plumberPHP Posted November 14, 2012 Share Posted November 14, 2012 In my web site; spammers are trying type ? T=reg in the address? What are they trying to achieve? Quote Link to comment https://forums.phpfreaks.com/topic/270670-treg-and-spammers/ Share on other sites More sharing options...
Muddy_Funster Posted November 14, 2012 Share Posted November 14, 2012 they are trying to force set the T varaiable on the page to =reg Quote Link to comment https://forums.phpfreaks.com/topic/270670-treg-and-spammers/#findComment-1392240 Share on other sites More sharing options...
plumberPHP Posted November 14, 2012 Author Share Posted November 14, 2012 Thank you for answer Muddy_Funster. Doing this what they will get? How can I protect from this attack? Quote Link to comment https://forums.phpfreaks.com/topic/270670-treg-and-spammers/#findComment-1392270 Share on other sites More sharing options...
Muddy_Funster Posted November 14, 2012 Share Posted November 14, 2012 without knowing what code is on the page in question I can't answer that. Quote Link to comment https://forums.phpfreaks.com/topic/270670-treg-and-spammers/#findComment-1392272 Share on other sites More sharing options...
White_Lily Posted November 14, 2012 Share Posted November 14, 2012 More to the point, how do they even know that you have a T variable in your script in the first place? Unless you have tester's that are trying to break the script? Quote Link to comment https://forums.phpfreaks.com/topic/270670-treg-and-spammers/#findComment-1392296 Share on other sites More sharing options...
Muddy_Funster Posted November 14, 2012 Share Posted November 14, 2012 More to the point, how do they even know that you have a T variable in your script in the first place? Unless you have tester's that are trying to break the script? because it's url variable and will be visible when someone legitimatle uses the site? just a guess. Quote Link to comment https://forums.phpfreaks.com/topic/270670-treg-and-spammers/#findComment-1392321 Share on other sites More sharing options...
White_Lily Posted November 14, 2012 Share Posted November 14, 2012 Good point, maybe the OP should take a look into URL Rewrites, he might find something there to help him hide the values in the url. Quote Link to comment https://forums.phpfreaks.com/topic/270670-treg-and-spammers/#findComment-1392326 Share on other sites More sharing options...
plumberPHP Posted November 15, 2012 Author Share Posted November 15, 2012 IT is a home page; where they trying to use? T=reg. I do not have T variable in the code. How do I know they have succussed? Quote Link to comment https://forums.phpfreaks.com/topic/270670-treg-and-spammers/#findComment-1392569 Share on other sites More sharing options...
Muddy_Funster Posted November 15, 2012 Share Posted November 15, 2012 if there is nothing on the page that uses $_GET['T'] or $_REQUEST['T'] it shouldn't matter if it's there or not. Infact, if it's not there I would personaly add some code that has if(isset($_GET['T'])){ die("This site has detected that your IP address : {$_SERVER['REMOTE_ADDR']} is atempting a security breach. This IP address has been logged and your ISP will be informed of this action."); } whether or not you do log and use the IP address is your call, but the stement alone usualy makes people less inclined to keep trying. Quote Link to comment https://forums.phpfreaks.com/topic/270670-treg-and-spammers/#findComment-1392573 Share on other sites More sharing options...
plumberPHP Posted November 15, 2012 Author Share Posted November 15, 2012 Thank you for your help; I will do as u said. Quote Link to comment https://forums.phpfreaks.com/topic/270670-treg-and-spammers/#findComment-1392617 Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.