View Counter

for osCommerce Online Merchant v2.3

Download

Updated by Jack_mcs on 2nd February 2022

This addon provides a way to monitor and control what's going on in your shop. If you are familiar with the Who's Online addon, then this can be thought of as Who's Online on steroids. Most shop owners are not aware of the number of search bots, crawlers and skimmers that visit their shops on a daily basis. Some are useful but most are not. All they do is use the accounts bandwidth and slow the server down. This program provides a way to see and control them. Some of its functions are: - View who's on the shop, including visitors and search bots. - View a history of the IP's that have visited and how often. - View the pages in the shop that have been visited and how many times each was visited. - View the pages in the shop that have not been visited. - Look up the DNS data for anyone on the shop. - Ban by an IP, range of IP's or a domain name. - Kick someone off the site and display a warning message. - Send someone a message that is currently on your site. - Trap IP's that do not follow the robots file directive. - Ban IP's that change the url's to cause damage (hackers). - Much more and growing. If you would like it installed for you, it can be ordered from http://www.oscommerce-solution.com/view-counter-p-1171.html The support thread is located at: http://forums.oscommerce.com/topic/392949-view-counter/

Changelog

Uploaded by Jack_mcs

- Added countries to the country blocking list to account for differences in names. - Added many entries to the hacker checking code. See notes below. - Added cross-scripting to the extras .htaccess file. - Changed the trap code since it could give false results under rare conditions. - Changed the Good IP list setting to a textarea. - Changed code to prevent some php notices. - Changed code for the IP Details dialog. Should always return the details now. - Changed the javascript popup code for checking if an IP is in a cidr to use the messagestack. - Changed the .htaccess writing code to properly handle the deny surrounding statements. - Changed the .htaccess writing code to use the servers setenv mod for blocking domain names. - Changed the IP count on the Monitor page to also show counts for bots and admin. - Changed the IP In CIDR button to Check Status. It now checks more places for blocked IP's, though not as many as in the Pro version. - Corrected code that prevented hacker code checking in some cases. - Corrected code to return correct responses for all bans. - Fixed the code for syncing the .htaccess file and database to prevent duplicate entries. - Made a number of minor changes for speed improvement. - Moved the hacker checking code that was in two files to one file. PRO VERSION ONLY: - Added a Security Test in Tools. - Added a Similar IP's report. Allows moving single blocked IP's into CIDR's. - Added a table of Amazon IP's and an option to allow blocking them. - Added a table of good bot IP's (currently only googles) and an option to skip them so they are not accidentally blocked. - Added a cron script to backup the banned and ignored IP's. - Added cross-checking of blocked IP's between Honey Pot and View Counter. - Added a search by IP to the banned log page. - Changed the Banned log to record the count of attempts by an IP. - Changed the IP In CIDR button to Check Status. It now checks if the entered IP is blocked or ignored in any way. - Corrected typos in the database only blocking code. - Improved the email tracking code. - Improved the Hosts blocking code. NOTES: If you use any of the following in the shop, the includes/modules/view_counter_hacker_defines.php file will need to be edited to remove it. - ads.txt - assetlinks.json - used to check apps - may give false positives - Fortinet - humans.txt - leafhacker - an app. Not used but may cause false positives. - phpmyadmin - webfig - Wordpress within the shop (unlikely).

Uploaded by Jack_mcs

Works on any oscommerce version through Phoenix 1.0.8.0. V 1.11 - Added an error message when an invalid entry is made in the Ignore Range box. - Added code to stop an IP from being blocked or ignored when it is already in the other list. - Added partial searching for IP's in the Show Only IP box. So entering something like 54.56. will show all IP starting with 54.56. - Added an option for debug tracing. - Added more google search bots to the bots array. - Added an option to check blocked IP's to see if one is google since not all of their IP's follow normal rules. - Added more tables to the Clear Tables tool. - Added the remote host field to the VC table to help catch bad bots. - Added code to record the page name instead of the parameter when the server error addon is installed (recommended) and it gets accessed. - Changed the code for getting IP details to prevent failures for some IP's. - Changed the code to handle incorrectly entered IP's in the block and ignore boxes. - Changed the code in Monitor to greatly speed up the page load. - Changed the input boxes in the header of the Monitor section to accept input by pressing enter. - Changed the validate domain code since it was missing some bots due to multiple dots. - Changed the install script to restore the settings when a reset is done. - Changed robots.txt file in Extras to reduce size and correct some minor issues. - Changed code for sending emails for hackers and spoofers to ignore customers. - Corrected the emails sent for hackers and spoofers to show if the IP was actually blocked or not. - Corrected the code that identifies search bots that was added in the last version. - Corrected the missing text and layout in the Warning box on the Monitor page. - Corrected the Ignore list checking on the shop side. It was not seeing all ignored IP's. - Corrected mistakes in some of the language files that affected formatting.s - Fixed mistake in email logging code that used the wrong address. - Fixed mistakes in Tools->Maintenance. PRO VERSION ONLY: - Added option to delete individual emails from the email log, Pro Version only. - Added a report to show the blocked countries history. Pro Version only. - Added a report to allow blocking by hosts. Pro Version only. - Added a report to display a log of all changes made. Pro Version only. - Added an on-page indicator showing it a hacking attempt has occurred. Pro Version only. - Changed the email tracking code to ignore emails from registered customers. Pro Version only. - Changed the email tracking code to record the customers IP in the Ignore list to prevent accidental banning. Pro Version only. - Changed option for Bad Words to delete the persons account or not. Pro Version only. - Changed the code for Bad Words to validate the email address. Pro Version only. - Corrected the code in the Skimmers report to handle CIDR's properly. Pro Version only. Requires php 7.1 or higher. I have versions that will work for older versions. Contact me for pricing. Contact me if you would like it installed. Email address: sales@oscommerce-solution.com

Uploaded by Jack_mcs

- Added the sending IP to the bottom of the contact us email. - Added bots to the extra robots file. - Changed code to remove php 7.4 warnings. - Changed bad word code to skip empty lines in the bad words file toprevent php warnings. Pro Version only. - Changed code in Version Checker for php warning. - Changed code in the new address file to prevent duplicate file loading. - Corrected the entry for Vietnam in the countries list. - Corrected typo in the country blocking code. - Corrected mistake in the user agent identifier code. Found by member @Mikepo. - Corrected mistake in the word tracker module. Pro Version only. - Corrected failure in the Page Counts report. Found by member @kofod. - Deleted the old countries list from the new files.

Uploaded by Jack_mcs

- Added a Phoenix version. - Added a setting to hold the database name and a tool in Tools to set it. - Added an option to ignore IPv6 ip's. - Added an option to view reports as a graph for those reports that can use it. - Added more hacker checks. - Added more robot checks. - Added code to delete all deny entries in the .htaccess file. Used for total blocking from the database. - Added code to the Maintainance section in Tools to provide a way to clear tables. - Added a checkbox to the reports section to allow choosing which database table to use (standard or storage). - Added the database name to the hidden section for quick identification. - Changed code to use the new databases provided by IP2Location. - Changed code to no longer use the tep_validate_ip_address function. - Changed the send email option to allow sending to multiple email addresses. - Changed the hacker/spoofing checking code to use a common functions. - Changed definitions in the language files to true paths. - Changed code for the ShowCart function to use a default language if one not found. - Changed the column sorting code in the Monitor section to work better. - Cleaned up html and css code to fix various mistakes or to improve it. - Changed the bot checking code for speed. - Fixed code that prevented a domain name from being blocked. - Fixed Fast Clicks and Path Tracker reports to display a not found message if the entered IP could not be found in the database. - Fixed code that prevented IP ranges and CIDR's from being blocked from the Monitor page. - Fixed code in many places that were causing php warnings. - Fixed the bad trap code where it wasn't blocking some violators. - Fixed the code that handles the Ignore IP's, which were not being used. - Fixed mistake in the hacker checking code that prevented the blocking of some hackers. - Increased the size of the isadmin field to accomodate longer url's. - Made a number of cosmetic changes and improvements. - Removed the files used for older oscommerce versions. - Removed the visitor stats from the hidden section of the Monitor page to decrease page loading time.. - Replaced images in admin with font-awesome icons. - Replaced the file used for country blocking, which had 196 items, with a complete countries and territories list of 323 items. - Replaced the three database installer scripts with one file for easier updates. - Updated the spectrum color code to the latest version. PRO VERSION: - Added email tracking - records the details of all emails sent from the shop to help identify spammers - Added an option to prevent creating an account if the account details contain one of the bad words - Added an option to prevent a second account from being created if it is added too soon after the first one - Added an option to view the cart contents inline, instead of the default popup, on the monitor page - Added a "Hackers Only" type in the monitor section to quickly display caught hacking attempts - Added a panel showing the blocked IP's (catches mistake of over-blocking) - Added page control to the Email report - Added popup display of the messages in Email report - Added the Bad Words tool to allow handling the bad words used in various options - Added the Email report to monitor emails sent by the contact us page to allow blocking of the IP used - Added the Flag Count report to display traffic by flag - Added the Traffic Analyzer report which breaks down the total connections to type of connection - Added the User Agent report to display traffic by search bot and to block them via the robots file - Added the Word Tracker report to show searches on the shop by word count - Added code to handle IPv6 ip's. Experimental at this time - Added a script to automatically download the database - Fixed mistake in reports where the email report prevented switching reports - Fixed mistake in reports for the missing skimmers report

Uploaded by Jack_mcs

Same as last update but included a missed bug fix. This is a full package so the last V 1.8 upload can be skipped.

Uploaded by Jack_mcs

- Added a button next to the IP's in the Monitor section to display only that IP (Pro version only). - Added a check in the write to .htaccess code to be sure the IP exists. - Added a report to identify data skimmers (Pro version only). - Added a cron job to send a skimmer report (Pro version only). - Added more cross-scripting commands to watch for. - Changged all occurrences of FILENAME_ to real name. - Changed the .htaccess write code in tools so the IP's are correctly synced. - Changed the size of the user agent field in the database so it can handle longer strings for some new devices. - Changed the country retrieval code to add a missing array field if needed to prevent strict warnings. - Changed the Check Version code to work with the new apps section. - Changed all reports to use the main table, instead of the storage table, for more accurate results. - Changed the code in all reports to speed them up. - Corrected coding mistakes that would cause Tools to fail (pre 2.3 shops only). - Corrected coding mistake in the new address module that would cause a failure. - Corrected coding mistake in the check IP code (modules) that would cause some IP's to be ignored. - Fixed the code in the IP Counts report to link to a WhoIs page. - Fixed a few minor html errors. - Fixed the Hacker report since it was not displaying all hacking attempts. - Fixed the Referrers report to allow better control of that report. - Removed the edits needed in the admin for the filenames.php and english.php files (BS and later 2.3.4 shops only). - Removed the check for NONSSL in the country blocking code. - Removed NONSSL in the links in admin.

Uploaded by Jack_mcs

- Added an option to list known good IP's that is used on the shop side when banning is done. - Added an option to autofill city, state and country fields on the create account and new address pages. - Changed code on the shop side to enable the banning of IP's that have triggered the bad bot trap. - Fixed some logic errors and made code improvements on the shop side. This is a full package. Support thread: http://forums.oscommerce.com/topic/392949-view-counter/

Uploaded by Jack_mcs

- Added check for show flags back in (was removed in previous version by mistake). - Added an option to disable country blocking for the search engines. - Added code to check for intrusion attacks. The "Is Hacker" color is used to show such links. - Added code to check which fields are returned for the IP data to only report those present. - Added an option to check for unreleased changes. - Added an option to allow external checking for block countries - separate for both shop and admin. - Added a new button on the country blocking page to make changing the countries easier. - Added a "Ban IP" button to the fast clicks reprot. - Added additional help files per users requests. - Changed how the IP is obtained. Now matches what block countries uses. - Changed instructions for left column change. - Changed code in includes.modules/view_counter.php to remove some php warnings - reported by member stefan21. - Changed how banned IP's are checked to prevent IP 0.0.0.0 from causing a problem. - Changed how the block countries code works. It now uses an internal function to get the country name. - Changed IP Count report to show flag and mouseover IP details. - Changed Referrer report to show flag and mouseover IP details. - Fixed problem in the hacker checking code that prevented it from displaying the correct colors. - Fixed a number of minor coding and text mistakes. - Reduced redundant code, which improved the speed of the code. - Removed the API Key setting since it is no longer used. - Renamed the block countries option for admin to check countries, which is more accurate. This is a full package. Support thread: http://forums.oscommerce.com/topic/392949-view-counter/

Uploaded by Jack_mcs

- Added a setting so that the block country function can be turned off and on. - Added a setting to control the length of the names of the categories, manufacturers and products displayed in the monitor and reports sections. - Added a setting to control the date format. Two examples are given but any valid date format string will work. - Added code to display the manufacturers name beside the url parameters. - Added code to skip IPv6 IP's since they were causing errors in some cases. - Added a note to the colors page to show it is not for normal use since many were confused about its purpose. - Changed Path Tracker report so it now shows the name of the category or product. - Changed help code so slashes are handled correctly in the popups. - Changed popup code so it opens correctly in all shops. - Changed the code in the block county module to try using curl before file_get-contents. - Created a database updater that correctly remembers previous settings. - Fixed a problem with the country blocking code that failed onsome shops. - Renamed HEADING_TITLE in the admin language file. It is not used, other than display, and can cause conflicts with addons that use that name. - Updated the IP2Location class file. This is a full package. The support thread is located at: http://forums.oscommerce.com/topic/392949-view-counter/

Uploaded by Jack_mcs

- Added code to prevent duplicate entries in the ignore list. - Added a delete button to the block country section to allow deleting blocked entries. - Changed database install file so it works with 2.3.3.4. - Changed the country blocking module to use curl if fopen won't work on the server. - Fixed a problem with the refresh code in 2.3.3.4 shops. - Fixed a problem with how the ignore list was created. Some IP's would not return as valid. This is a full package. The support thread is located at: http://forums.oscommerce.com/topic/392949-view-counter/

Uploaded by Jack_mcs

Same as the previous upload but with missing corrections. This is a full package. The support thread is located at: http://forums.oscommerce.com/topic/392949-view-counter/

Uploaded by Jack_mcs

- Added a tool to allow the blocking of countries. - Changed the tool layout to be easier to work with. - Changed links on color page to make them fail - color page is for setting colors only. - Changed database file to use innodb tables. - Changed jquery load statements to remove the http protocol which was causing the dialog to fail when used with FF. - Converted code to use IP2Location's database instead of their site, which they stopped. This is a full package. The support thread is located at: http://forums.oscommerce.com/topic/392949-view-counter/

Uploaded by Jack_mcs

- Added a hackers found report - Changed color page to recognize the session ID parameter - Changed form code on color page to use the hide session function to allow loading when SIDs are present - Changed code to prevent View Counter from running with the googlefeeder.php script is ran - Fixed coding errors in tools->Rebuild the .htaccess option - Fixed coding errors for the customer notification tool in admin/view_counter_tools.php - Removed testing code in includes/modules/view_counter.php This is a full package.

Uploaded by Jack_mcs

This addon provides a way to monitor and control what's going on in your shop. If you are familiar with the Who's Online addon, then this can be thought of as Who's Online on steroids. Most shop owners are not aware of the number of search bots, crawlers and skimmers that visit their shops on a daily basis. Some are useful but most are not. All they do is use the accounts bandwidth and slow the server down. This program provides a way to see and control them. Some of its functions are: - View who's on the shop, including visitors and search bots. - View a history of the IP's that have visited and how often. - View the pages in the shop that have been visited and how many times each was visited. - View the pages in the shop that have not been visited. - Look up the DNS data for anyone on the shop. - Ban by an IP, range of IP's or a domain name. - Kick someone off the site and display a warning message. - Send someone a message that is currently on your site. - Trap IP's that do not follow the robots file directive. - Ban IP's that change the url's to cause damage (hackers). - Much more and growing. If you would like it installed for you, it can be ordered from http://www.oscommerce-solution.com/view-counter-p-1171.html The support thread is located at: http://forums.oscommerce.com/topic/392949-view-counter/