[DBTech] DragonByte Security

[DBTech] DragonByte Security [Paid] 4.0.1

No permission to buy (€14.95)
Kudos to the DragonByte-Tech team for such a fine product. (y) This afternoon I had a user contact me saying that they "received an interesting email that came from our website, stating that their account had been breached and that they needed to change their password."

I first validated that our website had sent the email out (using @AndyB's handy Email Log add-on), then checked their user information (i.e. username & email) on the https://haveibeenpwned.com/ website and sure enough they had been! :eek:

All I needed to do next, was explain to them the breach did not come from our website, but instead was in-fact an Early Warning Notice to them that their information had been compromised by less secure websites which stored their private information.
 
One thing that I would like to see is something that blocks malicious bots. Currently a bot can just connect to the site 100,000 times a month and there is nothing stopping it.
Nobody wants to have malicious bots trying 100,000 actions per month on their community.

Feature requests:
  1. Block bad bots from using the site.
  2. Report & Alert Admin if a user/guest/member consumers more than X hits/bandwidth per week/month.
 
Feature requests:
  1. Block bad bots from using the site.
  2. Report & Alert Admin if a user/guest/member consumers more than X hits/bandwidth per week/month.
Sadly it's not possible to measure bandwidth usage via modifications. You would have to implement this server-side. Sorry I couldn't bring better news :(


Fillip
 
Sadly it's not possible to measure bandwidth usage via modifications. You would have to implement this server-side. Sorry I couldn't bring better news :(


Fillip
How about the rest of my requests?
  1. Block bad bots
  2. Report & Alert Admin if a user/guest/member consumers more than X hits per week/month.
Bad bots could be blocked by browser fingerprinting and blacklists like ProjectHoneypot.
DBT Security already uses browser fingerprinting and XF already has blacklist integration like ProjectHoneypot.
 
I can definitely look into whether it's possible to integrate with Project Honeypot, although what does XF's blacklist do if it doesn't do this already?


Fillip
 
I can definitely look into whether it's possible to integrate with Project Honeypot, although what does XF's blacklist do if it doesn't do this already?
XF only uses the blacklist for registration approvals. Applying the blacklists to all other uses of the site would be useful.
 
XF only uses the blacklist for registration approvals. Applying the blacklists to all other uses of the site would be useful.
The problem is performance, applying the blacklists to all other uses of the site would absolutely murder performance. I would definitely need to come up with a way of limiting that somehow, if it's even feasible.


Fillip
 
The problem is performance, applying the blacklists to all other uses of the site would absolutely murder performance. I would definitely need to come up with a way of limiting that somehow, if it's even feasible.
On my vbulletin big board we use bad behaviour to apply ProjectHoneypot DNSBL and browser fingerprinting. It saves us a lot of performance.
This is also of interest: http://www.botreports.com/badbots/
 
One another question: I clicked on "account breach checker" and it is checking around 2 hours so far and yet not finished. Is it normal? (it checks 10 users per process and not it is on 9000th user and we should wait a lot until it finishes all users! and at the end of each 10 process it writes "Users edited successfully!". What is being edited there? I don't remember to set to edit anything for this function.)
If you have a lot of users, then yes it is. It takes approx. 2 seconds per users to check the database.

Copy/paste phrases :)

Fillip
Well I clicked on Account Breach Checker as well :( so my guess is it'll be done in a few hours. :confused: What do you mean by "Copy/paste phrases"? What is the routine doing, to check if an account has been breached? Seeing the User Edited notice made me nervous as well. :oops:

Suggestion: Add a 'Are you sure' prompt, before launching this process when Admins like me click it out of curiosity.(i.e. I could not find any information on this feature.)
 
After installing the bad behavior errors popping up!
Screen Shot 12-12-16 at 11.52 PM (2).webp

Code:
Error Info
ErrorException: Undefined index: path - library\DBTech\Security\3rdParty\functions_badbehavior.php:181
Generated By: Unknown Account, A moment ago
Stack Trace
#0 G:\xampp\htdocs\cozworld\library\DBTech\Security\3rdParty\functions_badbehavior.php(181): XenForo_Application::handlePhpError(8, 'Undefined index...', 'G:\\xampp\\htdocs...', 181, Array)
#1 G:\xampp\htdocs\cozworld\library\DBTech\Security\3rdParty\bad-behavior\screener.inc.php(12): bb2_relative_path()
#2 G:\xampp\htdocs\cozworld\library\DBTech\Security\3rdParty\bad-behavior\screener.inc.php(65): bb2_screener_cookie(Array, Array, 'bb2_screener_', '1481605168 93.1...')
#3 G:\xampp\htdocs\cozworld\library\DBTech\Security\3rdParty\bad-behavior\core.inc.php(236): bb2_screener(Array, Array)
#4 G:\xampp\htdocs\cozworld\library\DBTech\Security\3rdParty\bad-behavior\core.inc.php(123): bb2_screen(Array, Array)
#5 G:\xampp\htdocs\cozworld\library\DBTech\Security\XenForo\EventListener\FrontControllerPostView.php(66): bb2_start(Array)
#6 [internal function]: DBTech_Security_XenForo_EventListener_FrontControllerPostView::listen(Object(XenForo_FrontController), '<!DOCTYPE html>...')
#7 G:\xampp\htdocs\cozworld\library\XenForo\CodeEvent.php(90): call_user_func_array(Array, Array)
#8 G:\xampp\htdocs\cozworld\library\XenForo\FrontController.php(183): XenForo_CodeEvent::fire('front_controlle...', Array)
#9 G:\xampp\htdocs\cozworld\index.php(13): XenForo_FrontController->run()
#10 {main}
Request State
array(3) {
  ["url"] => string(24) "http://www.cozworld.com/"
  ["_GET"] => array(0) {
  }
  ["_POST"] => array(0) {
  }
}
 
Last edited:
It seems you have this error and another one: undefined index: bb2_javascript. Its best to post that too.
 
Getting Fatal error: Call to undefined method XenForo_Helper_Php::safeUnserialize() in /home/forums.bukkit/public_html/library/DBTech/Security/XenForo/Model/Language.php on line 15

I'm running the latest XenForo 1.14.13 and the version 3.2 of the addon.
 
Last edited:
I tried to upgrade to the 3.2.0 version and upon trying to install the XML file the window just went blank and nothing else happened. So I waited awhile, but never ever transpired. When I reloaded the Admin Home page I noticed the following message:

Screen Shot 2017-01-13 at 3.26.56 AM.webp

So I clicked on it and the same thing happened again.(i.e. Blank Page) I reread the Overview page and noticed "PHP 5.6+" is now a requirement. That must be my problem, as our (shared) server only has 5.4.45

QUESTIONS:
1)How do I back out of this upgrade attempt?
2)How do I address the message you see above?
3)What was the last version of this add-on that correctly supports PHP 5.4.45?

Also, see below for server errors.
Screen Shot 2017-01-13 at 3.45.23 AM.webp
 
Sorry, yes...

Code:
Error Info
ErrorException: Fatal Error: Call to undefined method XenForo_Helper_Php::safeUnserialize() - library/DBTech/Security/XenForo/Model/Language.php:15
Generated By: A.D., Today at 3:29 AM
Stack Trace

#0 [internal function]: XenForo_Application::handleFatalError()
#1 {main}

Request State

array(3) {
  ["url"] => string(62) "http://www.recumbentriders.org/forums/admin.php?add-ons/toggle"
  ["_GET"] => array(1) {
    ["add-ons/toggle"] => string(0) ""
  }
  ["_POST"] => array(7) {
    ["filter"] => string(0) ""
    ["exists"] => array(111) {
      ["xenCODE_KeywordsMeta"] => string(1) "1"
      ["AboutUs"] => string(1) "1"
      ["AcpErrorMail"] => string(1) "1"
      ["AddOnInstaller"] => string(1) "1"
      ["Addons"] => string(1) "1"
      ["AdvancedSearch"] => string(1) "1"
      ["SV_AlertImprovements"] => string(1) "1"
      ["BBCodeParser"] => string(1) "1"
      ["liam_showBirthYear"] => string(1) "1"
      ["Bookmark"] => string(1) "1"
      ["Calendar"] => string(1) "1"
      ["ChangeAuthor"] => string(1) "1"
      ["ChangeDate"] => string(1) "1"
      ["ChangeLimit"] => string(1) "1"
      ["sv_comtactusthread"] => string(1) "1"
      ["SV_ConvImprovements"] => string(1) "1"
      ["ConversationReplyLimit"] => string(1) "1"
      ["ConversationSearch"] => string(1) "1"
      ["ConversationsPrune"] => string(1) "1"
      ["ConvertImage"] => string(1) "1"
      ["XMCrowdModeration"] => string(1) "1"
      ["siropu_custom_tabs"] => string(1) "1"
      ["Donations"] => string(1) "1"
      ["dbtech_security"] => string(1) "1"
      ["EmailLog"] => string(1) "1"
      ["SV_EmailQueue"] => string(1) "1"
      ["EnableDebugFromAdminHome"] => string(1) "1"
      ["ExportThread"] => string(1) "1"
      ["FlagPost"] => string(1) "1"
      ["FMS_Print_Message"] => string(1) "1"
      ["ForumListCount"] => string(1) "1"
      ["ForumViewCount"] => string(1) "1"
      ["SolidMean_ForumBackup"] => string(1) "1"
      ["Sedo_GoToTop"] => string(1) "1"
      ["GFN404"] => string(1) "1"
      ["GPXViewer"] => string(1) "1"
      ["HeaderThumbs"] => string(1) "1"
      ["History"] => string(1) "1"
      ["HistoryPlus"] => string(1) "1"
      ["iwdConversations"] => string(1) "1"
      ["InactiveMembers"] => string(1) "1"
      ["InsertAttachment"] => string(1) "1"
      ["InsertAttachmentAll"] => string(1) "1"
      ["Instagram"] => string(1) "1"
      ["SolidMean_IPInContactMail"] => string(1) "1"
      ["JumpToPerms"] => string(1) "1"
      ["LinkCheck"] => string(1) "1"
      ["LiveUpdate"] => string(1) "1"
      ["liam_loginasuser"] => string(1) "1"
      ["MemberSearch"] => string(1) "1"
      ["Faqe_MemberlistSorting"] => string(1) "1"
      ["MembersOnline"] => string(1) "1"
      ["NewMembers"] => string(1) "1"
      ["Awedo_NewPostsAndThreads"] => string(1) "1"
      ["NewPostsResponsive"] => string(1) "1"
      ["NodesAsTabs"] => string(1) "1"
      ["OpenPDF"] => string(1) "1"
      ["PostReplace"] => string(1) "1"
      ["ProfilePage"] => string(1) "1"
      ["QuickLinks"] => string(1) "1"
      ["quoteME"] => string(1) "1"
      ["RegisterEmail"] => string(1) "1"
      ["RegisterTimezone"] => string(1) "1"
      ["RemoveDateOfBirth"] => string(1) "1"
      ["RemoveLastEdited"] => string(1) "1"
      ["RemoveNotableMembers"] => string(1) "1"
      ["RemoveSearchForums"] => string(1) "1"
      ["RemoveSignature"] => string(1) "1"
      ["RemoveStayLoggedIn"] => string(1) "1"
      ["ResetPasswordFromACP"] => string(1) "1"
      ["Robots"] => string(1) "1"
      ["Rotate"] => string(1) "1"
      ["Rsvp"] => string(1) "1"
      ["SVSeperateStickyAndNormal"] => string(1) "1"
      ["SidebarDonations"] => string(1) "1"
      ["SidebarPositions"] => string(1) "1"
      ["SimilarThreads"] => string(1) "1"
      ["Statistics"] => string(1) "1"
      ["TabAlerts"] => string(1) "1"
      ["FilterTemplatesByAddOn"] => string(1) "1"
      ["ThreadViewCount"] => string(1) "1"
      ["ThreadWatchers"] => string(1) "1"
      ["toggle_menu"] => string(1) "1"
      ["TopThreads"] => string(1) "1"
      ["TPUOldThreadWarning"] => string(1) "1"
      ["Unvote"] => string(1) "1"
      ["UserAgent"] => string(1) "1"
      ["SV_UsernameRestrictions"] => string(1) "1"
      ["ViewMap"] => string(1) "1"
      ["ViewYourPosts"] => string(1) "1"
      ["vigLink"] => string(1) "1"
      ["WatchedForumsEmail"] => string(1) "1"
      ["XenNotices"] => string(1) "1"
      ["aTemplateSecurity"] => string(1) "1"
      ["phc_MassBanEMails"] => string(1) "1"
      ["phc_KeywordManagement"] => string(1) "1"
      ["AutoHighlightPermalink"] => string(1) "1"
      ["CButtonUnderAvatar"] => string(1) "1"
      ["FontAwesomeSwitch"] => string(1) "1"
      ["YourContentInVisitorPanel"] => string(1) "1"
      ["administrateForum"] => string(1) "1"
      ["FHSignatureOnce"] => string(1) "1"
      ["hCollapseAddons"] => string(1) "1"
      ["kl_password_tools"] => string(1) "1"
      ["nobita_AvatarAlive"] => string(1) "1"
      ["nobita_avatarUrl"] => string(1) "1"
      ["RainDD_UserActivity"] => string(1) "1"
      ["ssd_newposts"] => string(1) "1"
      ["tc_ordertmgroups_alphab"] => string(1) "1"
      ["WGBB_Notes"] => string(1) "1"
      ["wmt_socialshareprivacy"] => string(1) "1"
    }
    ["id"] => array(104) {
      ["xenCODE_KeywordsMeta"] => string(1) "1"
      ["AboutUs"] => string(1) "1"
      ["AcpErrorMail"] => string(1) "1"
      ["AddOnInstaller"] => string(1) "1"
      ["Addons"] => string(1) "1"
      ["AdvancedSearch"] => string(1) "1"
      ["SV_AlertImprovements"] => string(1) "1"
      ["BBCodeParser"] => string(1) "1"
      ["liam_showBirthYear"] => string(1) "1"
      ["Bookmark"] => string(1) "1"
      ["Calendar"] => string(1) "1"
      ["ChangeAuthor"] => string(1) "1"
      ["ChangeDate"] => string(1) "1"
      ["ChangeLimit"] => string(1) "1"
      ["sv_comtactusthread"] => string(1) "1"
      ["SV_ConvImprovements"] => string(1) "1"
      ["ConversationReplyLimit"] => string(1) "1"
      ["ConversationSearch"] => string(1) "1"
      ["ConversationsPrune"] => string(1) "1"
      ["ConvertImage"] => string(1) "1"
      ["XMCrowdModeration"] => string(1) "1"
      ["siropu_custom_tabs"] => string(1) "1"
      ["Donations"] => string(1) "1"
      ["EmailLog"] => string(1) "1"
      ["SV_EmailQueue"] => string(1) "1"
      ["EnableDebugFromAdminHome"] => string(1) "1"
      ["ExportThread"] => string(1) "1"
      ["FlagPost"] => string(1) "1"
      ["FMS_Print_Message"] => string(1) "1"
      ["ForumListCount"] => string(1) "1"
      ["ForumViewCount"] => string(1) "1"
      ["SolidMean_ForumBackup"] => string(1) "1"
      ["Sedo_GoToTop"] => string(1) "1"
      ["GFN404"] => string(1) "1"
      ["GPXViewer"] => string(1) "1"
      ["HeaderThumbs"] => string(1) "1"
      ["History"] => string(1) "1"
      ["HistoryPlus"] => string(1) "1"
      ["iwdConversations"] => string(1) "1"
      ["InactiveMembers"] => string(1) "1"
      ["InsertAttachment"] => string(1) "1"
      ["Instagram"] => string(1) "1"
      ["SolidMean_IPInContactMail"] => string(1) "1"
      ["JumpToPerms"] => string(1) "1"
      ["LinkCheck"] => string(1) "1"
      ["LiveUpdate"] => string(1) "1"
      ["liam_loginasuser"] => string(1) "1"
      ["MemberSearch"] => string(1) "1"
      ["Faqe_MemberlistSorting"] => string(1) "1"
      ["MembersOnline"] => string(1) "1"
      ["NewMembers"] => string(1) "1"
      ["Awedo_NewPostsAndThreads"] => string(1) "1"
      ["NewPostsResponsive"] => string(1) "1"
      ["NodesAsTabs"] => string(1) "1"
      ["OpenPDF"] => string(1) "1"
      ["ProfilePage"] => string(1) "1"
      ["QuickLinks"] => string(1) "1"
      ["quoteME"] => string(1) "1"
      ["RegisterEmail"] => string(1) "1"
      ["RegisterTimezone"] => string(1) "1"
      ["RemoveDateOfBirth"] => string(1) "1"
      ["RemoveLastEdited"] => string(1) "1"
      ["RemoveNotableMembers"] => string(1) "1"
      ["RemoveSearchForums"] => string(1) "1"
      ["RemoveSignature"] => string(1) "1"
      ["RemoveStayLoggedIn"] => string(1) "1"
      ["ResetPasswordFromACP"] => string(1) "1"
      ["Robots"] => string(1) "1"
      ["Rotate"] => string(1) "1"
      ["Rsvp"] => string(1) "1"
      ["SVSeperateStickyAndNormal"] => string(1) "1"
      ["SidebarDonations"] => string(1) "1"
      ["SidebarPositions"] => string(1) "1"
      ["SimilarThreads"] => string(1) "1"
      ["Statistics"] => string(1) "1"
      ["TabAlerts"] => string(1) "1"
      ["FilterTemplatesByAddOn"] => string(1) "1"
      ["ThreadViewCount"] => string(1) "1"
      ["ThreadWatchers"] => string(1) "1"
      ["TopThreads"] => string(1) "1"
      ["TPUOldThreadWarning"] => string(1) "1"
      ["UserAgent"] => string(1) "1"
      ["SV_UsernameRestrictions"] => string(1) "1"
      ["ViewMap"] => string(1) "1"
      ["ViewYourPosts"] => string(1) "1"
      ["vigLink"] => string(1) "1"
      ["WatchedForumsEmail"] => string(1) "1"
      ["XenNotices"] => string(1) "1"
      ["aTemplateSecurity"] => string(1) "1"
      ["phc_MassBanEMails"] => string(1) "1"
      ["phc_KeywordManagement"] => string(1) "1"
      ["AutoHighlightPermalink"] => string(1) "1"
      ["CButtonUnderAvatar"] => string(1) "1"
      ["FontAwesomeSwitch"] => string(1) "1"
      ["YourContentInVisitorPanel"] => string(1) "1"
      ["FHSignatureOnce"] => string(1) "1"
      ["hCollapseAddons"] => string(1) "1"
      ["nobita_AvatarAlive"] => string(1) "1"
      ["nobita_avatarUrl"] => string(1) "1"
      ["RainDD_UserActivity"] => string(1) "1"
      ["ssd_newposts"] => string(1) "1"
      ["tc_ordertmgroups_alphab"] => string(1) "1"
      ["WGBB_Notes"] => string(1) "1"
      ["wmt_socialshareprivacy"] => string(1) "1"
    }
    ["_xfToken"] => string(8) "********"
    ["_xfRequestUri"] => string(26) "/forums/admin.php?add-ons/"
    ["_xfNoRedirect"] => string(1) "1"
    ["_xfResponseType"] => string(4) "json"
  }
}
 
Back
Top Bottom