
Originally Posted by
nux
I added this to the submit-proxy.php file in the document root
if (strstr($url['host'], ".tk")) // Block the free TLD .tk
$errors[] = 'The TLD .tk is not allowed. Please try again';
To be honest it bugged me for a couple months, and was only like 30 seconds of coding to fix it.. Hah!
Thanks a lot. I have ammended your code to block tk domains when submitted using capitals or combinations such as .tK and Tk as this loophole could be exploited.
Code:
if (strstr($url['host'], ".tk") or strstr($url['host'], ".TK") or strstr($url['host'], ".Tk") or strstr($url['host'], ".tK")) // Block the free TLD .tk
$errors[] = 'The TLD .tk is not allowed.';
Bookmarks