Session Cookie implementation

[wapfalls]

How do I add a bot protection like below that works with the subdomains like (cdn.holyubofficial.net)

I understand that it works based on session cookie, can you please help me with an example to implement this.

Thanks.

[easella]

here is an example in php: https://replit.com/@awdrgyjil1234/HardtofindUtterQuotes#index.php

[QuiteAFancyEmerald]

@wapfalls What web server are you using? Huge sorry for the delay

[wapfalls]

@wapfalls What web server are you using? Huge sorry for the delay

Am using Nginx

[QuiteAFancyEmerald]

Perfect :D

You can either use a map directive or merely add this under a location block.

location / {
      ...

      # Cookie Authentication
      if ($http_cookie !~* '__cor_auth=1') {
          return 401;
      }
  }

Lastly if you wish to go further you may also ratelimit any malicious or unwanted user agents using this: https://stackoverflow.com/questions/19337662/blocking-all-bots-except-a-few-with-nginx/24820722#24820722

Credits to Divide and Duce for this.

[vackyton]

why is dis still open?

[wapfalls]

@QuiteAFancyEmerald Thank you so much for the response. I will give it a try! :)