Аккаунт в General iT
Войдите или создайте аккаунт для управления услугами в панели.
MODULE FOR 1C-BITRIX
Good Solutions
The Anti-bot module automatically protects websites from bots, scrapers, and suspicious traffic using a set of rules and a JS Challenge. The system analyzes User-Agent, IP address, GeoIP location, UTM tags, and browser behavior to distinguish between real users and automated scripts.
The Anti-bot module automatically protects websites from bots, scrapers, and suspicious traffic using a set of rules and a JS Challenge. The system analyzes User-Agent, IP address, GeoIP location, UTM tags, and browser behavior to distinguish between real users and automated scripts.
When rules are triggered, the module either blocks the request entirely (returning a 403 status code) or displays an intermediate JS challenge page. This page allows only genuine browsers to pass through without hindering legitimate visitors.
Key functions of the module:
Filtering out basic scrapers and scanners that use suspicious or missing User-Agent headers.
Blocking traffic from unwanted countries (GeoIP blacklist) or, conversely, restricting access to specific regions only.
Protection against brute-force attacks and mass automated traffic targeting public pages and forms.
Preserving the integrity of statistics and SEO metrics by reducing the share of non-targeted visits.
How it works:
The module activates on every request via the early OnPageStart event, retrieving data on IP, User-Agent, country, and UTM tags.
The first step involves checking IP and UTM whitelists; requests from trusted sources are allowed to pass immediately.
The module sequentially checks the User-Agent blacklist and, if necessary, the country-based rule (block_foreign). Requests matching these lists receive a 403 response and do not reach the site.
For borderline cases, a JS-Challenge is used: the module displays a special HTML page that executes a simple script and sets a 'human' flag in the cookie. Bots without JavaScript support cannot proceed further.
All triggered rules are logged with the date, IP address, URL, 'bot/human' flag, and blocking reason.
Flexible traffic configuration. The module supports IP and User-Agent allowlists and blocklists, a GeoIP filter, and configurable UTM tags for SEO bots or internal checks.
Soft protection via JS-Challenge. Instead of a hard 403 rejection, the module can display a lightweight intermediate page that a standard browser passes in a fraction of a second, while bots cannot.
Detailed traffic logging. The admin panel includes a section listing protection triggers, showing the total number of requests, the count of blocked requests, and the number of real users.
General iT can install and configure this module and check how it works on your website.
UPDATE HISTORY
What's new in version 1.0.7:
Safe export of the log to CSV with filter and sorting support has been added to 'Honest Analytics'.
A separate option to block explicit headless browsers with the User-Agent 'HeadlessChrome' has been added.
The headless browser blocking option is disabled by default to avoid interfering with PF services, Lighthouse, and headless monitoring.
What's new in version 1.0.6:
The 405 response when opening a URL with the service parameter 'gs_antibot_action' has been fixed.
Random GET requests with the service parameter are now redirected to the same URL without that parameter.
The response to a successful JS check ends immediately after returning JSON and no longer triggers page rendering.
The 'gs_antibot_action' parameter has been excluded from pagination, metadata, and the site component cache.
What's new in version 1.0.5:
A blacklist for individual IP addresses and CIDR subnets with support for IPv4 and IPv6 has been added.
A quick command to add IPs to the blacklist has been added to the 'Honest Analytics' log.
Triggering a network rule is now logged with the reason 'BLOCK_IP_RULE' and the exact IP/CIDR rule.
Geolocation has been switched to standard 1C-Bitrix handlers without calling an incompatible external IP-API.
For an undefined country, a safe option has been added: either skip the visitor or show a JS-Challenge.
Validation of IP addresses and CIDR subnets before saving settings has been added.
Compatibility with demo mode and the challenge-token protection mechanism of version 1.0.4 has been preserved.
What's new in version 1.0.4:
Added compatibility with the demo mode of the 1C-Bitrix Marketplace.
Strengthened antibot_token verification: the global salt has been replaced with an individual installation secret, MD5 has been replaced with HMAC-SHA256, hourly rotation and hash_equals() have been added.
Behavioral antibot_behavior is now signed by the server via HMAC and validated by its expiration time. Unsigned client-side JSON is no longer considered trusted.
Retrieval of human- and behavior-tokens is protected by Bitrix sessid and a short-lived server-side challenge bound to the IP address and token purpose.
Search and advertising User-Agents are verified via reverse and forward DNS, so browser string spoofing no longer allows automatic bypass of protection.
UTM exclusions apply only to visitors who have already passed the JS-Challenge.
Removed the non-cryptographic fallback secret generator: if random_bytes() is unavailable, the module safely terminates the operation.
Public protection is correctly disabled after the demo period expires and does not block site traffic.
Clear messages for the expired demo period have been added to the settings and log.
The include.php file has been prepared for obfuscation of the demo version in accordance with Bitrix requirements.
What's new in version 1.0.3:
Enhanced admin journal security: added a whitelist for sort fields and output escaping for user data (IP, URL, User-Agent).
Added a safe fallback for the old database schema: the journal opens without a fatal error even before the migration is executed.
Strengthened IP geolocation validation: IP validation + switching to an HTTPS request to ip-api.
Added a log table structure migration during updates (automatic addition of DECISION_CODE and MATCHED_RULE columns if they are missing).
Added a JS behavioral signal (lightweight fingerprint token: mouse/scroll/keypress/touch + webdriver).
In the suspicious direct traffic branch, a challenge is added if the behavioral signal is missing or invalid.
Added a new setting: "Enable JS behavioral signal".
Safe defaults preserved: advertising bots in the whitelist, Suspicious traffic mode set to monitor by default.
What's new in version 1.0.2:
Added advertising bots to the default whitelist: YaDirectFetcher, AdsBot-Google, AdsBot-Google-Mobile, Google-Read-Aloud.
Added a safe switch "Module active" — stops protection without removing the module.
Added the "Save logs when removing the module" option.
Added rule trigger reasons to the journal and a quick filter "Only blocked advertising bots".
Added heuristic for suspicious direct traffic with modes off / monitor / block (default: monitor).
The update includes a soft migration: new log fields and whitelist UA additions without overwriting client rules.
What's new in version 1.0.1:
Fixed a pagination error and data display in the traffic log table (migration to CAdminResult).
Improved the bot detection algorithm and IP address database checks.
Updated the event handler and settings save logic.
Optimized the performance of the admin logs page.
Added the ability to exclude good bots from statistics.
YOUR PROJECT INFRASTRUCTURE
FROM THE SAME DEVELOPER
Good Solutions
Good Solutions
The module automates the population of ALT and TITLE attributes for images, writing data directly into the product's SEO tab. Generation occurs automatically upon saving an element, eliminating the need for manual intervention by content managers. The tool creates unique descriptions by combining static text with dynamic infoblock variables.
Good Solutions
The module automatically copies values from one element property to another within an information block (for products or news) during creation or update. This is useful for integrating catalog data with 1C or handling non-standard imports where property synchronization is required without code modification.
Good Solutions
The Interactive Map module converts static images, plans, and diagrams into clickable website elements. A visual editor allows users to highlight areas, assign colors, and add tooltips and links. This tool optimizes spatial data visualization by replacing text lists with an interactive plan.
MORE FOR YOUR WEBSITE
Content Block Builder
The module adds a composite property type for information block elements called "Content Block Builder." Administrators define block schemas by specifying required fields and their types. Content editors fill out ready-made forms directly within the element card. On the website, the module returns structured data as value arrays.
Xlogic
The xlogic.propertymanager module simplifies mass management of information block properties in systems based on 1C-Bitrix. The tool allows simultaneous configuration of parameters for dozens or hundreds of properties, eliminating the need to manually open each property card to enable smart filters or adjust display settings.
SAMOVAR
Accessibility version for 1C-Bitrix websites The module adds a special panel to pages, allowing users with visual impairments to flexibly adjust content display. Available settings include font size adjustment, color scheme switching, and the ability to toggle images on or off. The solution does not create a separate site copy but dynamically adapts existing content in real time.
BEFORE YOU ORDER