Discussions of secure PHP coding. Security in software is important, so don't be afraid to ask. And when answering: be anal. Nitpick. No security vulnerability is too small.
5 minutes later the page will change, they will all be /login.php, then 5 minutes later /showthread.php
What's going on?
[edit] I meant to put this in security. Sorry guys.
Set Search Time - A google chrome extension. When you search only results from the past year (or set time period) are displayed. Helps tremendously when using new technologies to avoid outdated results.
I don't believe they're trying to brute force a login. Because I log failed login attempts, and after 5 fails, make them wait 15 minutes.
And nobody's showing up as even failing once.
Could they be attempting to sniff the posted passwords?
Set Search Time - A google chrome extension. When you search only results from the past year (or set time period) are displayed. Helps tremendously when using new technologies to avoid outdated results.
It's up to 325 unique ips crawling the site right now =/
Now they're on index.php
Set Search Time - A google chrome extension. When you search only results from the past year (or set time period) are displayed. Helps tremendously when using new technologies to avoid outdated results.
Likely what AGISB suggested - either some buggy bot (what's the client profile? user agent?) or someone scanning your site for potential vulnerabilities.
feyd wrote:accidental overwrite of other records when updating?
Exactly what I was thinking... I reckon something's overwriting the time and location fields of all the records instead of just the one. Could also be combined with a lack of garbage collection on old records?