Referer White Listening

  • Hi Michael

    I’ve a specific request. But probably I’m not the only one with this problem.
    I use a website to store my passwords and log in through this website. But all login attemps are blocked by Bad Behaviour. That’s good. But would it be possible to add a referer to the white list, because the ip address may change over time.

    I did it my way, but quick and dirty. I added the following to the whitelist.inc.php:

    
	if ($package['headers_mixed']['Origin'] === 'https://passwordmanager.my-url.com') {
		return true;
	}

    Probably it could be helpful to anybody else.
    It could be improved by checking the destination address (/wp-login.php) or some different tests.

    Many thanks.
    Marc

Viewing 1 replies (of 1 total)

  • I tried to expand this to other password managers:

    	if ($package['headers_mixed']['Origin'] === 'https://passwordmanager.my-url.com') {
		return true;
	}
	if ($package['headers_mixed']['Origin'] === 'https://lastpass.com') {
		return true;
	}
	if ($package['headers_mixed']['Origin'] === 'https://keepersecurity.com') {
		return true;
	}
	if ($package['headers_mixed']['Origin'] === 'https://www.dashlane.com') {
		return true;
	}
	if ($package['headers_mixed']['Origin'] === 'https://bitwarden.com') {
		return true;
	}
	if ($package['headers_mixed']['Origin'] === 'https://www.logmeonce.com') {
		return true;
	}
	if ($package['headers_mixed']['Origin'] === 'https://www.passwordboss.com') {
		return true;
	}
	if ($package['headers_mixed']['Origin'] === 'https://1password.com') {
		return true;
	}
	if ($package['headers_mixed']['Origin'] === 'https://www.roboform.com') {
		return true;
	}
	if ($package['headers_mixed']['Origin'] === 'https://www.stickypassword.com') {
		return true;
	}
	if ($package['headers_mixed']['Origin'] === 'https://www.truekey.com') {
		return true;
	}
	if ($package['headers_mixed']['Origin'] === 'https://www.zoho.com') {
		return true;
	}

    However, when I put WordPress into debug mode (to troubleshoot something else) I see that this is throwing errors:

    Notice: Undefined index: Origin in /var/www/omahachapterone/wp-content/plugins/bad-behavior/bad-behavior/whitelist.inc.php on line 6

Notice: Undefined index: Origin in /var/www/omahachapterone/wp-content/plugins/bad-behavior/bad-behavior/whitelist.inc.php on line 9

Notice: Undefined index: Origin in /var/www/omahachapterone/wp-content/plugins/bad-behavior/bad-behavior/whitelist.inc.php on line 12

Notice: Undefined index: Origin in /var/www/omahachapterone/wp-content/plugins/bad-behavior/bad-behavior/whitelist.inc.php on line 15

Notice: Undefined index: Origin in /var/www/omahachapterone/wp-content/plugins/bad-behavior/bad-behavior/whitelist.inc.php on line 18

Notice: Undefined index: Origin in /var/www/omahachapterone/wp-content/plugins/bad-behavior/bad-behavior/whitelist.inc.php on line 21

Notice: Undefined index: Origin in /var/www/omahachapterone/wp-content/plugins/bad-behavior/bad-behavior/whitelist.inc.php on line 24

Notice: Undefined index: Origin in /var/www/omahachapterone/wp-content/plugins/bad-behavior/bad-behavior/whitelist.inc.php on line 27

Notice: Undefined index: Origin in /var/www/omahachapterone/wp-content/plugins/bad-behavior/bad-behavior/whitelist.inc.php on line 30

Notice: Undefined index: Origin in /var/www/omahachapterone/wp-content/plugins/bad-behavior/bad-behavior/whitelist.inc.php on line 33

Notice: Undefined index: Origin in /var/www/omahachapterone/wp-content/plugins/bad-behavior/bad-behavior/whitelist.inc.php on line 36

Notice: Undefined index: Origin in /var/www/omahachapterone/wp-content/plugins/bad-behavior/bad-behavior/whitelist.inc.php on line 39
Viewing 1 replies (of 1 total)
  • The topic ‘Referer White Listening’ is closed to new replies.

Tags