My site under attack?

402 posts

Should I be alarmed at any of what I received in the warning email? What does this mean?

Total impact: 5
Affected tags: xss, csrf

Variable: COOKIE.memberSession | Value: 9?X=2yt,mSUZhQP.e=

dPmGgSnbMNgqcj
Impact: 5 | Tags: xss, csrf
Description: Detects JavaScript location/document property access and window access obfuscation | Tags: xss, csrf | ID: 23

REMOTE_ADDR: 67.164.11.159
HTTP_X_FORWARDED_FOR:
HTTP_CLIENT_IP:
SCRIPT_FILENAME: /home/unity/public_html/modules/index.php
QUERY_STRING: r=photos/get_image/icon/48785775871d568320f31ce4857e47fc.jpg
REQUEST_URI: /m/photos/get_image/icon/48785775871d568320f31ce4857e47fc.jpg
QUERY_STRING: r=photos/get_image/icon/48785775871d568320f31ce4857e47fc.jpg
SCRIPT_NAME: /modules/index.php
PHP_SELF: /modules/index.php

Quote · 30 Apr 2011

deano92964Premium

10772 posts

Either your running an older version of dolphin, or you turned on the PHPIDS security that has been disabled by default in the last couple of versions of dolphin.

The PHPIDS system should be disabled.

See this post. http://www.boonex.com/forums/#topic/Troubleshooting-Possible-Security-Attacks-.htm

Instructions are there. Use second option. Further recommendations are at the end of that topic.

https://www.deanbassett.com

Quote · 30 Apr 2011

Reply ›

My site under attack?

Blogs

Help

Product

Company