plumberPHP Posted November 14, 2012 Share Posted November 14, 2012 In my web site; spammers are trying type ? T=reg in the address? What are they trying to achieve? Link to comment https://forums.phpfreaks.com/topic/270670-treg-and-spammers/ Share on other sites More sharing options...
Muddy_Funster Posted November 14, 2012 Share Posted November 14, 2012 they are trying to force set the T varaiable on the page to =reg Link to comment https://forums.phpfreaks.com/topic/270670-treg-and-spammers/#findComment-1392240 Share on other sites More sharing options...
plumberPHP Posted November 14, 2012 Author Share Posted November 14, 2012 Thank you for answer Muddy_Funster. Doing this what they will get? How can I protect from this attack? Link to comment https://forums.phpfreaks.com/topic/270670-treg-and-spammers/#findComment-1392270 Share on other sites More sharing options...
Muddy_Funster Posted November 14, 2012 Share Posted November 14, 2012 without knowing what code is on the page in question I can't answer that. Link to comment https://forums.phpfreaks.com/topic/270670-treg-and-spammers/#findComment-1392272 Share on other sites More sharing options...
White_Lily Posted November 14, 2012 Share Posted November 14, 2012 More to the point, how do they even know that you have a T variable in your script in the first place? Unless you have tester's that are trying to break the script? Link to comment https://forums.phpfreaks.com/topic/270670-treg-and-spammers/#findComment-1392296 Share on other sites More sharing options...
Muddy_Funster Posted November 14, 2012 Share Posted November 14, 2012 On 11/14/2012 at 2:36 PM, White_Lily said: More to the point, how do they even know that you have a T variable in your script in the first place? Unless you have tester's that are trying to break the script? because it's url variable and will be visible when someone legitimatle uses the site? just a guess. Link to comment https://forums.phpfreaks.com/topic/270670-treg-and-spammers/#findComment-1392321 Share on other sites More sharing options...
White_Lily Posted November 14, 2012 Share Posted November 14, 2012 Good point, maybe the OP should take a look into URL Rewrites, he might find something there to help him hide the values in the url. Link to comment https://forums.phpfreaks.com/topic/270670-treg-and-spammers/#findComment-1392326 Share on other sites More sharing options...
plumberPHP Posted November 15, 2012 Author Share Posted November 15, 2012 IT is a home page; where they trying to use? T=reg. I do not have T variable in the code. How do I know they have succussed? Link to comment https://forums.phpfreaks.com/topic/270670-treg-and-spammers/#findComment-1392569 Share on other sites More sharing options...
Muddy_Funster Posted November 15, 2012 Share Posted November 15, 2012 if there is nothing on the page that uses $_GET['T'] or $_REQUEST['T'] it shouldn't matter if it's there or not. Infact, if it's not there I would personaly add some code that has if(isset($_GET['T'])){ die("This site has detected that your IP address : {$_SERVER['REMOTE_ADDR']} is atempting a security breach. This IP address has been logged and your ISP will be informed of this action."); } whether or not you do log and use the IP address is your call, but the stement alone usualy makes people less inclined to keep trying. Link to comment https://forums.phpfreaks.com/topic/270670-treg-and-spammers/#findComment-1392573 Share on other sites More sharing options...
plumberPHP Posted November 15, 2012 Author Share Posted November 15, 2012 Thank you for your help; I will do as u said. Link to comment https://forums.phpfreaks.com/topic/270670-treg-and-spammers/#findComment-1392617 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.