Forum Moderators: coopster
I get requests for the addentry.php page which used to be in my guestbook. I deleted the guestbook months ago because of spam but I see in my logs I get requests for the addentry.php page about every 45 seconds from different ip's. I imagine it's some sort of attempt at exploiting some guestbook weakness but is there anyway to stop these requests? I get tons of 404 errors and my server stats are polluted with these continuous requests!
Any suggestions?
Cheers!
Updated PHP Bad Bot Script [webmasterworld.com]
It's courtesy of some earlier developers, which originated the concept(I just ported it to PHP, and it may need work!)
You can't just 'ban' anyone requesting the file, it could be a search engine user or an old bookmark.
In your case, you can just write a custom rule for your .htaccess file that catches the ip 'block' of the 'bad boy'. You should examine the ip's of the offenders.
What I'm getting at is, make sure your 'fix' doesn't harm you in any way.
I've checked my logs and typically get one request for the addentry.php page of my old guestbook location and then another request for the same page comes, like, 30 seconds later from a different IP.
I asked my host about it and they said it was a typical attempt at an exploit and there wasn't much to do abou it...
The requests are coming from always very different ip's and since I have deleted the addentry.php page (and the guestbook in it's entirety) I guess it doesn't really matter if these spammy hackers keep getting a 404 page.
It's just a pain to see so many attempts, obviously not by a real person, to get to my website for nasty purposes.
Thanks for the suggestions. I think, to be safe, I may just let the evil requests hit the 404 page.
I was hoping there was a way to send the request to some sort of tarpit to never return.
Best regards,
BV
