Go to main content

Textpattern CMS support forum

You are not logged in. Register | Login | Help

#1 2006-10-10 09:58:59

cambo
New Member
From: Melbourne, Australia
Registered: 2006-05-18
Posts: 5
Website

Is this a hacking attempt?

I found this in my logs:
http://www.xxx.xxx/category/xxx-Dealer-List/?ls=rav%204

which resulted in a page with this error:

XML Parsing Error: syntax error
Location: http://www.xxx.xxx/category/xxx-Dealer-List/?ls=rav%204
Line Number 1, Column 41:<?xml version=‘1.0’ encoding=‘utf-8’ ?>No Results Found.
————————————————————^

Does anyone know what ?ls= is/does?
TIA
Cambo

Offline

#2 2006-10-10 10:39:57

Sencer
Archived Developer
From: cgn, de
Registered: 2004-03-23
Posts: 1,803
Website

Re: Is this a hacking attempt?

It’s not something that’s built-in to textpattern. It could be one of the plugins you are using. Are you using live-search? Maybe that’s it.

The query string translates to a passed parameters of “rav 4” (%20 is a url-encoded space), so I don’t think it has anything to do with a hacking attempt. More likely a plugin with a little bug (whether that’s a security issue or not cannot be decided with the little information you gave).

Oh, and if this is the XML-error message that is created by your browser (the difference in colours to your regular site, should be clear give-away), then nothing at all may be broken or buggy. It could just be something that’s not entirely standards cmpliant, yet still manages to work (like 95% of the web).

Offline

#3 2006-10-10 13:57:07

cambo
New Member
From: Melbourne, Australia
Registered: 2006-05-18
Posts: 5
Website

Re: Is this a hacking attempt?

Hi. Yes you’re right. I have live search installed. I have just realised that it does a search each time a letter is typed.
Thanks for your quick response.

Offline

Board footer

Powered by FluxBB