I've also done a quick test, just a small contrib:
I have put the code in
oc-load.php directly inside <?php, so instead of:
<?php require('/path-to-zbblock/zbblock.php'); ?><?php
define( ... )
<?php
require('/path-to-zbblock/zbblock.php');
define( ... );
= no chance of space introduction and code structure follows good practice.
Also, no need to call it in config.php (it works because oc-load is first called from index.php -- maybe you can put it in index.php?).
Some very FUNNY findings:
Some nasty bots try to hack Wordpress. They think my Osclass(es) websites are actually Wordpress and:
They try to hack
Reconstructed URL: http:// www.mywebsite.com /user/login/wp-login.php !!!!!!!!!!!!!!!!!!!!!!!!!!
I get about 100 attempts per hour/per website and all are BLOCKED. Before any db call is exectuted (i guess).
Yes, those are rejected on a server level, unfortunatelly every site gets those on a daily basis (even those dev sites not publicly listed anywhere, bots are randomy scaning IPs).
Regards
