TIMTAB Bad Behavior¶

What does it do?¶

The extension intercepts any request to TYPO3 and checks whether the request is valid or seems to be coming from a spambot. If the request is considered invalid it is simply dropped. It immediately works after installing and loading the extension, and it doesn't need to be configured at all.

As a result the extension is completely transparent to the extensions used (thus the extension key is misleading – it was simply invented to be used with the TIMTAB extension) and the way the website is set up.

The extension is based on the Bad Behavior scripts published at http://www.bad-behavior.ioerror.us/ and integrates them into TYPO3.

Screenshots¶

Since the extension works completely in the background, there is no output. The only place where one can see it is doing it's work is the root page:

Log entries generated by timtab_badbehavior in list view.

This is also the easiest way to check if the extension works, and what gets blocked. Simply show the Key/Cause column in the list view, and sort by that column. A cause of 00000000 (logged in verbose mode only) means the request was not blocked, all other codes result in the request being blocked. Clicking the edit icon shows the details of the request: timtab_badbehavior log entry details.

You can see the remote IP address, details about the request, the HTTP headers sent and a detailed explanation why the request was blocked. Installation ------------

Simply import the extension through the extension manager and install it. There are two settings that can be set in the extension manager, see below for a description.