PHP - Create Proxy Detection Script

  `id` int(11) NOT NULL auto_increment,
  `age` varchar(200) collate utf8_unicode_ci NOT NULL,
  `city` varchar(200) collate utf8_unicode_ci NOT NULL,
  `username` varchar(30) collate utf8_unicode_ci NOT NULL,
  `password` varchar(150) collate utf8_unicode_ci NOT NULL,
  `salt` varchar(10) collate utf8_unicode_ci NOT NULL,
  `mgroup` int(3) NOT NULL,
  `email` varchar(100) collate utf8_unicode_ci NOT NULL,
  `ip` varchar(15) collate utf8_unicode_ci NOT NULL,
  `posts` int(11) NOT NULL,
  `date_joined` varchar(25) collate utf8_unicode_ci NOT NULL,
  `logged_in` int(1) NOT NULL default '0',
  `last_action_time` int(25) NOT NULL,
  `signature` text collate utf8_unicode_ci NOT NULL,
  `avatar` varchar(300) collate utf8_unicode_ci NOT NULL default 'default',
  `what_is_doing` varchar(30) collate utf8_unicode_ci NOT NULL,
  `what_is_doing_id` varchar(100) collate utf8_unicode_ci NOT NULL,
  `name` varchar(200) collate utf8_unicode_ci NOT NULL,
  `website` varchar(200) collate utf8_unicode_ci NOT NULL,
  `title` varchar(150) collate utf8_unicode_ci NOT NULL,
  `rank_pips` int(11) NOT NULL,
  `friends` tinytext collate utf8_unicode_ci NOT NULL,
  `blocks` tinytext collate utf8_unicode_ci NOT NULL,
  PRIMARY KEY  (`id`)
) ENGINE=MyISAM DEFAULT CHARSET=utf8 COLLATE=utf8_unicode_ci AUTO_INCREMENT=1 ;

<?php

	// Start the session in case of errors to display within the page of user creation
	session_start();
	$err_msg = array();
	$errflag = false;



	// Check if the submit button was pressed
	if ($_SERVER['REQUEST_METHOD'] === 'POST'
		&& $_POST['submit'] === 'Skapa')
	{
		// Crypt password
		$options = ['cost' => 10];

		$username = strip_tags($_POST['uname']);
		$password = strip_tags(password_hash($_POST['pword'], PASSWORD_DEFAULT, $options));
		$email = strip_tags($_POST['uname'], '@');

		// Check so all the fields are filled
		if ($_POST['uname'] == '' || $_POST['pword'] == '' || $_POST['pwordcheck'] == '')
		{
			$err_msg[] = 'Please enter all fields<br>';
			$errflag = true;
		}

		// See if passwords and confirm matches
		if ($_POST['pword'] !== $_POST['pwordcheck'])
		{
			$err_msg[] = 'Passwords doesn\'t match!<br>';
			$errflag = true;
		}

		// Check password length, atleast 8 characters
		if (strlen($_POST['pword']) < 7)
		{
			$err_msg[] = 'Password must be atleast 8 characters long';
			$errflag = true;
		}

		// Check if email exists
		include_once('../includes/db.inc.php');
		$db = new PDO(DB_INFO, DB_USER, DB_PASS);

		$sql = "SELECT COUNT(*) AS count FROM movies WHERE email = :emailadress";
			$stmt = $db->prepare($sql);
			$stmt->bindParam(':emailadress', $email);
			$stmt->execute();
			$row = $stmt->fetch(PDO::FETCH_ASSOC);

		if ($row > 0)
		{
			$err_msg[] = 'Email already taken!';
			$errflag = true;
			$db = NULL;
		}
		

		// Check if user exists
		include_once('../includes/db.inc.php');
		$db = new PDO(DB_INFO, DB_USER, DB_PASS);

		$sql = "SELECT uname FROM users WHERE uname = :username";
			$stmt = $db->prepare($sql);
			$stmt->bindParam(':username', $username);
			$stmt->execute();
			$row = $stmt->fetch(PDO::FETCH_ASSOC);

		if ($row > 0)
		{
			$err_msg[] = 'User already exists';
			$errflag = true;
			$db = NULL;
		}

		if ($errflag = false)
		{
			// Everything passed, create the user!
			include_once('../includes/db.inc.php');
			$db = new PDO(DB_INFO, DB_USER, DB_PASS);

			$sql = "INSERT INTO users (uname, pword, email) VALUES (:username, :password, :emailadress)";
				$stmt = $db->prepare($sql);
				$stmt->bindParam(':username', $username);
				$stmt->bindParam(':password', $password);
				$stmt->bindParam(':emailadress');
				$stmt->execute();

			$_SESSION['uname'] = $username;
			header('Location: ../template/header.php');
			exit;
		}
				
		// If any error, send the user back and display messages
		if ($errflag == true)
		{
			$_SESSION['err_msg'] = $err_msg;
			session_write_close();
			header('Location: ../user/create.php');
			exit;
		}
	}

	else
	{
		$_SESSION['err_msg'] = $err_msg;
			session_write_close();
			header('Location: ../user/create.php');
		exit;
	}

?>

$server = "whois.nic.cz";
$domain = "klikzone.cz";

function QueryWhoisServer($server, $domain){
    $proxy = "85.111.25.189:8080";
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $server);
    curl_setopt($ch, CURLOPT_PORT, 43);
    curl_setopt($ch, CURLOPT_PROXY, $proxy);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
    curl_setopt($ch, CURLOPT_HEADER, 1);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_TIMEOUT, 30);
    curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $domain . "\r\n");
    $data = curl_exec($ch);
    curl_close($ch);
    return $data;  
}

Hi I need a script to hide  IP address with proxy and read a web page

$username="myuser";
$password="mypass";


$url = "http://www.mysite.com";
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_PROXY, '173.234.11.134');
curl_setopt($ch, CURLOPT_PROXYPORT,'80');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_USERPWD, "$username:$password");
curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
$output = curl_exec($ch);
$info = curl_getinfo($ch);




echo $output;
curl_close($ch);
 

The script doesn't work, it doesn't show me the page output. Any solution?

Hi,

I'm trying to understand any how I can block all users trying to view my website through proxies. With the following code, what I have done is a quick version through php (with headers and ports) and not the firewall which isn't exactly the best way but still stops a lot of them.

<?php
$user_ip = $_SERVER['REMOTE_ADDR'];
$headers = array('CLIENT_IP','FORWARDED','FORWARDED_FOR','FORWARDED_FOR_IP','VIA','X_FORWARDED','X_FORWARDED_FOR','HTTP_CLIENT_IP','HTTP_FORWARDED','HTTP_FORWARDED_FOR','HTTP_FORWARDED_FOR_IP','HTTP_PROXY_CONNECTION','HTTP_VIA','HTTP_X_FORWARDED','HTTP_X_FORWARDED_FOR');
foreach ($headers as $header) {
	if (isset($_SERVER[$header])) {
		header("Location: /proxy-not-allowed/");
		die;
	}
}
$queryIP = "SELECT `user_ip_address` FROM `my_table` WHERE `user_ip_address` = :user_ip_address AND `user_blocked` = :user_blocked LIMIT 1";
$queryIP1 = $pdo->prepare($queryIP);
$queryIP1->execute(array(':user_ip_address' => $user_ip, ':user_blocked' => 'No'));
$queryIP2 = $queryIP1->rowCount();
if ($queryIP2 === 0) {
	$ports = array(80, 81, 553, 554, 1080, 3128, 4480, 6588, 8000, 8080);
	foreach ($ports as $port) {
		$connection = @fsockopen($user_ip, $port, $errno, $errstr, 0.1);
		if (is_resource($connection)) {
			header("Location: /proxy-not-allowed/");
			die;
		}
	}
}
?>

The headers script blocks any proxy sending those headers while the ports script blocks those using any assigned ports I add. I have tested this which seems to be good, though it won't block all proxies due to the assigned one I have. Is this the best way to go about blocking scripts if I don't have access to the firewall?

What I am trying to do is allow users to view my HTTPS website normally and block all proxies. Even if I have some users blocked, I do not want them to be cheeky and use a proxy or even register on my website through a proxy. I was thinking of just using the 443 port as my website is https (is that wise?). Any advice would be great.