3 ms·

my username is displayed as the owner. I've looked at the access, error and secure logs and the only thing I see that looks odd is a GET request that contains a

by gaoshan 17y ago

my username is displayed as the owner. I've looked at the access, error and secure logs and the only thing I see that looks odd is a GET request that contains a short (40 or 50 characters total) string of hex like \xc3\x83\etc, etc. But that request indicate it comes from msnbot. Could that be the culprit and they faked the user agent?

noodle 17y ago
whats the get request contain? and whats the variable? search the source for the variable and see what it does.
- gaoshan 17y ago
  /somecategory/apage.php?id=34\xc3\x83\xc6\x92\xc3\x86\xe2\x80\x99\xc3\x83\xe2\x80\x9a\xc3\x82\xc2\x9d&listing=989 Thing is, removing that hex and just putting in /somecategory/apage.php?id=34&listing=989 does the same thing. I get the same output to the browser regardless of which is used.
  - noodle 17y ago
    it is probably not the culprit, but did you take a look at the code in apage.php that processes id just in case? it could be something.
    - gaoshan 17y ago
      I have looked at the code and the GET request is sanitized before being passed on.
      - noodle 17y ago
        i ask again, then, are you using something like filezilla, and/or do you log in as root without a sudo?
        gaoshan 17y ago
        No I am not using Filezilla and root cannot be logged into without sudo.