You are on page 1of 2

1: Chng iframe.

K tn cng s mn 1 website c lt truy cp ln no chn cc iframe hng v website cn


nh ri cho chy lnh refresh (ti li) nhiu ln hoc h vit sn 1 tp tin flash vi cng dng tng
t ri t ln website v khi ngi dng truy cp vo website ny th h v tnh bt c d tr thnh
ngi tn cng website kia.
Gii php: chn 1 on m Javascript chng chn iframe t cc website khc n website ca
mnh.
<script language="JavaScript">
if (top.location != self.location)
{top.location = self.location}
</script>

2: Chng ti li trang web c c


Mt hnh thc tn cng khc na l dng phm F5 lin tc c ch , hoc dng mt phn mm c
lp trnh sn vi cng dng tng t (ti li trang web lin tc sau nhng khong thi gian nh
sn) ca mt nhm ngi lm cho trang web ca bn ti li (reload) lin tc. Vic ny c th lm tn
bng thng ca trang web hoc lm trang web chy chm v nhng kt ni o.
Gii php: thit lp tp tin .htaccess vi ni dung:
RewriteEngine on
RewriteCond %{HTTP_REFERER} !^http(s)?://(www.)?domain.com [NC]
RewriteRule !antiddos.phtml http://www.domain.com/antiddos.phtml?%{REQUEST_URI} [QSA]
Sau to thm mt mt tp tin antiddos.phtml c ni dung
<?
$text = $HTTP_SERVER_VARS['QUERY_STRING'];
$text = preg_replace("#php&#si",'php?',$text);
echo('<center><a href=http://www.domain.com/?'.$text.'><font color=red size=5
face=Monotype>[CLICK HERE TO ENTER]</font></a</center>');
?>
upload 2 tp tin ny ln th mc gc ca website. Nh vy l mi khi truy cp vo website, nu ln
u tin th s c thng bo yu cu nhn chut th bn mi vo c website v cc ln sau s
khng c v cc phn mm DDOS c lp trnh s b chn li bc click chut vo trang
web ln truy cp u tin nn vic ti li trang web ch n thun l 1 trang HTML nh khng nh
hng nhiu n h thng.
Ch l cch ny ch p dng cho website ang s dng server chy trn nn Linux.
3: Gii hn s kt ni website ti mt thi im
Khi mt khch truy cp vo website th s to ra mt truy vn kt ni vi c s d liu (CSDL) ly
thng tin v tr v thng qua hin th ca website. Mi my ch s c php bao nhiu truy vn kt
ni l hn nh v khi vt qu hn mc ny th vic truy cp s kh khn hoc khng th truy xut
c. Cc tin tc li dng vo iu ny to ra cc truy cp o, kt ni o thng qua proxy hay
chuyn nghip hn l mng botnet nhm nh sp trang web v ph hng CSDL website.

Gii php: ch ng gii hn s kt ni truy vn tin (lt truy cp) cng mt thi im.
Thm dng on m sau vo trang ch ca website.
function server_busy($numer) {
if (THIS_IS == 'WEBSITE' && PHP_OS == 'Linux' and @file_exists ( '/proc/loadavg' ) and $filestuff =
@file_get_contents ( '/proc/loadavg' )) {
$loadavg = explode ( ' ', $filestuff );
if (trim ( $loadavg [0] ) > $numer) {
print '<meta http-equiv="content-type" content="text/html; charset=UTF-8" />';
print 'Lng truy cp ang qu ti, mi bn quay li sau vi pht.';
exit ( 0 );
}
}
}
$srv = server_busy ( 100 ); // 100 l s ngi truy cp ti 1 thi im
on m trn c ngha cho php 100 ngi online trn website ti mt thi im. Nu vt qua
s 1000 th khch truy cp s nhn c thng bo: Lng truy cp ang qu ti. Mi bn quay li
sau vi pht.

You might also like