BranchesTags

Repository files navigation

⚠️Status: untested. This extension is provided as-is and has not been tested in production. Please feel free to fork, modify, improve, and open pull requests.

Licensed under GNU GPLv3 (see LICENSE).

IP Block Protection (Drupal module)

Screens front-end requests through the ip-block.com IP-screening service and blocks disallowed visitors as early as possible in the request lifecycle. Works with Drupal core and Drupal Commerce.

  • Platform: Drupal 11 (current stable, tested against 11.4.x; also supports Drupal 10 via core_version_requirement: ^10 || ^11).
  • Machine name:ipblock_protection

How it works

A high-priority KernelEvents::REQUEST event subscriber (src/EventSubscriber/IpBlockSubscriber.php) runs before page rendering. For each main front-end request it:

  1. Skips admin-area requests (both resolved admin routes and /admin, /user/login, /core/... path prefixes) so the operator is never locked out.
  2. Resolves the real client IP (honouring Behind proxy: CF-Connecting-IP, then the first X-Forwarded-For hop).
  3. Always allows whitelisted IPs (never sent to the service).
  4. Looks up a cached decision keyed by md5(ip|user_agent|referrer) in the default cache bin.
  5. On a cache miss, calls the ip-block.com API and caches the decision.
  6. Blocks only when the API returns {"action":"block"}.

API contract

POST https://api.ip-block.com/v1/check
Content-Type: application/json
{"api_key": "...", "site_id": "...", "ip": "...", "user_agent": "...", "referrer": "..."}

Response {"action":"allow"} or {"action":"block"}. A 1 second timeout is enforced. On any error, timeout, non-2xx response or missing action, the configured fail mode applies (default: fail open = allow).

Installation

  1. Copy the ipblock_protection folder to modules/custom/ in your Drupal site (i.e. web/modules/custom/ipblock_protection).
  2. Enable it: drush en ipblock_protection or via Extend in the UI.
  3. Configure at Administration › Configuration › System › IP Block Protection (/admin/config/system/ipblock-protection).

Configuration options

SettingDefaultNotes
EnabledoffMaster switch.
Site ID / API keyemptySupplied by ip-block.com.
API URLhttps://api.ip-block.com/v1/check
Fail openonAllow visitors when the service errors/times out.
Cache TTL300Seconds. 0 = check every request.
Behind proxyoffTrust CF-Connecting-IP / X-Forwarded-For.
Block actionredirectredirect to blocked page, or 403 message.
Block messageAccess denied.Used when action is message.
WhitelistemptyOne IP per line, always allowed.

Files

ipblock_protection/
├── ipblock_protection.info.yml
├── ipblock_protection.services.yml
├── ipblock_protection.routing.yml
├── ipblock_protection.links.menu.yml
├── config/install/ipblock_protection.settings.yml
├── config/schema/ipblock_protection.schema.yml
├── src/IpBlockClient.php
├── src/IpBlockChecker.php
├── src/EventSubscriber/IpBlockSubscriber.php
└── src/Form/SettingsForm.php

About

IP Block protection for Drupal — ip-block.com integration. Untested at the moment; please feel free to modify. GPLv3.

Topics

bot-protectiondrupaldrupal-moduleip-blockip-blockingphpsecurity

Resources

Readme
GPL-3.0 license

Contributing

Contributing
Activity
Custom properties

Stars

0 stars

Watchers

0 watching

Forks

0 forks
Report repository

Releases

Packages

Contributors

Languages

, 'i'); if (__m === '*' || __re.test(location.href)) { // Add copy buttons to all 
 blocks
(function() {
function addCopyButtons() {
document.querySelectorAll('pre code').forEach(function(codeBlock) {
if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;
codeBlock.parentElement.setAttribute('data-copy-added', 'true');
var btn = document.createElement('button');
btn.textContent = 'Copy';
btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';
btn.onmouseover = function() { this.style.opacity = '1'; };
btn.onmouseout = function() { this.style.opacity = '0.7'; };
btn.onclick = function() {
navigator.clipboard.writeText(codeBlock.textContent).then(function() {
btn.textContent = 'Copied!';
setTimeout(function() { btn.textContent = 'Copy'; }, 1500);
});
};
codeBlock.parentElement.style.position = 'relative';
codeBlock.parentElement.appendChild(btn);
});
}
addCopyButtons();
// Re-run on dynamic content
var observer = new MutationObserver(addCopyButtons);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '

Skip to content
BranchesTags
Repository files navigation
⚠️Status: untested. This extension is provided as-is and has not been tested in production. Please feel free to fork, modify, improve, and open pull requests.
Licensed under GNU GPLv3 (see LICENSE).
IP Block Protection (Drupal module)
Screens front-end requests through the ip-block.com
IP-screening service and blocks disallowed visitors as early as possible in the
request lifecycle. Works with Drupal core and Drupal Commerce.
  • Platform: Drupal 11 (current stable, tested against 11.4.x; also supports Drupal 10 via core_version_requirement: ^10 || ^11).
  • Machine name:ipblock_protection
How it works
A high-priority KernelEvents::REQUEST event subscriber
(src/EventSubscriber/IpBlockSubscriber.php) runs before page rendering. For
each main front-end request it:
  1. Skips admin-area requests (both resolved admin routes and /admin,
/user/login, /core/... path prefixes) so the operator is never locked out.
  2. Resolves the real client IP (honouring Behind proxy:
CF-Connecting-IP, then the first X-Forwarded-For hop).
  3. Always allows whitelisted IPs (never sent to the service).
  4. Looks up a cached decision keyed by md5(ip|user_agent|referrer) in the
default cache bin.
  5. On a cache miss, calls the ip-block.com API and caches the decision.
  6. Blocks only when the API returns {"action":"block"}.
API contract
POST https://api.ip-block.com/v1/check
Content-Type: application/json
{"api_key": "...", "site_id": "...", "ip": "...", "user_agent": "...", "referrer": "..."}

Response {"action":"allow"} or {"action":"block"}. A 1 second timeout is
enforced. On any error, timeout, non-2xx response or missing action, the
configured fail mode applies (default: fail open = allow).
Installation
  1. Copy the ipblock_protection folder to modules/custom/ in your Drupal
site (i.e. web/modules/custom/ipblock_protection).
  2. Enable it: drush en ipblock_protection or via Extend in the UI.
  3. Configure at Administration › Configuration › System › IP Block
Protection (/admin/config/system/ipblock-protection).
Configuration options
SettingDefaultNotes
EnabledoffMaster switch.
Site ID / API keyemptySupplied by ip-block.com.
API URLhttps://api.ip-block.com/v1/check
Fail openonAllow visitors when the service errors/times out.
Cache TTL300Seconds. 0 = check every request.
Behind proxyoffTrust CF-Connecting-IP / X-Forwarded-For.
Block actionredirectredirect to blocked page, or 403 message.
Block messageAccess denied.Used when action is message.
WhitelistemptyOne IP per line, always allowed.
Files
ipblock_protection/
├── ipblock_protection.info.yml
├── ipblock_protection.services.yml
├── ipblock_protection.routing.yml
├── ipblock_protection.links.menu.yml
├── config/install/ipblock_protection.settings.yml
├── config/schema/ipblock_protection.schema.yml
├── src/IpBlockClient.php
├── src/IpBlockChecker.php
├── src/EventSubscriber/IpBlockSubscriber.php
└── src/Form/SettingsForm.php

About
IP Block protection for Drupal — ip-block.com integration. Untested at the moment; please feel free to modify. GPLv3.
Topics
bot-protectiondrupaldrupal-moduleip-blockip-blockingphpsecurity
Resources
Readme
GPL-3.0 license
Contributing
Contributing
Activity
Custom properties
Stars
0 stars
Watchers
0 watching
Forks
0 forks
Report repository
Releases
Packages
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Force GitHub README to respect dark mode
(function() {
var style = document.createElement('style');
style.textContent = '
.markdown-body {
color-scheme: dark light;
}
.markdown-body pre { background: #161b22 !important; }
.markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }
.markdown-body table th, .markdown-body table td { border-color: #30363d !important; }
.markdown-body img { background: #0d1117; }
.markdown-body blockquote { border-left-color: #8b949e; }
.markdown-body hr { border-color: #30363d; }
';
document.head.appendChild(style);
})();
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
BranchesTags
Repository files navigation
⚠️Status: untested. This extension is provided as-is and has not been tested in production. Please feel free to fork, modify, improve, and open pull requests.
Licensed under GNU GPLv3 (see LICENSE).
IP Block Protection (Drupal module)
Screens front-end requests through the ip-block.com
IP-screening service and blocks disallowed visitors as early as possible in the
request lifecycle. Works with Drupal core and Drupal Commerce.
  • Platform: Drupal 11 (current stable, tested against 11.4.x; also supports Drupal 10 via core_version_requirement: ^10 || ^11).
  • Machine name:ipblock_protection
How it works
A high-priority KernelEvents::REQUEST event subscriber
(src/EventSubscriber/IpBlockSubscriber.php) runs before page rendering. For
each main front-end request it:
  1. Skips admin-area requests (both resolved admin routes and /admin,
/user/login, /core/... path prefixes) so the operator is never locked out.
  2. Resolves the real client IP (honouring Behind proxy:
CF-Connecting-IP, then the first X-Forwarded-For hop).
  3. Always allows whitelisted IPs (never sent to the service).
  4. Looks up a cached decision keyed by md5(ip|user_agent|referrer) in the
default cache bin.
  5. On a cache miss, calls the ip-block.com API and caches the decision.
  6. Blocks only when the API returns {"action":"block"}.
API contract
POST https://api.ip-block.com/v1/check
Content-Type: application/json
{"api_key": "...", "site_id": "...", "ip": "...", "user_agent": "...", "referrer": "..."}

Response {"action":"allow"} or {"action":"block"}. A 1 second timeout is
enforced. On any error, timeout, non-2xx response or missing action, the
configured fail mode applies (default: fail open = allow).
Installation
  1. Copy the ipblock_protection folder to modules/custom/ in your Drupal
site (i.e. web/modules/custom/ipblock_protection).
  2. Enable it: drush en ipblock_protection or via Extend in the UI.
  3. Configure at Administration › Configuration › System › IP Block
Protection (/admin/config/system/ipblock-protection).
Configuration options
SettingDefaultNotes
EnabledoffMaster switch.
Site ID / API keyemptySupplied by ip-block.com.
API URLhttps://api.ip-block.com/v1/check
Fail openonAllow visitors when the service errors/times out.
Cache TTL300Seconds. 0 = check every request.
Behind proxyoffTrust CF-Connecting-IP / X-Forwarded-For.
Block actionredirectredirect to blocked page, or 403 message.
Block messageAccess denied.Used when action is message.
WhitelistemptyOne IP per line, always allowed.
Files
ipblock_protection/
├── ipblock_protection.info.yml
├── ipblock_protection.services.yml
├── ipblock_protection.routing.yml
├── ipblock_protection.links.menu.yml
├── config/install/ipblock_protection.settings.yml
├── config/schema/ipblock_protection.schema.yml
├── src/IpBlockClient.php
├── src/IpBlockChecker.php
├── src/EventSubscriber/IpBlockSubscriber.php
└── src/Form/SettingsForm.php

About
IP Block protection for Drupal — ip-block.com integration. Untested at the moment; please feel free to modify. GPLv3.
Topics
bot-protectiondrupaldrupal-moduleip-blockip-blockingphpsecurity
Resources
Readme
GPL-3.0 license
Contributing
Contributing
Activity
Custom properties
Stars
0 stars
Watchers
0 watching
Forks
0 forks
Report repository
Releases
Packages
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Highlight search terms from Google/DuckDuckGo/Bing referrer
(function() {
var ref = document.referrer;
var terms = [];
if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {
var url = new URL(ref);
var q = url.searchParams.get('q') || url.searchParams.get('p');
if (q) {
terms = q.split(/\s+/).filter(function(t) { return t.length > 2; });
}
}
if (terms.length === 0) return;
var style = document.createElement('style');
style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';
document.head.appendChild(style);
function highlight(node) {
if (node.nodeType === 3) { // text node
var text = node.textContent;
var found = false;
terms.forEach(function(term) {
var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\]\\]/g, '\\') + ')', 'gi');
if (regex.test(text)) {
found = true;
var frag = document.createDocumentFragment();
var parts = text.split(regex);
parts.forEach(function(part, i) {
if (i % 2 === 0) {
frag.appendChild(document.createTextNode(part));
} else {
var span = document.createElement('span');
span.className = 'userscript-highlight';
span.textContent = part;
frag.appendChild(span);
}
});
node.parentNode.replaceChild(frag, node);
}
});
} else if (node.nodeType === 1 && node.childNodes) { // element
var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];
if (!skipTags.includes(node.tagName)) {
Array.from(node.childNodes).forEach(highlight);
}
}
}
highlight(document.body);
// Re-highlight on dynamic content
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1 || node.nodeType === 3) highlight(node);
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
BranchesTags
Repository files navigation
⚠️Status: untested. This extension is provided as-is and has not been tested in production. Please feel free to fork, modify, improve, and open pull requests.
Licensed under GNU GPLv3 (see LICENSE).
IP Block Protection (Drupal module)
Screens front-end requests through the ip-block.com
IP-screening service and blocks disallowed visitors as early as possible in the
request lifecycle. Works with Drupal core and Drupal Commerce.
  • Platform: Drupal 11 (current stable, tested against 11.4.x; also supports Drupal 10 via core_version_requirement: ^10 || ^11).
  • Machine name:ipblock_protection
How it works
A high-priority KernelEvents::REQUEST event subscriber
(src/EventSubscriber/IpBlockSubscriber.php) runs before page rendering. For
each main front-end request it:
  1. Skips admin-area requests (both resolved admin routes and /admin,
/user/login, /core/... path prefixes) so the operator is never locked out.
  2. Resolves the real client IP (honouring Behind proxy:
CF-Connecting-IP, then the first X-Forwarded-For hop).
  3. Always allows whitelisted IPs (never sent to the service).
  4. Looks up a cached decision keyed by md5(ip|user_agent|referrer) in the
default cache bin.
  5. On a cache miss, calls the ip-block.com API and caches the decision.
  6. Blocks only when the API returns {"action":"block"}.
API contract
POST https://api.ip-block.com/v1/check
Content-Type: application/json
{"api_key": "...", "site_id": "...", "ip": "...", "user_agent": "...", "referrer": "..."}

Response {"action":"allow"} or {"action":"block"}. A 1 second timeout is
enforced. On any error, timeout, non-2xx response or missing action, the
configured fail mode applies (default: fail open = allow).
Installation
  1. Copy the ipblock_protection folder to modules/custom/ in your Drupal
site (i.e. web/modules/custom/ipblock_protection).
  2. Enable it: drush en ipblock_protection or via Extend in the UI.
  3. Configure at Administration › Configuration › System › IP Block
Protection (/admin/config/system/ipblock-protection).
Configuration options
SettingDefaultNotes
EnabledoffMaster switch.
Site ID / API keyemptySupplied by ip-block.com.
API URLhttps://api.ip-block.com/v1/check
Fail openonAllow visitors when the service errors/times out.
Cache TTL300Seconds. 0 = check every request.
Behind proxyoffTrust CF-Connecting-IP / X-Forwarded-For.
Block actionredirectredirect to blocked page, or 403 message.
Block messageAccess denied.Used when action is message.
WhitelistemptyOne IP per line, always allowed.
Files
ipblock_protection/
├── ipblock_protection.info.yml
├── ipblock_protection.services.yml
├── ipblock_protection.routing.yml
├── ipblock_protection.links.menu.yml
├── config/install/ipblock_protection.settings.yml
├── config/schema/ipblock_protection.schema.yml
├── src/IpBlockClient.php
├── src/IpBlockChecker.php
├── src/EventSubscriber/IpBlockSubscriber.php
└── src/Form/SettingsForm.php

About
IP Block protection for Drupal — ip-block.com integration. Untested at the moment; please feel free to modify. GPLv3.
Topics
bot-protectiondrupaldrupal-moduleip-blockip-blockingphpsecurity
Resources
Readme
GPL-3.0 license
Contributing
Contributing
Activity
Custom properties
Stars
0 stars
Watchers
0 watching
Forks
0 forks
Report repository
Releases
Packages
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Strip utm_, fbclid, gclid, etc. from all links on page
(function() {
var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',
'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',
'ref', 'ref_src', 'source', 'medium', 'campaign'];
function cleanUrl(url) {
try {
var u = new URL(url, window.location.origin);
var changed = false;
trackingParams.forEach(function(p) {
if (u.searchParams.has(p)) {
u.searchParams.delete(p);
changed = true;
}
});
return changed ? u.toString() : url;
} catch (e) {
return url;
}
}
function cleanLinks() {
document.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
cleanLinks();
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1) {
if (node.tagName === 'A') cleanLinks();
node.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '

Skip to content
BranchesTags
Repository files navigation
⚠️Status: untested. This extension is provided as-is and has not been tested in production. Please feel free to fork, modify, improve, and open pull requests.
Licensed under GNU GPLv3 (see LICENSE).
IP Block Protection (Drupal module)
Screens front-end requests through the ip-block.com
IP-screening service and blocks disallowed visitors as early as possible in the
request lifecycle. Works with Drupal core and Drupal Commerce.
  • Platform: Drupal 11 (current stable, tested against 11.4.x; also supports Drupal 10 via core_version_requirement: ^10 || ^11).
  • Machine name:ipblock_protection
How it works
A high-priority KernelEvents::REQUEST event subscriber
(src/EventSubscriber/IpBlockSubscriber.php) runs before page rendering. For
each main front-end request it:
  1. Skips admin-area requests (both resolved admin routes and /admin,
/user/login, /core/... path prefixes) so the operator is never locked out.
  2. Resolves the real client IP (honouring Behind proxy:
CF-Connecting-IP, then the first X-Forwarded-For hop).
  3. Always allows whitelisted IPs (never sent to the service).
  4. Looks up a cached decision keyed by md5(ip|user_agent|referrer) in the
default cache bin.
  5. On a cache miss, calls the ip-block.com API and caches the decision.
  6. Blocks only when the API returns {"action":"block"}.
API contract
POST https://api.ip-block.com/v1/check
Content-Type: application/json
{"api_key": "...", "site_id": "...", "ip": "...", "user_agent": "...", "referrer": "..."}

Response {"action":"allow"} or {"action":"block"}. A 1 second timeout is
enforced. On any error, timeout, non-2xx response or missing action, the
configured fail mode applies (default: fail open = allow).
Installation
  1. Copy the ipblock_protection folder to modules/custom/ in your Drupal
site (i.e. web/modules/custom/ipblock_protection).
  2. Enable it: drush en ipblock_protection or via Extend in the UI.
  3. Configure at Administration › Configuration › System › IP Block
Protection (/admin/config/system/ipblock-protection).
Configuration options
SettingDefaultNotes
EnabledoffMaster switch.
Site ID / API keyemptySupplied by ip-block.com.
API URLhttps://api.ip-block.com/v1/check
Fail openonAllow visitors when the service errors/times out.
Cache TTL300Seconds. 0 = check every request.
Behind proxyoffTrust CF-Connecting-IP / X-Forwarded-For.
Block actionredirectredirect to blocked page, or 403 message.
Block messageAccess denied.Used when action is message.
WhitelistemptyOne IP per line, always allowed.
Files
ipblock_protection/
├── ipblock_protection.info.yml
├── ipblock_protection.services.yml
├── ipblock_protection.routing.yml
├── ipblock_protection.links.menu.yml
├── config/install/ipblock_protection.settings.yml
├── config/schema/ipblock_protection.schema.yml
├── src/IpBlockClient.php
├── src/IpBlockChecker.php
├── src/EventSubscriber/IpBlockSubscriber.php
└── src/Form/SettingsForm.php

About
IP Block protection for Drupal — ip-block.com integration. Untested at the moment; please feel free to modify. GPLv3.
Topics
bot-protectiondrupaldrupal-moduleip-blockip-blockingphpsecurity
Resources
Readme
GPL-3.0 license
Contributing
Contributing
Activity
Custom properties
Stars
0 stars
Watchers
0 watching
Forks
0 forks
Report repository
Releases
Packages
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Auto-enable theater mode on YouTube
(function() {
function tryTheater() {
var btn = document.querySelector('button[aria-label="Theater mode"], ytd-player #player button[title="Theater mode"]');
if (btn && !btn.classList.contains('activated')) {
btn.click();
}
}
// Try immediately
tryTheater();
// Try after navigation (SPA)
var lastUrl = location.href;
setInterval(function() {
if (location.href !== lastUrl) {
lastUrl = location.href;
setTimeout(tryTheater, 500);
}
}, 1000);
// Also try on player load
var observer = new MutationObserver(tryTheater);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
BranchesTags
Repository files navigation
⚠️Status: untested. This extension is provided as-is and has not been tested in production. Please feel free to fork, modify, improve, and open pull requests.
Licensed under GNU GPLv3 (see LICENSE).
IP Block Protection (Drupal module)
Screens front-end requests through the ip-block.com
IP-screening service and blocks disallowed visitors as early as possible in the
request lifecycle. Works with Drupal core and Drupal Commerce.
  • Platform: Drupal 11 (current stable, tested against 11.4.x; also supports Drupal 10 via core_version_requirement: ^10 || ^11).
  • Machine name:ipblock_protection
How it works
A high-priority KernelEvents::REQUEST event subscriber
(src/EventSubscriber/IpBlockSubscriber.php) runs before page rendering. For
each main front-end request it:
  1. Skips admin-area requests (both resolved admin routes and /admin,
/user/login, /core/... path prefixes) so the operator is never locked out.
  2. Resolves the real client IP (honouring Behind proxy:
CF-Connecting-IP, then the first X-Forwarded-For hop).
  3. Always allows whitelisted IPs (never sent to the service).
  4. Looks up a cached decision keyed by md5(ip|user_agent|referrer) in the
default cache bin.
  5. On a cache miss, calls the ip-block.com API and caches the decision.
  6. Blocks only when the API returns {"action":"block"}.
API contract
POST https://api.ip-block.com/v1/check
Content-Type: application/json
{"api_key": "...", "site_id": "...", "ip": "...", "user_agent": "...", "referrer": "..."}

Response {"action":"allow"} or {"action":"block"}. A 1 second timeout is
enforced. On any error, timeout, non-2xx response or missing action, the
configured fail mode applies (default: fail open = allow).
Installation
  1. Copy the ipblock_protection folder to modules/custom/ in your Drupal
site (i.e. web/modules/custom/ipblock_protection).
  2. Enable it: drush en ipblock_protection or via Extend in the UI.
  3. Configure at Administration › Configuration › System › IP Block
Protection (/admin/config/system/ipblock-protection).
Configuration options
SettingDefaultNotes
EnabledoffMaster switch.
Site ID / API keyemptySupplied by ip-block.com.
API URLhttps://api.ip-block.com/v1/check
Fail openonAllow visitors when the service errors/times out.
Cache TTL300Seconds. 0 = check every request.
Behind proxyoffTrust CF-Connecting-IP / X-Forwarded-For.
Block actionredirectredirect to blocked page, or 403 message.
Block messageAccess denied.Used when action is message.
WhitelistemptyOne IP per line, always allowed.
Files
ipblock_protection/
├── ipblock_protection.info.yml
├── ipblock_protection.services.yml
├── ipblock_protection.routing.yml
├── ipblock_protection.links.menu.yml
├── config/install/ipblock_protection.settings.yml
├── config/schema/ipblock_protection.schema.yml
├── src/IpBlockClient.php
├── src/IpBlockChecker.php
├── src/EventSubscriber/IpBlockSubscriber.php
└── src/Form/SettingsForm.php

About
IP Block protection for Drupal — ip-block.com integration. Untested at the moment; please feel free to modify. GPLv3.
Topics
bot-protectiondrupaldrupal-moduleip-blockip-blockingphpsecurity
Resources
Readme
GPL-3.0 license
Contributing
Contributing
Activity
Custom properties
Stars
0 stars
Watchers
0 watching
Forks
0 forks
Report repository
Releases
Packages
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Remove or un-stick sticky/fixed headers that block content
(function() {
function unstick() {
document.querySelectorAll('header, nav, [role="banner"], .header, .navbar, .sticky, .fixed-top, [style*="position: fixed"], [style*="position:sticky"]').forEach(function(el) {
if (el.style.position === 'fixed' || el.style.position === 'sticky' || getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {
el.style.position = 'static';
el.style.top = 'auto';
el.style.zIndex = 'auto';
}
});
}
unstick();
var observer = new MutationObserver(unstick);
observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });
})();
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
BranchesTags
Repository files navigation
⚠️Status: untested. This extension is provided as-is and has not been tested in production. Please feel free to fork, modify, improve, and open pull requests.
Licensed under GNU GPLv3 (see LICENSE).
IP Block Protection (Drupal module)
Screens front-end requests through the ip-block.com
IP-screening service and blocks disallowed visitors as early as possible in the
request lifecycle. Works with Drupal core and Drupal Commerce.
  • Platform: Drupal 11 (current stable, tested against 11.4.x; also supports Drupal 10 via core_version_requirement: ^10 || ^11).
  • Machine name:ipblock_protection
How it works
A high-priority KernelEvents::REQUEST event subscriber
(src/EventSubscriber/IpBlockSubscriber.php) runs before page rendering. For
each main front-end request it:
  1. Skips admin-area requests (both resolved admin routes and /admin,
/user/login, /core/... path prefixes) so the operator is never locked out.
  2. Resolves the real client IP (honouring Behind proxy:
CF-Connecting-IP, then the first X-Forwarded-For hop).
  3. Always allows whitelisted IPs (never sent to the service).
  4. Looks up a cached decision keyed by md5(ip|user_agent|referrer) in the
default cache bin.
  5. On a cache miss, calls the ip-block.com API and caches the decision.
  6. Blocks only when the API returns {"action":"block"}.
API contract
POST https://api.ip-block.com/v1/check
Content-Type: application/json
{"api_key": "...", "site_id": "...", "ip": "...", "user_agent": "...", "referrer": "..."}

Response {"action":"allow"} or {"action":"block"}. A 1 second timeout is
enforced. On any error, timeout, non-2xx response or missing action, the
configured fail mode applies (default: fail open = allow).
Installation
  1. Copy the ipblock_protection folder to modules/custom/ in your Drupal
site (i.e. web/modules/custom/ipblock_protection).
  2. Enable it: drush en ipblock_protection or via Extend in the UI.
  3. Configure at Administration › Configuration › System › IP Block
Protection (/admin/config/system/ipblock-protection).
Configuration options
SettingDefaultNotes
EnabledoffMaster switch.
Site ID / API keyemptySupplied by ip-block.com.
API URLhttps://api.ip-block.com/v1/check
Fail openonAllow visitors when the service errors/times out.
Cache TTL300Seconds. 0 = check every request.
Behind proxyoffTrust CF-Connecting-IP / X-Forwarded-For.
Block actionredirectredirect to blocked page, or 403 message.
Block messageAccess denied.Used when action is message.
WhitelistemptyOne IP per line, always allowed.
Files
ipblock_protection/
├── ipblock_protection.info.yml
├── ipblock_protection.services.yml
├── ipblock_protection.routing.yml
├── ipblock_protection.links.menu.yml
├── config/install/ipblock_protection.settings.yml
├── config/schema/ipblock_protection.schema.yml
├── src/IpBlockClient.php
├── src/IpBlockChecker.php
├── src/EventSubscriber/IpBlockSubscriber.php
└── src/Form/SettingsForm.php

About
IP Block protection for Drupal — ip-block.com integration. Untested at the moment; please feel free to modify. GPLv3.
Topics
bot-protectiondrupaldrupal-moduleip-blockip-blockingphpsecurity
Resources
Readme
GPL-3.0 license
Contributing
Contributing
Activity
Custom properties
Stars
0 stars
Watchers
0 watching
Forks
0 forks
Report repository
Releases
Packages
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Universal Dark Mode - works on any site
(function() {
var enabled = true;
function applyDarkMode() {
if (!enabled) return;
// Create style element if it doesn't exist
var style = document.getElementById('universal-dark-mode-style');
if (!style) {
style = document.createElement('style');
style.id = 'universal-dark-mode-style';
document.head.appendChild(style);
}
// Dark mode CSS - inverts colors but preserves images/video
style.textContent = '
/* Invert everything except media */
html {
filter: invert(1) hue-rotate(180deg) !important;
background: #1a1a2e !important;
}
/* Restore images, videos, iframes, canvas */
img, video, iframe, canvas, svg, picture, [style*="background-image"] {
filter: invert(1) hue-rotate(180deg) !important;
}
/* Preserve specific elements that should not be inverted */
.no-dark-mode, .no-dark-mode *,
[data-theme="light"], [data-theme="light"],
.ace_editor, .ace_editor *,
.CodeMirror, .CodeMirror *,
.monaco-editor, .monaco-editor *,
.markdown-body pre, .markdown-body pre *,
.highlight, .highlight *,
pre code, pre code * {
filter: none !important;
}
/* Fix common UI elements */
.modal, .popup, .dropdown-menu, .tooltip, .popover {
filter: invert(1) hue-rotate(180deg) !important;
background: #2d2d44 !important;
border-color: #444 !important;
}
/* Scrollbars */
::-webkit-scrollbar { background: #1a1a2e !important; }
::-webkit-scrollbar-thumb { background: #444 !important; }
::-webkit-scrollbar-thumb:hover { background: #555 !important; }
/* Selection */
::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }
::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }
';
}
function removeDarkMode() {
var style = document.getElementById('universal-dark-mode-style');
if (style) style.remove();
}
// Toggle with Alt+Shift+D
document.addEventListener('keydown', function(e) {
if (e.altKey && e.shiftKey && e.key === 'D') {
e.preventDefault();
enabled = !enabled;
if (enabled) {
applyDarkMode();
console.log('[Universal Dark Mode] Enabled');
} else {
removeDarkMode();
console.log('[Universal Dark Mode] Disabled');
}
}
});
// Apply on load
applyDarkMode();
// Re-apply on dynamic content
var observer = new MutationObserver(function(mutations) {
if (enabled && !document.getElementById('universal-dark-mode-style')) {
applyDarkMode();
}
});
observer.observe(document.head, { childList: true });
console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');
})();
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();

Skip to content
BranchesTags
Repository files navigation
⚠️Status: untested. This extension is provided as-is and has not been tested in production. Please feel free to fork, modify, improve, and open pull requests.
Licensed under GNU GPLv3 (see LICENSE).
IP Block Protection (Drupal module)
Screens front-end requests through the ip-block.com
IP-screening service and blocks disallowed visitors as early as possible in the
request lifecycle. Works with Drupal core and Drupal Commerce.
  • Platform: Drupal 11 (current stable, tested against 11.4.x; also supports Drupal 10 via core_version_requirement: ^10 || ^11).
  • Machine name:ipblock_protection
How it works
A high-priority KernelEvents::REQUEST event subscriber
(src/EventSubscriber/IpBlockSubscriber.php) runs before page rendering. For
each main front-end request it:
  1. Skips admin-area requests (both resolved admin routes and /admin,
/user/login, /core/... path prefixes) so the operator is never locked out.
  2. Resolves the real client IP (honouring Behind proxy:
CF-Connecting-IP, then the first X-Forwarded-For hop).
  3. Always allows whitelisted IPs (never sent to the service).
  4. Looks up a cached decision keyed by md5(ip|user_agent|referrer) in the
default cache bin.
  5. On a cache miss, calls the ip-block.com API and caches the decision.
  6. Blocks only when the API returns {"action":"block"}.
API contract
POST https://api.ip-block.com/v1/check
Content-Type: application/json
{"api_key": "...", "site_id": "...", "ip": "...", "user_agent": "...", "referrer": "..."}

Response {"action":"allow"} or {"action":"block"}. A 1 second timeout is
enforced. On any error, timeout, non-2xx response or missing action, the
configured fail mode applies (default: fail open = allow).
Installation
  1. Copy the ipblock_protection folder to modules/custom/ in your Drupal
site (i.e. web/modules/custom/ipblock_protection).
  2. Enable it: drush en ipblock_protection or via Extend in the UI.
  3. Configure at Administration › Configuration › System › IP Block
Protection (/admin/config/system/ipblock-protection).
Configuration options
SettingDefaultNotes
EnabledoffMaster switch.
Site ID / API keyemptySupplied by ip-block.com.
API URLhttps://api.ip-block.com/v1/check
Fail openonAllow visitors when the service errors/times out.
Cache TTL300Seconds. 0 = check every request.
Behind proxyoffTrust CF-Connecting-IP / X-Forwarded-For.
Block actionredirectredirect to blocked page, or 403 message.
Block messageAccess denied.Used when action is message.
WhitelistemptyOne IP per line, always allowed.
Files
ipblock_protection/
├── ipblock_protection.info.yml
├── ipblock_protection.services.yml
├── ipblock_protection.routing.yml
├── ipblock_protection.links.menu.yml
├── config/install/ipblock_protection.settings.yml
├── config/schema/ipblock_protection.schema.yml
├── src/IpBlockClient.php
├── src/IpBlockChecker.php
├── src/EventSubscriber/IpBlockSubscriber.php
└── src/Form/SettingsForm.php

About
IP Block protection for Drupal — ip-block.com integration. Untested at the moment; please feel free to modify. GPLv3.
Topics
bot-protectiondrupaldrupal-moduleip-blockip-blockingphpsecurity
Resources
Readme
GPL-3.0 license
Contributing
Contributing
Activity
Custom properties
Stars
0 stars
Watchers
0 watching
Forks
0 forks
Report repository
Releases
Packages
Contributors
Languages