Aggressive Bot and Parser Protection Script (JS Challenge + Rate Limit)

🛡️ Protect Your Website from Downtime and Scraping in 5 Minutes!

MurKir Security is a powerful and lightweight traffic filtering script (WAF) that acts as a "face control" for your website. It analyzes every visitor before your heavy CMS (WordPress, OpenCart, etc.) even starts loading. This drastically reduces server load and prevents downtime during attacks.

The script utilizes Redis for lightning-fast request counting, ensuring zero load on your MySQL database.

🔥 Who Needs This?

1. Website owners suffering from Layer 7 DDoS attacks.
2. Projects facing hosting suspensions due to high CPU/RAM usage.
3. Content creators protecting their data from scrapers and parsers.
4. Administrators looking to secure login pages from Brute Force.

⚙️ How It Works

1. Regular User: Accesses the site instantly. No CAPTCHA required (Smart Cookie Check).
2. Search Bots (Google/Bing): Allowed automatically via IP Whitelist. SEO rankings remain safe.
3. Suspicious Bot: Presented with a JS Challenge screen. The browser solves a mathematical Proof-of-Work (PoW) task, burdening the bot's CPU, not your server.
4. Aggressive Attacker: Instantly blocked via Rate Limiting (Redis) or System Firewall (Iptables).

🚀 Key Features

1. Dual Operation Modes:
2. Lite Mode (Shared Hosting): Blocks requests via PHP + Redis (Returns 403 Forbidden).
3. PRO Mode (VPS/VDS): Completely blocks access to the server via Iptables API (Hard Ban).
4. Powerful Admin Panel: Real-time attack monitoring, ban management, search bot logs, and whitelist control.
5. Smart PoW: Advanced protection against "smart" bots capable of executing basic JavaScript.
6. Auto-Cleanup: CRON script automatically unbans IPs after a set period.
7. Customization: Includes 2 built-in themes for the verification screen.

📋 Server Requirements

1. PHP 5.6 or higher (up to 8.3).
2. Redis Server (Required).
3. PHP-Redis Extension.
4. For PRO Mode only: Linux (Ubuntu/Debian/CentOS) with Root/Sudo access.

📦 What's Included?

1. inline_check_lite.php — Core Security Engine.
2. redis-bot_admin.php — Administration Control Panel.
3. iptables.php & cleanup.php — API & Cleanup Modules.
4. Detailed HTML Documentation (Installation & Setup Guide).