Hackers, how I loathe you.

February 4, 2008 10:30 AM
Related Categories: Web Dev

Most of my sites are configured to email me any error messages they have.  Don't happen too often.  Except for the incredible volume of hacking attempts by some bot to insert a web address into one of my ID URL vars.  It doesn't work of course, but that still triggers an email to me. Over and over and over. Bah.

Looks like they are just trying to see if they can embed PHP code into my sites and get it to execute.

The web address they submit is really just a page that contains this:

<?php echo md5("just_a_test");?>

It's hard to imagine this would work with ColdFusion (I don't have PHP on many of the servers).  One would have to code their CF site to allow embeding of CFML to eventually generate a static file, then process that.  Typical for some other blog platforms perhaps.

I should note that I have put in some filters for the IP's etc.  But they just change the web address and the IP anyway.


Like this entry? Subscribe to my blog.

  • Comments (4)
  • 850 views

Comments (moderation on)

[Add Comment]
I've got exactly the same problem, I don't really understand what they're trying to do with the php code injection... It just seems so useless..
Btw, I prevented the error messages by just wrapping my cfparams (with type set to integer) in a try/catch block.
# Posted By Roland Keijzer | 2/4/08 1:17 PM
They try to hack the URL, then they come behined and test for the results of that URL. If they find it, then they know they've got a fish on the line and can set your domain up for relays.
# Posted By Andy Matthews | 2/4/08 1:41 PM
My cat is a hacker. Why, just the other night, she left a hairball on the floor.
# Posted By Book Kitten | 2/5/08 10:30 AM
I've been getting quite a bit of that myself lately. It's been filling my inbox and adding hella hits into WhosOnStats since it keeps track of all that crap.

Looks like it's time to build in another filter.
# Posted By Shane Zehnder | 2/7/08 10:14 PM
[Add Comment]

Sponsors


Savvy Content Manager