Welcome! Log In Create A New Profile

Advanced

NGINX as some sort of token server.

Posted by thorwald 
NGINX as some sort of token server.
June 26, 2014 07:33AM
Hi guys,

I'm wondering if there is any way to configure nginx to be some sort of token server for some urls.
Let me give you an example. There are number of requests to the url like post.php. Some of them are actually spam requests and abuses. Is there any way to do something like when the user accesses post.php nginx displays a "token site" which basically says "Please click here to continue". Based on the click it forwards you to the desired destination.

Thank you for your help!
Re: NGINX as some sort of token server.
June 26, 2014 08:35AM
This is easily defeated, your better of with something like moving a box with the mouse to access resources.
For example https://www.phpbb.com/customise/db/mod/sortables_captcha_plugin/ is a good one.

---
nginx for Windows http://nginx-win.ecsds.eu/
Re: NGINX as some sort of token server.
June 26, 2014 11:15AM
The trouble is I want to take the load from the backend and dump it onto nginx.

The solution you're offering is good only for phpBB. How do you want to implement that for a server having 10k multiple websites, some having attacks against post.php, wp-login.php, wp-comments-post.php etc ?

My idea was to create a simple website managed by nginx which will be displayed if $request_uri matches then if "token" will be valid redirect to the original destination.

Some sort of server wide protection not single website plugin.

Thank you.
Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 133
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready