Re: evil script in server logs (Heads Up)
| From: | Daniel Brown | Date: | Fri, 05 Oct 2007 15:29:01 +0000 |
| Subject: | Re: evil script in server logs (Heads Up) | ||
| References: | 1 2 3 4 5 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-262815@lists.php.net to get a copy of this message | ||
On 10/5/07, Ashley M. Kirchner <ashley@pcraft.com> wrote:
> Daniel Brown wrote:
> > The biggest issue does still remain: if this is on your local
> > system, you need to figure out exactly how it got there in the first
> > place
> I thought the OP said he noticed it in his logs... I understood
> that as someone cleverly trying to inject it somehow and it ended up in
> the log files. But, without further information, I'm just as clueless...
>
> --
> W | It's not a bug - it's an undocumented feature.
> +--------------------------------------------------------------------
> Ashley M. Kirchner <mailto:ashley@pcraft.com> .
> 303.442.6410 x130
> IT Director / SysAdmin / Websmith . 800.441.3873 x130
> Photo Craft Imaging . 3550 Arapahoe Ave. #6
> http://www.pcraft.com ..... . . . Boulder, CO
> 80303, U.S.A.
>
>
Yeah, honestly I wasn't sure if it was an injection attack or if
those URLs were referrers in the logs.
--
Daniel P. Brown
[office] (570-) 587-7080 Ext. 272
[mobile] (570-) 766-8107
Give a man a fish, he'll eat for a day. Then you'll find out he was
allergic and is hospitalized. See? No good deed goes unpunished....