hello i have noticed in my site logs that somebody is taping some weired urls : www.mysite.com/function.file-get-contents or www.mysite.com/function.mysql-pconnect
If somebody is trying to hack the site how can i prevent this ? thanks
Receptional Andy
8:19 pm on Oct 17, 2008 (gmt 0)
That doesn't look much like a hack attempt - those are URLs taken from the PHP manual [php.net]. Does your domain name resemble that in any way?
hanyaz
12:19 am on Oct 18, 2008 (gmt 0)
no it does not. But why somebody would tape this kind of url ?
Anyango
7:28 am on Oct 18, 2008 (gmt 0)
don't worry just about that, they will not just type "this kind of" but they will type "all kinds of urls" :)
RonPK
10:36 am on Oct 18, 2008 (gmt 0)
PHP error messages often contain links to pages in the manual - without including a domain name, so the links become relative to your site. Perhaps there was an error on one of your pages when the user visited it, and the user clicked the link.
I've had such URLs indexed by Google... One more reason not to show error messages on a live site in the browser.