Re: [Koha] Securing opac-search

2025-03-18 Thread David Cook
Hi Christina, Locally for the Koha instances I support, I've been writing some experimental user-friendly Koha-based anti-bot code. Firstly, I rate limit the number of visits to opac-search.pl based on IP address blocks. That is, if multiple IP addresses from a /24 or /16 CIDR block perform X

Re: [Koha] Search Sort by Title (A-Z) for non-Latin alphabets like Arabic Language

2025-03-18 Thread Fridolin SOMERS
Look at this wiki page https://wiki.koha-community.org/wiki/Correcting_Search_of_Arabic_records But strange it does not speak about sorting. With Zebra looks like it depends on sort-string-utf.chr, and there is no arabic specific verison of this file. Maybe it is better with Elasticsearch. B

Re: [Koha] Securing opac-search

2025-03-18 Thread Michael Kuhn
Hi Christina You wrote: > Koha 24.11.01 > > Not strictly a Koha problem but something I know a lot of Koha users > face. After years of running happily with fail2ban and robots.txt > blocking bots/crawlers, the security seems to have passed. We've been > getting more and more bots of late switch

Re: [Koha] Securing opac-search

2025-03-18 Thread Philippe Blouin
Here we're on 24.05, with no issue.  But I use drastic measures, an array of them accumulated over years. First of all: there are many $$ services that do very well the job, and would make sense for individual entities.  For service providers like us, that could become expensive. Many hacks

Re: [Koha] Securing opac-search

2025-03-18 Thread Magnus Enger
Kia ora! Den 18.03.2025 13:59, skrev Fairlamb, Christina: Hello, Koha 24.11.01 Not strictly a Koha problem but something I know a lot of Koha users face. After years of running happily with fail2ban and robots.txt blocking bots/crawlers, the security seems to have passed. We've been getting mo

[Koha] Securing opac-search

2025-03-18 Thread Fairlamb, Christina
Hello, Koha 24.11.01 Not strictly a Koha problem but something I know a lot of Koha users face. After years of running happily with fail2ban and robots.txt blocking bots/crawlers, the security seems to have passed. We've been getting more and more bots of late switching IPs before bans can take p