WordPress.org
Get WordPress

Plugin Directory

Changeset 2303106


Ignore:
Timestamp:
05/12/2020 03:05:31 AM (6 years ago)
Author:
drew010
Message:

Update readme and release 1.3.8

Location:
vigilantor/trunk
Files:
2 edited

Legend:

Unmodified
Added
Removed

  • vigilantor/trunk/readme.txt

    r2303097 r2303106  
    66Requires PHP: 5.6
    77Tested up to: 5.4.2
    8 Stable tag: 1.3.7
     8Stable tag: 1.3.8
    99License: GPLv3
    1010License URI: http://www.gnu.org/licenses/gpl.txt
    … …  
    1414== Description ==
    1515
    16 [Tor](https://www.torproject.org/ "Tor") is an invaluable tool for protecting free-speech, privacy, and preventing surveillance
    17 but when abused it can protect the identity of malicious users and make tracking their activites more difficult.  "Hackers"
    18 might use Tor to run security scans on your website or spam websites with comments and fake registrations.
     16[Tor](https://www.torproject.org/ "Tor") is an invaluable tool for protecting free-speech, privacy, and preventing surveillance but when abused it can protect the identity of malicious users and make tracking their activites more difficult.  "Hackers" might use Tor to run security scans on your website or spam websites with comments and fake registrations.
    1917
    2018The purpose of this plugin is to give you the power to block certain Tor activity from your WordPress site.
    … …  
    4038If you opt to use the real-time blocking, each IP address looked up is cached for 5 minutes for efficiency.
    4139
    42 The Tor IP lists that are downloaded only contain "exit node" IP addresses so it is farily small and the list is
    43 searched using a binary search so the plugin is very fast!
     40The Tor IP lists that are downloaded only contain "exit node" IP addresses so it is farily small and the list is searched using a binary search so the plugin is very fast!
    4441
    4542This plugin also adds two shortcodes which can be used to display specific content to Tor or non-Tor users. Shortcode usage:
    … …  
    5047**Support Tor**
    5148
    52 Tor is a great thing.  If you agree, consider [volunteering](https://www.torproject.org/getinvolved/volunteer.html.en),
    53 [donating](https://www.torproject.org/donate/donate.html.en) to the Tor project, or expand the Tor network by
    54 [sponsoring a Tor relay](https://drew-phillips.com/tor-nodes/) which will be maintained by the plugin author.
     49Tor is a great thing.  If you agree, consider [volunteering](https://www.torproject.org/getinvolved/volunteer.html.en), [donating](https://www.torproject.org/donate/donate.html.en) to the Tor project, or expand the Tor network by [sponsoring a Tor relay](https://drew-phillips.com/tor-nodes/) which will be maintained by the plugin author.
    5550
    5651**Support this plugin**
    5752
    58 The author of this plugin values Tor as well as the security of your website.  Considerable effort went into the development of
    59 this plugin as well as the code and infrastructure that provides you with the up-to-date exit lists.
     53The author of this plugin values Tor as well as the security of your website.  Considerable effort went into the development of this plugin as well as the code and infrastructure that provides you with the up-to-date exit lists.
    6054
    61 You can support this plugin by installing it, rating it positively, [donating](https://drew-phillips.com/donate/ "Donating") to the
    62 author, or [sponsoring a Tor relay](https://drew-phillips.com/tor-nodes/) which will be operated by the plugin developer in your honor.
     55You can support this plugin by installing it, rating it positively, [donating](https://drew-phillips.com/donate/ "Donating") to the author, or [sponsoring a Tor relay](https://drew-phillips.com/tor-nodes/) which will be operated by the plugin developer in your honor.
    6356
    6457
    … …  
    8073= How does this plugin work? =
    8174
    82 This plugin detects Tor users by using a pre-downloaded list of Tor IP addresses.  One nice thing about the Tor
    83 network is that it is very easy to get lists of IP addresses that allow Tor users to access the internet.
     75This plugin detects Tor users by using a pre-downloaded list of Tor IP addresses.  One nice thing about the Tor network is that it is very easy to get lists of IP addresses that allow Tor users to access the internet.
    8476
    85 When a user visits your site and tries to perform one of the restricted actions, their IP is checked against
    86 the list of known Tor exit IP addresses.  If it's a match, they won't be allowed to do what they were trying
    87 to do.
     77When a user visits your site and tries to perform one of the restricted actions, their IP is checked against the list of known Tor exit IP addresses.  If it's a match, they won't be allowed to do what they were trying to do.
    8878
    8979= Where do the exit lists come from? =
    9080
    91 The exit lists are served by a service made just for this plugin.  You can see the exit list
    92 [here](https://openinternet.io/tor/tor-exit-list.txt "here").  Please be kind if you choose to use it for purposes
    93 other than this plugin.
     81Exit lists are served from these domains:
     82
     83* www2.openinternet.io
     84* openinternet.io
     85* check.torproject.org
     86
     87One of these lists is maintained by us.  You can see the contents [here](https://www2.openinternet.io/tor/tor-exit-list.txt "here").  Please be kind if you choose to use it for purposes other than this plugin.
    9488
    9589= How often are the exit lists updated? =
    9690
    97 You can choose to update the exit lists every 10, 20, 30, 60, 120, or 360 minutes.  The more often exit lists
    98 are updated, the more accurate the detection will be.
     91You can choose to update the exit lists every 10, 20, 30, 60, 120, or 360 minutes. Updating every 30 or 60 minutes is recommended.
    9992
    10093= How does the real time checking work? =
    10194
    102 The real-time checking is very fast since it uses the public [Tor DNS exit list service](https://www.torproject.org/projects/tordnsel.html.en)
    103 run by the Tor project.  A small DNS request is sent that contains the visitor's IP address, your server IP, and server port
    104 which are then compared to active exit nodes to see if a Tor node with that IP address permits traffic to your address.
     95The real-time checking is very fast since it uses the public [Tor DNS exit list service](https://www.torproject.org/projects/tordnsel.html.en) run by the Tor project.  A small DNS request is sent that contains the visitor's IP address which is compared to a list of observed exit relays.
    10596
    106 The DNS request will yield a postive response from the service if the criteria matches.  Since DNS uses UDP and the
    107 packets are small, this is typically a fast and efficient way to perform the check.
     97The DNS request will yield a postive response from the service if the criteria matches.  Since DNS uses UDP and the packets are small, this is typically a fast and efficient way to perform the check.
    10898
    10999= How does the CAPTCHA protection work? =
    110100
    111 In order to use the optional CAPTCHA protection, first install the Securimage-WP plugin and enable the "Block Tor users from all of WordPress"
    112 configuration option in VigilanTor.
     101In order to use the optional CAPTCHA protection, first install the "hCaptcha for Wordpress" plugin and enable the "Block Tor users from all of WordPress" configuration option in VigilanTor.
    113102
    114 When a Tor user visits your site, they will be presented with a CAPTCHA image.  After correctly solving the CAPTCHA, a session cookie will be
    115 set in the browser containing a secret token (stored in the WP database) that bypasses the Tor blocking.  The cookie is saved in the database
    116 for 1 hour, and it's value is changed on each visit to prevent the cookie from being used by multiple browsers.
     103When a Tor user visits your site, they will be presented with a CAPTCHA challenge.  After correctly solving the CAPTCHA, a session cookie will be set in the browser containing a secret token (stored in the WP database) that bypasses the Tor blocking.  The cookie is saved in the database for 1 hour, and it's value is changed on each visit to prevent the cookie from being used by multiple browsers.
    117104
    118105= What PHP version does VigilanTor require? =
    119106
    120 VigilanTor should work with PHP 5.1 or greater.  If you run into any problems, please [report them here](https://wordpress.org/support/plugin/vigilantor).
    121 This plugin is *not* compatible with any PHP 4 version!
     107VigilanTor should work with PHP 5.5 or greater.  If you run into any problems, please [report them here](https://wordpress.org/support/plugin/vigilantor). This plugin is *not* compatible with any PHP 4 version!
    122108
    123109== Screenshots ==
    … …  
    135121
    136122== Changelog ==
     123
     124= 1.3.8 =
     125* Fix change that broke compatibility with PHP < 5.6
    137126
    138127= 1.3.7 =

  • vigilantor/trunk/vigilantor.php

    r2303097 r2303106  
    44Plugin URI: https://drew-phillips.com/
    55Description: Provides protections from Tor users visiting your site
    6 Version: 1.3.6
     6Version: 1.3.8
    77Author: Drew Phillips
    88Author URI: https://drew-phillips.com
    … …  
    2727*/
    2828
    29 defined('VIGILANTOR_VERSION') || define('VIGILANTOR_VERSION', '1.3.6');
     29defined('VIGILANTOR_VERSION') || define('VIGILANTOR_VERSION', '1.3.8');
    3030
    3131if (class_exists('VigilanTorWP')) {
Note: See TracChangeset for help on using the changeset viewer.