CodeOfIsis.Com
Coding for Pagan Websites
 Home Contribute Advanced Search Site Statistics Directory Register Links Polls Calendar Forum   IAmAWitch.Com
Welcome to CodeOfIsis.Com
Monday, September 06 2010 @ 11:19 AM EDT
  View Printable Version 

Pagan GeoIP country exclusion methods

How-To Articles I have long had trouble from spammers from various parts of the world and determined that I would find a way to counter their activities. Well, experience being what it is, I found that security solutions often come in the form of multiple techniques, layered together in swatches to form barriers to most Internet pests.

The first of these techniques I will discuss today falls into the realm of using the I.P. address of a visitor to determine their rough geographic coordinates. The Internet, as it exists today, uses the IPV4 address space to map out regions of the planet into zones of internet address blocks that are allocated to regions and countries. If one looks to the page at  http://www.iana.org/assignments/ipv4-address-space, one can use the major octet (The starting number of a IP address) to get the roughest of ideas of where someone hails from.

Now, as a Pagan web site, I know my audience is mostly located in Western countries. Not *all* of the time, but most of the time. So, knowing from my logs who the worst offenders are in terms of systems abuse and such, usually the Chinese, Russian and South American countries as well as pretty much all of Indonesia, I can reasonably decide to block only on the major octet. Now this is the most primitive of screening methods, but if your requirements are met by screening out this way, then your .htaccess file can by modified to have "deny from 218" for example, which takes out an entire block of addresses from Asia.
  View Printable Version 

Learning to fight the enemies of your site....

How-To Articles You know, I'm a pretty even-tempered guy. But when a bunch of Russian thugs attack my site with their constant barrage of spambots and then ultimately, send out solicitations on the chat panels to our users to send their email addresses in to the spammer so he'll stop spamming you, then that does it for me.

I took some actions that put the offending spammer, along with an entire continent out of reach of the IAmAWitch.Com domains.

While I won't go into the specifics of my own actions with regard to site security, I can state that with enough research and care attending to your logs, you can protect your website with a layered security approach that while not perfect, sure will discourage many a spammer or hacker from attacking your site.
  View Printable Version 

Supporting both Hemispheres

How-To Articles It often escapes most people that there are two hemispheres to this world and that if one is in Winter, the other is in Summer. Six months later, the inverse is true.

Thus, if your Pagan site is truly adhering to the notions of this world-wide view of things, then you can spend a bit of time devoting some resources to creating a Northern Hemisphere and Southern Hemisphere seasons script for your site.

I'm going to take the example of our Seasons block here on this web and we'll go ahead and convert it over the coming week into a dual hemisphere tool, with both Northern and Southern hemispheres being represented equally.  
  View Printable Version 

Forum and basic updates/changes to come

How-To Articles We've enabled the forums to start encouraging the use of this site as a primary forum and discussion area to swap stories, techniques and ideas related to website design, security and operating methods/philosophies.

In relation to this change, we opened back up the user registration system, but will be sure to investigate each user and force them to respond to us with real email responses that prove the user is real and not a spam-bot or spammer who is out to evade our checking mechanisms.

So with this in mind, we begin our little adventure with this web site - Welcome aboard! -- AJ
  View Printable Version 

Defeating the insurance referrer spammers

How-To Articles One of the challenges of running a web site is to pay particular attention to the log entries affecting your computer.

In my own case on the IAmAWitch.Com sites, we use a variety of packages to intercept bad entries and to deal with them.

Since most webmasters use php and mysql, this article will discuss a countermeasure for a particular type of pest called a "referrer spammer". If you look in your web server logs (or if you use, as I do, the Bad Behavior module) you might see an entry like:

Entry details

IP Address: 80.241.43.218 [ Search | Unblock IP address ]
Date: 2007-01-20 12:37:14
Reason: Prohibited header 'X-Aaaaaaaaaa' or 'X-Aaaaaaaaaaaa' present

GET /staticpages/index.php HTTP/1.1
Accept: */*
Accept-Language: en-us
Connection: Keep-Alive
Host: www.yourweb.com
Referer: http://zzzinsurance
Ua-Cpu: x86
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; iOpus-I-M)
X-Aaaaaaaaaa: 300000
X-Aaaaaaaaaaaa: 1

Note the X-Aaaaaaaaaa content. This is telling. Also, look at the Referer and note the insurance url. This is a common tactic now in use by spammers based out of Eastern Europe. In no way should you visit the URL because it is guaranteed that your computer will be infected with a trojans, viruses and worms. I have removed the original URL and placed a non-working version into the entry to prevent any possible accidents.
  View Printable Version 

Using CSS in your pagan web site

How-To Articles I'm an "old-school" HTML and dynamic web-site programmer who is becoming convinced there has to be a better way to do these things.
<p>
So in my lust for designing better sites, I opened my mail one day to read a note from a colleague who said only "Zen my son... Zen..."
<p>
A link to the "css Zen Garden" was stragetically placed at the bottom of my mysterious Master's email, and I clicked it, expecting to see something good. In this case, it was something earthshaking.
<p>
Using my trusty FireFox (the only true browser), I embarked on a truly fascinating experience where content was seperate from look and feel, tables were few and far between and a single style sheet drove the look and feel in ways that one might easily feel was a miracle.
<p>
You too can visit the magickal garden at
http://www.csszengarden.com
<p>
The Zen Garden features a common set of content, detailing the philosophy and methods used to manage the site. The true magick of the site resides in the fact that you can select from many different look and feels while preserving the very same content! The sheer variety of user-submitted CSS variations is astounding.