开发者

If "function.mysql-connect" appears in my site search data what are people trying to hack?

开发者 https://www.devze.com 2023-03-28 07:23 出处:网络
I record the search terms in on my e-commerce site and I the term function.mysql connect appears frequently. Immediately it concerns me that there may be some kind of automated bot looking for holes

I record the search terms in on my e-commerce site and I the term

function.mysql connect

appears frequently. Immediately it concerns me that there may be some kind of automated bot looking for holes? SQL injection perhaps?

Could 开发者_JS百科some one please explain what people are trying to do, and if this is indeed a signature of dodgy activity how can I check that I am protected against it?

Many thanks in advance


Most likely the search initiator is looking for dynamic pages that are displaying as plain text. Ie. if a webserver is misconfigured and displaying php files as plain text. In this case, there is a good chance that the mysql database credentials are exposed. This is a common way for malicious users/bots to search for database passwords and this is not SQL injection. For SQL injection, there would be part of a SQL query.

0

精彩评论

暂无评论...
验证码 换一张
取 消