bbAntiSpam: Discuss how to stop web spam

The forum is retired.

bbAntiSpam Forum Index - Advanced Textual Confirmation - Security of ATC files

Author Message
bengtang



Joined: 16 Jul 2007
Posts: 7

Posted: Mon Jul 16, 2007 7:06 am    Post subject: Security of ATC files  

Hi i was wondering is it is possible for the bot makers to write a bot to access the bbas_config.php file and parse it for the questions array and then read in all the correct answers and then the bot can answer the questions. How can i prevent others from accessing that file?

If i make a .htaccess in it's directory to deny access to the file, will the ATC script still work?
admin
Site Admin


Joined: 18 Apr 2006
Posts: 805
Location: Saint-Petersburg, Russia

Posted: Tue Jul 17, 2007 1:49 am    Post subject:  

In the most cases, you don't need to worry. If a file has the extension "php", it is not returned as is, but interpreted as PHP. As result, the bot will get only empty page.

Also, the best placement for bbAntiSpam files is outside the web site folder.

Quote:
If i make a .htaccess in it's directory to deny access to the file, will the ATC script still work?

Yes, it will work.
_________________
Oleg Parashchenko, bbAntiSpam
Do you love our tools? Please sponsor further development!
Guest






Posted: Tue Jul 17, 2007 12:23 pm    Post subject:  

Thanks.
admin
Site Admin


Joined: 18 Apr 2006
Posts: 805
Location: Saint-Petersburg, Russia

Posted: Wed Jul 18, 2007 2:05 am    Post subject:  

You are welcome.
_________________
Oleg Parashchenko, bbAntiSpam
Do you love our tools? Please sponsor further development!

Ok.