Re: curl attack prevention

Hello,

on 01/30/2008 09:13 AM K. said the following:
Hello all!

Can you write me some code which let me sleep calm during the night
and what should I do to prevent some attackers from using curl function?

In Poland there is a big portal which become famous and some attackers
attacked it by using curl function and get all data about users.

Can you wirte me what should I do to prevent my portal from such attack?

Maybe id session regenerating is one of the thing which I should apply after
new login?

I don't think session regeneration will prevent any user from automating
the login access with Curl or any kind of HTTP client that emulates a
browser.

I think a good CAPTCHA solution in the user contact pages, or the login
form page, and probably make it also appears once in a while, would make
the hackerks life more difficult, if possible at all.

Some time ago I had to start using CAPTCHA to protect the author contact
pages, and also to avoid excessive load caused by people that use site
mirroring tools. I wrote about it here:

http://www.phpclasses.org/blog/post/43-Site-growing-pains.html


Here you may find several CAPTCHA solutions that you may want to try.
Some are very nifty, and they use sophisticated animated or Flash CAPTCHAs.

http://www.phpclasses.org/searchtag/CAPTCHA/by/package/tag/CAPTCHA/

--

Regards,
Manuel Lemos

PHP professionals looking for PHP jobs
http://www.phpclasses.org/professionals/

PHP Classes - Free ready to use OOP components written in PHP
http://www.phpclasses.org/
.

Relevant Pages

  • [Full-disclosure] [ MDVSA-2009:023 ] php
    ... A vulnerability in PHP allowed context-dependent attackers to cause ... The updated packages have been patched to correct these issues. ...
    (Full-Disclosure)
  • [ MDVSA-2009:023 ] php
    ... A vulnerability in PHP allowed context-dependent attackers to cause ... The updated packages have been patched to correct these issues. ...
    (Bugtraq)
  • [Full-disclosure] [ MDVSA-2009:324 ] php
    ... Package: php ... Multiple vulnerabilities was discovered and corrected in php: ... before 5.2.9 allows remote attackers to cause a denial of service ... Unspecified vulnerability in PHP before 5.2.11 has unknown impact ...
    (Full-Disclosure)
  • [ MDVSA-2009:324 ] php
    ... Package: php ... Multiple vulnerabilities was discovered and corrected in php: ... before 5.2.9 allows remote attackers to cause a denial of service ... Unspecified vulnerability in PHP before 5.2.11 has unknown impact ...
    (Bugtraq)
  • Re: ports/128956: [patch] [vuxml] multiple vulnerabilities in PHP 5.2.6
    ... Originator: Eygene Ryabinkin ... I assume that they all will go in one shot, so the following VuXML ... obsolete API calls that allow context-dependent attackers to ... Buffer overflow in the memnstr function in PHP 4.4.x before ...
    (FreeBSD-Security)