I just saw some weird page requests randomly targeting my javascript directory like the following:
[text]
http://domain.com/js/)+e.data;e.global&&!c.active++&&c.event.trigger(
http://domain.com/js/live.
http://domain.com/js/)e.url+=(ka.test(e.url)
http://domain.com/js/&&!n?r.firstChild& ... es:k[1]===
http://domain.com/js/;e.dataType=
http://domain.com/js/);e.dataType=
http://domain.com/js/.specialChange
http://domain.com/js/*/*
http://domain.com/js/keypress.specialSubmit
on and on...for about 30 more entries in my log.
[/text]
This just looks like garbage to me, but is someone trying something tricky that I'm not seeing? They seem awful persistent. All these requests just get redirected to a standard 404 error page that doesn't echo any user fields (like query strings).
Thanks,
Eric
Javascript Injection?
Moderator: General Moderators
Re: Javascript Injection?
That looks like random parts of jQuery source code after http://domain.com/js/
No idea how that could happen.
No idea how that could happen.
Re: Javascript Injection?
It's strange, isn't it? But I can't find a reason where or why this would occur. It has only happened once. I can't see how this would be happening from my own scripts unless there was a transfer error and some garbage appeared on the client's screen in the form of links.
I suppose it could be possible that one of my php scrips which serves up dynamic links was tricked into serving up bits of the /jquery code....but all my dynamic links come from a database with no user fields. However there were no references URI in the $_SERVER info showing these requested pages were locally generated.....
I don't know.
I suppose it could be possible that one of my php scrips which serves up dynamic links was tricked into serving up bits of the /jquery code....but all my dynamic links come from a database with no user fields. However there were no references URI in the $_SERVER info showing these requested pages were locally generated.....
I don't know.