Comments on: Bad Behavior 2.1.0

By: am sikis

am sikis — Sun, 30 May 2010 14:44:42 +0000

one more suggest to you

Put a link to view the log in the settings area. People would more logically go to Settings > Bad Behavior than Plugins.

By: Brendan

Brendan — Fri, 26 Feb 2010 22:01:11 +0000

Hi Michael-

Great plugin, thanks for your contribution to the wordpress community. Quick question for you- Should i be able to use the same http:BL key on separate wordpress sites?

Thanks,

Brendan

By: Bad Behavior / Bad Behaviour: Bad Behavior 2.1.2

Bad Behavior / Bad Behaviour: Bad Behavior 2.1.2 — Sat, 13 Feb 2010 16:58:35 +0000

[...] who use the new URL whitelisting feature should upgrade to ensure that whitelisting works correctly in all [...]

By: Michael Hampton

Michael Hampton — Mon, 04 Jan 2010 18:49:55 +0000

Greg, Drupal is not one of the platforms that I expect to be using the files. This really needs to be implemented in the Drupal module itself, so that you can go to, e.g., Site Configuration + Bad Behavior + Whitelist and just modify it online like everything else in Drupal.

Unfortunately, the Drupal module maintainer doesn’t seem to be very active, and I’m not even sure if it is being actively maintained anymore. If you’re interested, you might check into this.

By: Greg P

Greg P — Mon, 04 Jan 2010 00:42:55 +0000

If you rename the whitelist.ini file as whitelist.inc instead, it would not be served directly by the server by default on Drupal installations.

As whitelist.ini, one must modify the default Drupal .htaccess file to enable the server to hide it from prying eyes.

By: Luis

Luis — Tue, 29 Dec 2009 03:19:36 +0000

Michael: I don’t use any of those features, but if it would be useful for other (normal?) users to run and test 2.1.x in the wild, would you mention that in the next 2.1.x announcement? I’d be happy to test it in production if you think that would be of use.

By: WSz

WSz — Tue, 22 Dec 2009 05:55:10 +0000

Oh, two minor suggestions.

Put a link to view the log in the settings area. People would more logically go to Settings > Bad Behavior than Plugins.

Also make links to your site open via target _blank. Yes we can all middle or control click but its just better to not be taken away from your site.

By: WSz

WSz — Mon, 21 Dec 2009 13:18:19 +0000

Nice plug-in. I have some suggestions that might help improve the overall feel that you might consider.

In the http:BL section, you may want to write what the range of values of the threat level. I know from installing http:BL that it’s 0-255, but I doubt most ordinary users do. Including the range can help them better choose a setting that works for them… and puts into perspective what ‘30′ really means. This might also be useful for age of data (I have no idea how far back in history I can set this field too).

Another feature that would be highly useful is the inclusion of whether http:BL is working. On their site, you get a little green icon that signals the key is valid and working. It would be nice if the plugin queried the site and informed you everything with your key is functioning properly. As it stands, there is no way whether the key works…

Lastly, another feature that may be useful would be to add an option to put statistics not only in the footer, but maybe a box in the admin dashboard.

Anyway, great plugin. I’ve tried others and they were not nearly as clean, simple, and to the point. Great job!

By: Michael Hampton

Michael Hampton — Sun, 20 Dec 2009 15:01:43 +0000

Thanks for reporting this. I don’t remember why that’s in there. It must have solved a problem sometime in the past. It will be changed in the next release.

By: Andrew Zhang

Andrew Zhang — Sun, 20 Dec 2009 07:06:01 +0000

Hi Michael,

This bad-behavior plugin is very useful, it has blocked hundreds of bad requests which impress me a lot.

But I found a bug with wordpress plugin, it’s in the function bb2_db_query, as it used $wpdb->show_errors(), so actually as soon as this plugin actived, wordpress will print any db errors to the screen, it’s not supposed for the end users, and it has security issues. I don’t see why you use these funcs here.