[PLM=0][R]+GET in site error log - bot hack attempts?

PHP programming forum. Ask questions or help people concerning PHP code. Don't understand a function? Need help implementing a class? Don't understand a class? Here is where to ask. Remember to do your homework!

Moderator: General Moderators

Post Reply
anivad
Forum Commoner
Posts: 80
Joined: Thu Apr 09, 2009 11:16 pm

[PLM=0][R]+GET in site error log - bot hack attempts?

Post by anivad »

I just got this in my site log:

[error] [client 93.190.142.78] File does not exist: /home/mysite/public_html/register.htm+[PLM=0][R]+GET+http://www.mysite.net/register.htm+[0,9811,8999]+->+[R]+POST+http://www.mysite.net/register.php+[0,0,582]+->+[L]+GET+http://www.mysite.net/loginpage.htm+[0,8207,7391]+->+[L]+POST+http://www.mysite.net/login.php+[0,0,746]

Anyone know what it is, or if I should be worried? So far it has had no visible results - no spam or mysterious new registrations, but I'm not sure what the code does, or if I'm completely safe from it.

I've done the basics - htmlspecialchars and mysql_real_escape_string for all form input to prevent MySQL injections, plus captchas for non-member comments, and that seemed to stop the spam I was getting; but this is new.

Although it may be an explanation of how a previous spammer managed to bypass my login system and leave non-anonymous comments, hence bypassing captcha. I blocked their particular username, so maybe this is the result...?
User avatar
Benjamin
Site Administrator
Posts: 6935
Joined: Sun May 19, 2002 10:24 pm

Re: [PLM=0][R]+GET in site error log - bot hack attempts?

Post by Benjamin »

IP appears to be from the Netherlands.
Post Reply