Comments on: Bad Behavior 2.0.37 and 2.1.3

By: Martin Starkey

Martin Starkey — Thu, 27 Jan 2011 15:41:49 +0000

Yes manual login worked Michael. Thanks for prompting me on that. But, I had been using a Roboform login ( http://www.roboform.com/ ) whereby I would just select a login from a menu of recently used logins which would direct my browser to the login page & automatically complete & submit the form. I would imagine some other people use the same method. Anyway, after the most recent update Bad Behavior detected Roboform as a bot (Which I suppose it is) although in my case a legitimate bot. Sorry to trouble you on that. I’m not suggesting you should change anything you are doing. I suppose that ultimately it just goes to prove how thorough Bad Behavior is in the implementation of WordPress security.

Keep up the good work
Sent a donation

By: Michael Hampton

Michael Hampton — Thu, 27 Jan 2011 06:41:33 +0000

Martin, is there a reason that you are reporting a problem that was already fixed in the most recent release?

By: Martin Starkey

Martin Starkey — Thu, 27 Jan 2011 06:39:56 +0000

Hey, I’m all for website security but when I get locked out of my own domain, that’s what I call “One step beyond”

Error 403

We’re sorry, but we could not fulfill your request for /wp-login.php on this server.

You do not have permission to access this server. Data may not be posted from offsite forms.

Your technical support key is: 50c0-9e21-cd36-1abb

You can use this key to fix this problem yourself.

If you are unable to fix the problem yourself, please contact admin at justsources.com and be sure to provide the technical support key shown above.

By: Michael Hampton

Michael Hampton — Wed, 21 Jul 2010 20:19:03 +0000

Fab, this script appears to be getting blocked because it is using fake User-Agent strings. This should be pretty easy for the script author (or anybody else who uses it) to fix.

By: Fab

Fab — Wed, 21 Jul 2010 17:55:21 +0000

There is a link exchange manager http://linkex.dk/ (it’s a pho script you must install in your hosting space to manage reciprocal exchnage) that is blocked by Bad Behavior when it tries to connect to check if exist the reciprocal link.

It’s very noise add the ips to the white list, and if the ip change Bad Behavior block linkex and it automatic delete my link.

So the more simple way should be add the domain instead the ip.

Or there is some way to permit to Linkex to check backlink ?

this is a sample form

http://www.freeinternetpress.com/linkex/

many thanks!

By: Michael Hampton

Michael Hampton — Tue, 20 Jul 2010 00:00:24 +0000

Fab, referrers can be faked easily, which would cause you to have a security problem if you actually could do that. What are you REALLY trying to do?

By: Fab

Fab — Mon, 19 Jul 2010 20:17:42 +0000

Hi, is possible add in the whitelist specific outside url ? For example i’d give access to my blog to a specific domain, for example, http://www.yoursite.com that could be blocked by your software, i don’t find any way to this, the only possibility is add the ip

By: Michael Hampton

Michael Hampton — Tue, 13 Jul 2010 07:42:26 +0000

That’s their stupid svn for you. Give it ten minutes.

By: Brett

Brett — Tue, 13 Jul 2010 07:39:03 +0000

http://downloads.wordpress.org/plugin/bad-behavior.2.1.4.zip lists 404 Not found. :/

By: Michael Hampton

Michael Hampton — Tue, 13 Jul 2010 07:30:42 +0000

This issue is addressed in Bad Behavior 2.1.4.