Here's the problem.
The number of internet forums is dwindling by the year.
That means their possible income stream is essentially drying up for companies that write forum software.
Software is hard and expensive to develop. It requires maintenance and security patches. User's tastes changes...
I paid for two years of license fees even though i never got a feature i needed. This is done in the interest of supporting the platform, knowing that software is difficult and expensive to do right. I would rather continue to see it just move, because that's essential for the survival of any...
Yeah i also picked Xenforo because it's desktop centric and pretty well milled down for mobile.
We shouldn't throw out about 40% of users' screen size preferences while considering how something is designed. Build the big version for desktop, then scale down for mobile, produces the best...
Hey.. see my partial solution here:
As for this giant botnet that you can't easily detect..
It's very likely that this is a giant block of AWS IP addresses pretending to be legitimate users by their agent identifier.
I found a cluster of 87 AWS addresses from the southeast region is...
I have tens of thousands of bot sessions and it's allright if you're familiar with linux and apache/nginx configuration to use fail2ban :)
Wondering where you got that, since i'm talking about techniques that are i successfully use for defeating scrapers...?
You can actually get better results...
It gets blocked at the OS level firewall, so it has basically no impact other than a miniscule impact on bandwidth.
You could refer bans up to the ISP if needed.
I can grab a range of IP addresses from a provider like AWS and just ban them at my firewall, they have no business accessing the...
Yes i figured the false positives i see might sometimes be due to a bot activity trigger, which has very little information to go off, so the accuracy can suck.
Bots will come back. Few of them ever stop.
Consider the route of piping your web server logs to fail2an and creating some rate...
As a viewer i get false positives frequently on websites.
Extremely evident that someone is running on cloudflare because you'll get a captcha on your first visit.
This only happens in under attack mode, IE the site operator has turned it on by hand?
Oh, you must not have any protection layer at your server level.
I wouldn't dare turn fail2ban off just to see what the traffic looks like.
I have spent a lot of time tuning fail2ban protection to perfection anyway.
I don't like cloudflare because it produces a lot of false positives and...
Hey.. i appreciate this update and i was thinking that tiptap was holding development up.
Hey @Chris D .. i run a PHP web development shop and have been writing PHP since 2009. I'm in the middle of finishing a PHP framework for public release that offers a lot of what Laravel does.. but...
There's a sessions table that xenforo uses that is in memory and gets too big.
We use the below lines in the mysql configuration to increase the size of these tables and it's been successful so far.
We have a LOT of bots but we ban the ones that are on bad behavior with lots of fail2ban rules...