/onionbb

Tor onion hardening plugin for phpBB forum software

Primary LanguagePHPGNU General Public License v2.0GPL-2.0

Onionbb: Tor hardening

Requeriments

  • phpBB >= 3.3.9
  • PHP >= 8.0

Features

  • IP whitelisting: only these IPs can make request to the forum.
  • Block Tor2Web.
  • Make sure client is connecting to our service and not the default virtualhost.
  • Block non-standard UserAgent (non-browsers and bots).
  • Only allow the latest version of Tor Browser and block other browsers.
  • Implement HTTP security headers on Response like:
    • Referrer-Policy.
    • X-Content-Type-Options.
    • X-Frame-Options.
    • Content-Security-Policy. Disable Javascript execution.

Installation

Copy the extension to phpBB/ext/cypherbits/onionbb

Go to "ACP" > "Customise" > "Extensions" and enable the "Onionbb: Tor hardening" extension.

License

GPLv2