New donations Block [Solved - but looking for better fix]

[.QUACK.Major.Pain]

Your phpBB Version: 2.0.
phpBB Type: Integramod 141
MODs: No
Your knowledge: Beginner
Board URL: [url]http://[/url]

PHP Version:
MySQL Version:


What was done before the problem appeared?



What was done to try to solve the problem?




De.scription and Message

Haven't had any replies from previous posts so I'm trying to figure this out myself. Not that I have much of a clue. LOL

Question is:

$template->assign_vars(array(
'L_NEW_DONATIONS' => $lang['New_donations'],
'DONATE_LINK' => './lwdonate.'.$phpEx,
'L_DONATE_LINK' => $lang['Donate_Funds'],

Is the above from blocks_imp_donate.php, supposed to show both NEW DONATIONS and a DONATE FUNDS
in the block? I see the NEW DONATIONS, but DONATE FUNDS doesn't appear in the block.

Next question:

user_id, lw_post_id, lw_money, lw_plus_minus, MNY_CURRENCY, lw_date, comment, status, txn_id,
lw_site

Above are the categories in the phpbb_account_hist database file. How do I many enter values into the database?
EG: John Doe deposits $20.00 on Jan. 1, 2007

I see the insert function but I want to make sure I do it correctly for each line.

I am thinking the new doantion bloock is ok, the donation part may not be sending donation info to the database.
I want to insert data manually to test if the new doantions block will retrieve it.

[.QUACK.Major.Pain]

Found 1 problem, everytime you use DONATE, it bans the paypal IP because of DDOS attempt attack.
I have set my security for DDOS to ignore and no more bans, but still not showing recent donations.

[ZacFields]

Have you remembered to unblock the previously banned Paypal IP's? Could be that paypal's trying to access through IP's that your forum already has banned.

Zac

[.QUACK.Major.Pain]

I have removed the banned IP 7 times now. My ban list is empty after removing it each time.

[.QUACK.Major.Pain]

Well happy to say that the NEW DONATION block is now working again.

Just set DDos in your security setting to IGNORE and all works fine.

I just didn't wait long enough to for the donation to show.

At first it showed the right way - Donated by: .=QUACK=.Major.Pain 20
and it showed the Donate Here or whatever it is at the bottom.

Now it shows - 20 (Donated by: .=QUACK=.Major.Pain)
and the Donate Here or whatever it was is gone.

Really acts up this thing LOL

Only question now is, how vulnerable is our site with the DDos set to ignore.
Any one have a way to turn it back on and have paypal bypass this without banning paypal IP.

[CaNNon]

"Only question now is, how vulnerable is our site with the DDos set to ignore."

I would say bad! If your site is set to ban then, each IP your attacked from would get banned, and slowly as the attacker runs out of zombie machines you would start to come back up.

If you have nothing defending then well.... you'll get to see your site when he lets you. The only other way you would be able to stop it, would be to block from your host's routers (yea good luck with that support ticket).

I don't know enough to help with your problem, but i do know you don't want to drop any protection you have.

**** edit ****
Just a thought but relaxing the definition of a dos attack a little may well work, but i have no idea, what file you'll need to edit.

[.QUACK.Major.Pain]

I'd be willing to turn it back on as soon as someone can figure out how to stop paypal's returning info from getting banned with every donation.

[CaNNon]

Under that and a little down looks like a second control switch for those ddos attacks.

"DDoS Protection Level:" "Strong" "Medium" "Low"

Have you tested with medium or low, that setting may help?

[.QUACK.Major.Pain]

LOL can't test anything anymore. The guy in our group paying for the server access bailed and banned our ip's. Looking into starting from scratch again. Test it then LOL.

[.QUACK.Major.Pain]

Just an update on the Donation Block
You have to goto ACP>Security>Special and set DDos Protection level to "LOW"
Anything higher than LOW bans PAYPAL IP for returning IPN

I tested medium and banned ip within seconds of the donation.

Maybe someone can figure out a bypass for paypal so that DDos can be set higher.

[CaNNon]

I think low would be fine, if paypal is tripping it like that it's probably just to sensitive.