3 ms·
Install this simple plugin on any version of WordPress to block bad queries like that: http://pastebin.com/f6697b79 http://pastebin.com/f6697b79 It could easi
by _ck_ 17y ago
Install this simple plugin on any version of WordPress to block bad queries like that:
http://pastebin.com/f6697b79 http://pastebin.com/f6697b79
It could easily be expanded to also look at $_POST data which is another form of attack you'll never see in your logs.
- duskwuff 17y agoThe bad queries show up after your blog has already been hacked.
- _ck_ 17y agoPart of the attack is via XSS using $_GET queries that are very long. Apache defaults to accepting URLS up to 4K long which is insane and allows such attacks to happen. 255 characters is a far better lockdown with very few if any false positives.