
     #####    ###     ##  ### ########             ###     ##  ###    ###TM
   #######  #######   ####### ########           #######   #######  #######
  ###      ###   ###  ###         ###           ###   ###  ###     ###   ##
  ###      ###   ###  ##       ###              ###   ###  ##      ###   ##
   #######  #######   ##      ########    ###    #######   ##        ######
     #####    ###     ##      ########    ###      ###     ##           ###
                                                                     #####

	Please view the license for this free software, here..
	https://corz.org/public/docs/license/free-scripts-licence.php



    Anti-Hammer..

	Automatically set temporary bans for web site hammering.

	Interrogate Referers and protect your site against Referer Spam.

	Deny h4x0r requests to sensitive resources.

	Protect your valuable server resources for genuine clients.

	Full details here..

		https://corz.org/server/tools/anti-hammer/


    QuickStart:

        *   Drop the anti-hammer directory into your site somewhere, maybe in
            /includes/ or /inc/ or something like that.

            Everything lives inside one single directory, with sub-directories
            containing the various lists and databases, sessions, etc..

        *   Make the "sessions" and "lists" directories writeable.

            If you run php as a cgi/*suexec, you can probably get off with doing
            nothing so long as they are owned by your user account. Otherwise..

            In your ftp client, simply set all the permissions to
            world-writeable which is 777. In a shell, do:

                chmod -R 777 /full/path/to/anti-hammer/lists
                chmod -R 777 /full/path/to/anti-hammer/sessions

            Or just do the whole folder..

                chmod -R 777 /full/path/to/anti-hammer

        *   Set your preferences inside anti-hammer.php (in a good text editor)

        *   Add a line to your site's root .htaccess file..

                php_value auto_prepend_file "/full/real/server/path/to/anti-hammer.php"

           ..replacing the path with the full, real path to anti-hammer.php


        *   You're done!

            Now go load a page over and over and over, fast!


    Have fun!

	;o) Cor

	(c) 2007->tomorrow! cor + corz.org ;o)


    NOTE: If you aren't using Apache, your sever might not understand the
    .htaccess file in the anti-hammer/ directory. If it doesn't, you will
    probably want to provide some other form of directory access control here.

    If you publish your black-list to the outside world, you are kinda defeating
    the point.


    -= nothing is foolproof to the sufficiently talented fool =-


