Hacker attack !

Phoca Download - download manager
phil2000
Phoca Newbie
Phoca Newbie
Posts: 3
Joined: 09 Feb 2017, 18:56

Hacker attack !

Post by phil2000 »

In the last two days one or two hackers have attacked my site, downloading over 4.000 times a file of mine, consuming all the available bandwidth.

In the .log file of my site I can read thousands of lines like that:

"45.155.205.206 - - [12/Aug/2021:10:59:14 +0200] "GET /en/component/phocadownload/category/1-programs.html?download=20%3Aps-never-sitout-2%27%20ORDER%20BY%202087%23 HTTP/1.1" 404 5781 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0""

I don't want people must create a user account to download files... is not possible simply to check a box o to write a short CAPTCHA text so to can download a file?
User avatar
Jan
Phoca Hero
Phoca Hero
Posts: 47810
Joined: 10 Nov 2007, 18:23
Location: Czech Republic
Contact:

Re: Hacker attack !

Post by Jan »

Hi, there is no such option yes. The usual protection is to make the files available after login or standard security filtering on server side (like used against DDOS attacks or against spammers)

Jan
If you find Phoca extensions useful, please support the project
Post Reply