelp.com/tutorials/htaccess/) . Specific instructions on IP banning here (http://www.freewebmasterhelp.com/tutorials/htaccess/2).

[lostinbeta]

Very good info to know, I get someone that sends multiple blank e-mails to me usign my e-mail form. They usually type something like "sldkfjaosidfaasdf" in the comments area and put false info in all the others. Now that I know I can use htaccess I will definitely try that out:evil:

[skidpanda]

wow, thanks alot RenaissanceGirl, thats exactly what i need :)

[Bezzer]

yeah u should kill the bastard!! hehe...you can just block that IP can't you? the problems come when you get people with rotating IP's (like me :)) its hard to block them because there ip changes everytime they conect...and if you block like 210.66.*.* you might block lots of people...and thats not good :) :P

[skidpanda]

Killing him sounds tempting, better not though.. :evil:

I think my IP address rotates too, but this person's seems to stay they same because their posts over the past week have all had the same IP.

I think its because their either on AOL or broadband, their IP's always stay the same i think?

Cheers :nerd: :)

[Raydred]

I really had not much to say other than, PHP is very cool. lol

yea i know, im pathetic!.



BTW, if ya need an Ip ban script in php, i have one i made =)

[skidpanda]

Wow that would be cool to see if you dont mind sharing ?:nerd:

[upuaut]

i love people who do open source. Something like that should be shared.. just for the sake of it. If you wouldn't mind raydred.. I'd love to have the script for that as well. I don't currently have a use for it, but I definitely would like it in my script library.

if you're willing to send it to me my email is upuaut@centerspin.com

[skidpanda]

ooo me 2 please! If you've got a spare minute :)

citcacca@yahoo.com

:nerd:

PS:

I havent got a bad post since i did that .htaccess file, BIG thanks to RenaissaceGirl :)

[Raydred]

alrighty, cool, Well so i dont forget,

could anyone who wants this script please e-mail a request (so i dont disappoint anyone =) ) and i'll get that script to skidpanda here by this weekend.. My e-mail address is raydred@raydred.com (nice and easy) =)

I love open source, and i feel that stuff like this should be shared. I'd rather help many people out and stop the bad misuse of the internet than gain monetary value for something that most people would overcharge for =)
(if that made sense.. hehe)

=)

[Raydred]

Alrighty Guys, I got the script here for the IP ban, so no need on emailing me to ask for it (unless you're having probs with the script).

here are the instructions:

All you have to do is to add the banned Ip's in its own variable..

$bannedip[0] = "0.0.0.0";
$bannedip[1] = "0.0.0.1";

and so on (its in the file and should be readable) =)

change the $redirect_url to whatever url you want,
then upload the php and whatever file you want to use it in, just put:

include("ipban.php");

OH and if it looks weird if you open it up in Notepad,
use wordpad to open it (on a windows system) and you'll see the formatting ok =)

Hope you enjoy this =)

[lostinbeta]

Wow Raydred. This file is incredibly simple yet complex. I would have never been able to write it myself considering I only know about half of the stuff in there (actually, maybe a little more than half).

Great job and I greatly appreciate this. I will study and learn from it:)

PS: If I am not mistaken, can't this script also be used to allow only select peoples IP address to enter a page. Like the banned IP address can become the allow IP addressed and the redirect URL could be the page they are allowed to view, where if they are not allowed to view, it would be the default page. This is, if I am not mistaken, because if it can be used like that, I have something I want to use it for.

[Raydred]

And you know what? Ive only been doing php for a few months, once you get it, its awesome. =)

oh and i use php.net alot for the manual, (sometimes cant remember everything) hehe =)

I hope you enjoy it =)

;) Oh and i rewrote that from scratch too =)

and yes it could easily be turned into an "allow" ip site..

i'd just do this, on the if statment just do this..


if($bannedIp[$i] == $tstIp){
do redirect..
}else{
do redirect away..
}

that should work =)

[lostinbeta]

Excellent work Raydred. I just started learning PHP like a month ago I guess. I haven't had much time to read up on it, so I haven't been learning for a month, just a day here and a day there when I actually have time to.

Can you recommend any good learning sources other than php.net?

[Raydred]

Hmm other resources..

yea phpbuilder.net is good too..

thats all i really use =) i mostly use php.net =)

[lostinbeta]

Thanks again Raydred=)

[Alex]

Ok, i have a quick question, i Recently got an email from a forum member, i was harrased, now, since he emailed me, how can i get his IP adress, so i can ban him from going to my site.

thanks for the awsome php script Raydred.

[skidpanda]

Hi,

The way I got the IP address of the guy that was annoying me was to get him to fill in a php form that got his IP. I had a PHP message board and everytime someone signs it I get their IP. I setup an email form to send the msg board data to my inbox everytime someone posted a msg.

The bit of PHP in the email form was:

$REMOTE_ADDR

If you can get the person to use a form with that code u can get their IP. Thing is if there on dial up the IP changes everytime they redial.
I blocked my guy using htaccess - he was on DSL and his IP remained the same all the time, so he couldnt get back on my site.. never heard from him again after that.. hehe

Hope that helps you out,

Cheers :)

[Alex]

the problem is that i donot have a php mail forum. im using a html one. Its on my site, www.alexsdesigns.net. under the contact page. He emailed me through that form.

thanks for helping:)

[ahmed]

create an access log that logs the ip+time... see when the email was sent and ban the IP's in the time range :beam:

If your servers supported php i could've given you the script i made for myself :)

[Alex]

i could always use tripod to upload it to :P

but i would need step by step instructions, because im stupid when it comes to PHP.lol
thanks ahmed

[UNFLUX]

probably too late but...

here's all that you need to ban ip's via an htaccess file. Simply
put this in and place the htaccess file at the root of your domain
on the server:

<Limit GET POST>
order allow,deny
allow from all
deny from 111.11.11.11
deny from 212.138.47.11
deny from 212.138.47.29
deny from 212.138.47.12
deny from 212.138.47.17
deny from 212.138.47.27
</Limit>
simply list the ip's you wish to ban with "deny from" (no quotes).
Hope this helps...

p.s. your server needs to support htaccess, of course ;)

[Bezzer]

If its an email you can set up your email client so that is shows you full headers...was the email from an email form on your site or from that persons email client?

[Alex]

i have a form on my web site. i tried to contact doteasy, and im going to ask them if there was a way that i could get the IP

[ahmed]

hey alex, did you get my email:q:

[Mik3]

I hate abusers! BUT I LKOVE YOUR SITE! JUST WANTED YOUT O KNOW! IT's great!

[Alex]

IshiXP- thanks


ahmed - i think that i will let this go, but if he comes back with another negative statement. i will take action from there, Thanks for your help though :P