Hello, all -
First, I'd like to appologize for treading a bit off-topic here, but I think that it will cover a lot of questions that others may have.
My company hosts several "Adult-oriented" Web Sites. Among other tools that we use to combat Password Trading are ProxyPass and iProtect. They're both amazing products, which stop the use of Shared Passwords by detecting multiple logins from different IPs, and they also maintain a database of known abused proxies that are often used in conjunction with these shared/traded passwords, and block connections from them accordingly.
The real magic comes about when you consider how these pieces of software actually work. They don't modify any existing authentication systems, but rather, they're both Apache modules. I've been unable to find an Open Source version of these programs, which I've been looking for, for quite some time. At more than $50.00 per license for ProxyPass and $300.00+ for iProtect, this would be more than a handful back in the pockets of my company, and ultimately, mine, when you consider the amount of our servers that run these tools.
I've found one solution that looks promising called PureMember, but this too, costs a bit. Seeing that is what prompted me to write to the PHP list, because it makes itself into an Apache module using an mmencode procedure.
With that being said, what kind of solutions might the PHP community suggest to combat the trading and abusing of shared or traded passwords? These solutions cannot modify the existing authentication procedures - meaning, I cannot convert a site that relies on .htaccess/.htpasswd authentication to a SQL-based authentication. The solution needs to have some sort of logging, either locally or remotely. The solution also has to be Open Source.
I eagerly await some feedback on this, because like I said, I'm sure there are others that have some of these same questions.
Thanks for your time -dant
-- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
