Textpattern CMS support forum
You are not logged in. Register | Login | Help
- Topics: Active | Unanswered
#1 2008-05-03 10:34:31
- roelof
- Member
- Registered: 2005-03-27
- Posts: 647
Trying to make a sql injection i think ?
Hello,
In the logs of TPX i find a lot a things like this :
index.php?id=10&page=http%3A%2F%2Fwww.channelnewsperu.com%2Fimagenes%2Fpublicaciones%2Ffotos%2Femesuki%2Fohuhud%2F
Is someone trying to make a sql injection or is there more ?
Regards,
Roelof
Offline
Re: Trying to make a sql injection i think ?
TXP disables register_globals and does not use the ‘page’ parameter from a GET request in the public index.php, so this would have no effect. It seems to reference the URL http://www.channelnewsperu.com/imagenes/publicacio/, but that page doesn’t exist. I don’t think this is an SQL injection attempt, but rather an attempt to include some external document while running TXP scripts.
Offline
#3 2008-05-03 13:22:30
- roelof
- Member
- Registered: 2005-03-27
- Posts: 647
Re: Trying to make a sql injection i think ?
Oke,
There’s nothing i can do except controling the output of a page ?
Roelof
Offline
Re: Trying to make a sql injection i think ?
There’s nothing you need to do, really. What happens is the same as when visiting /index.php?id=10, which either displays article 10 or shows a 404 error.
Offline
#5 2008-05-03 14:56:37
- roelof
- Member
- Registered: 2005-03-27
- Posts: 647
Re: Trying to make a sql injection i think ?
Hello Ruud,
Thank you for your explanation.
Roelof
Offline