Hello,

Thank you for developing this module, it has really saved us some security headaches! I have made a correction to our instance of Protector 3.2, and I wanted to mention it so future releases can be patched, if you would like.

The following code can be found in the "DoS" and "CRAWLER" areas of protector.php under the class directory:

default :
case 'exit' :
$this->output_log( $this->last_error_type , $uid , true , 16 ) ;
exit ;
case 'biptime0' :
if( $can_ban ) $this->register_bad_ips( time() + $this->_conf['banip_time0'] ) ;
break ;
case 'bip' :
if( $can_ban ) $this->register_bad_ips() ;
break ;
case 'hta' :
if( $can_ban ) $this->deny_by_htaccess() ;
break ;
case 'sleep' :
sleep( 5 ) ;
break ;


And to this I have added the missing case for "none" as follows:

default :
case 'exit' :
$this->output_log( $this->last_error_type , $uid , true , 16 ) ;
exit ;
case 'none' :
$this->output_log( $this->last_error_type , $uid , true , 16 ) ;
return true;
case 'biptime0' :
if( $can_ban ) $this->register_bad_ips( time() + $this->_conf['banip_time0'] ) ;
break ;
case 'bip' :
if( $can_ban ) $this->register_bad_ips() ;
break ;
case 'hta' :
if( $can_ban ) $this->deny_by_htaccess() ;
break ;
case 'sleep' :
sleep( 5 ) ;
break ;

This allows the "None (Logging Only)" option for f5 and cr to function as expected. Thank you for such a wonderful module!

hi ChaFx.

Quote:Ouch!
It's a real bug.

Thank you for this report.
I've just fixed it.