Welcome, Guest. Please Login or Register.
November 20, 2024, 11:31:37 AM
Home Help Search Log in Register
News: SMF is the next generation in forum software, almost completely re-written from the ground up, make sure you don't fall for cheap imitations that suffer from feature bloat!

YaBB SE Community  |  English User Help  |  English Help  |  security question « previous next »
Pages: [1] 2 Reply Ignore Print
Author Topic: security question  (Read 711 times)
Spaceman-Spiff
Mod Team
YaBB God
*****
Posts: 3689


My $txt[228]
security question
« on: August 15, 2002, 06:49:19 PM »		 Reply with quote
there's a guy (a guest) that tried to send tons of IMs in my forum
it's logged in the errorlog, he/she was trying to send IMs like 200-300 times in 1.5 hours
i dont know if its a script (prolly), or he's dumb enuf to click 200-300 times
the log goes like:

Guest : his.stupid.ip : August 13, 2002, 10:46:40 PM
/***/forum/index.php?board=;action=imsend;to=member1
Instant Messaging is only for members
 
 Guest : his.stupid.ip : August 13, 2002, 10:46:41 PM
/***/forum/index.php?board=4;action=imsend;to=member1
Instant Messaging is only for members
 
 Guest : his.stupid.ip : August 13, 2002, 10:46:44 PM
/***/forum/index.php?board=4;action=imsend;to=member2
Instant Messaging is only for members
 
 Guest : his.stupid.ip : August 13, 2002, 10:46:45 PM
/***/forum/index.php?board=;action=imsend;to=member3
Instant Messaging is only for members

from the pattern, he's trying to do that every second with a 3 secs gap every 2 tries
is this a security threat or something?
or is this guy just trying to spam?
before trying sending IMs he was trying to get into the memberlist section, but was denied too due to the Guest status  :(
Logged
   My mods, ysePak, codes, tutorials
    Support question IMs = bad.
Chris Cromer
The Strange One
Mod Team
YaBB God
*****
Posts: 3152


I am just a figment of your imagination.

WWW
Re:security question
« Reply #1 on: August 15, 2002, 06:53:52 PM »		 Reply with quote
Chances are it is a spider or a crawler, they go from link to link searching your board. I get those errors about once a month when the crawlers check my site.
Logged
Chris Cromer

I am not suffering from insanity, I am enjoying every minute of it.
Spaceman-Spiff
Mod Team
YaBB God
*****
Posts: 3689


My $txt[228]
Re:security question
« Reply #2 on: August 15, 2002, 08:05:35 PM »		 Reply with quote
should i ban the ip? :|
i should hide email links too
maybe make the email non <a href
will that help or will the bots/scripts still catch them?
« Last Edit: August 15, 2002, 08:06:59 PM by Spaceman-Spiff » Logged
   My mods, ysePak, codes, tutorials
    Support question IMs = bad.
Chris Cromer
The Strange One
Mod Team
YaBB God
*****
Posts: 3152


I am just a figment of your imagination.

WWW
Re:security question
« Reply #3 on: August 15, 2002, 08:08:06 PM »		 Reply with quote
Well if you ban it the search engine that did that will only be able to find pages saying "You have been banned"

Now if it was stored by goole, everybody that sees the stored page would see "You have been banned".

That is why I have not banned them, I wan't my site to be archived by the crawler/robot.
« Last Edit: August 15, 2002, 08:16:22 PM by Chris Cromer » Logged
Chris Cromer

I am not suffering from insanity, I am enjoying every minute of it.
Spaceman-Spiff
Mod Team
YaBB God
*****
Posts: 3689


My $txt[228]
Re:security question
« Reply #4 on: August 15, 2002, 08:14:32 PM »		 Reply with quote
ic...
thanks for the info chris
Logged
   My mods, ysePak, codes, tutorials
    Support question IMs = bad.
Jeff Lewis
Global Moderator
YaBB God
*****
Posts: 10149


I'm a llama!

WWW
Re:security question
« Reply #5 on: August 16, 2002, 12:56:27 PM »		 Reply with quote
It's a spider or crawler like was said. We get them quite a bit here at SE and I find it very annoying :) Maybe a robots.txt file will help your site?
Logged

My Amazon Wishlist
My Blog
Chris Cromer
The Strange One
Mod Team
YaBB God
*****
Posts: 3152


I am just a figment of your imagination.

WWW
Re:security question
« Reply #6 on: August 16, 2002, 04:06:46 PM »		 Reply with quote
Speaking of a robots.txt file, I need to make one for my site so that the robots/crawlers WILL search my site... any body know what to put in the robots.txt file to make it store the page and follow all links?
Logged
Chris Cromer

I am not suffering from insanity, I am enjoying every minute of it.
sylvester
YaBB God
*****
Posts: 525
Re:security question
« Reply #7 on: August 16, 2002, 05:18:18 PM »		 Reply with quote
Quote from: Chris Cromer on August 16, 2002, 04:06:46 PMSpeaking of a robots.txt file, I need to make one for my site so that the robots/crawlers WILL search my site... any body know what to put in the robots.txt file to make it store the page and follow all links?
Code Select
<META NAME="Robots" CONTENT="index,follow"> put that between the <head> and </head> tags :)
Logged
I'm back
Chris Cromer
The Strange One
Mod Team
YaBB God
*****
Posts: 3152


I am just a figment of your imagination.

WWW
Re:security question
« Reply #8 on: August 16, 2002, 05:22:33 PM »		 Reply with quote
I already have that in my site's source, but what I want to know is what to put in robots.txt to make it do the same...(because some search engines look for robots.txt and if it is incorrect or missing those search engines skip that site).
Logged
Chris Cromer

I am not suffering from insanity, I am enjoying every minute of it.
sylvester
YaBB God
*****
Posts: 525
Re:security question
« Reply #9 on: August 16, 2002, 07:33:01 PM »		 Reply with quote
Quote from: Chris Cromer on August 16, 2002, 05:22:33 PMI already have that in my site's source, but what I want to know is what to put in robots.txt to make it do the same...(because some search engines look for robots.txt and if it is incorrect or missing those search engines skip that site).
Code Select
Allow: /dir/file.html
Allow: /dir/
Disallow: /disalloweddir/
Disallow: /disalloweddir/disallowedfile.htmlNote: Allow is being ignored by spiders :)
Logged
I'm back
David
Destroyer Dave
Global Moderator
YaBB God
*****
Posts: 5761


I'm not a llama!

WWW
Re:security question
« Reply #10 on: August 19, 2002, 05:52:59 AM »		 Reply with quote
One thing with robots files is the "bad" robots just use them to find the things you don't want them to.  ::)
Logged

Forum-Forum.com, A Forum For Forum Owners and Enthusiasts!
madfiddler
Noobie
*
Posts: 28


I'm a llama!
Re:security question
« Reply #11 on: April 08, 2003, 10:12:27 PM »		 Reply with quote
It's all very well searching/crawling the site, but it's the IM and not logged in errors that doo my head in. I get over a hundred of them, and of course, they have to be clicked by hand incase I miss a genuine error of a member needing help.

What we could do with is a "delete error by IP number or something".

If I disallow robots/crawlers, will this affect my entries in search engines such as yahoo/google etc?
Logged
[Unknown]
Global Moderator
YaBB God
*****
Posts: 7830


ICQ - 179721867unknownbrackets@hotmail.com WWW
Re:security question
« Reply #12 on: April 08, 2003, 11:28:19 PM »		 Reply with quote
Quote from: madfiddler on April 08, 2003, 10:12:27 PM
It's all very well searching/crawling the site, but it's the IM and not logged in errors that doo my head in. I get over a hundred of them, and of course, they have to be clicked by hand incase I miss a genuine error of a member needing help.

What we could do with is a "delete error by IP number or something".

If I disallow robots/crawlers, will this affect my entries in search engines such as yahoo/google etc?

Try Joseph Fung's Advanced Error Log.  I can only say good things about it ;).

-[Unknown]
Logged
madfiddler
Noobie
*
Posts: 28


I'm a llama!
Re:security question
« Reply #13 on: April 10, 2003, 02:12:10 AM »		 Reply with quote
:) Thanks very much for that. Um, where do I find it? it's not coming up in the search.
« Last Edit: April 10, 2003, 02:21:32 AM by madfiddler » Logged
groundup
Disciple of Joe, Head Cleric
Mod Team
YaBB God
*****
Posts: 2983


Error 309: Please notify the administrator of this

WWW
Re:security question
« Reply #14 on: April 10, 2003, 02:41:11 AM »		 Reply with quote
Nor could I find it.
Logged
http://www.fastfinancialfreedom.org - financial freedom is a myth
http://www.fastfinancialfreedom.org - financial freedom is a myth
http://www.fastfinancialfreedom.org - financial freedom is a myth
fastfinancialfreedom.org
Pages: [1] 2 Reply Ignore Print 
YaBB SE Community  |  English User Help  |  English Help  |  security question « previous - next »
 


Powered by MySQL Powered by PHP YaBB SE Community | Powered by YaBB SE
© 2001-2003, YaBB SE Dev Team. All Rights Reserved.
SMF 2.1.4 © 2023, Simple Machines
 Valid XHTML 1.0! Valid CSS

Page created in 0.036 seconds with 20 queries.