By GalCo on
I got a contact form email from obvious cracker, probably SQL injection...determining if it succeeded. I don't want to paste the code here until I know it would be safe...why help the crackers?
It goes modified something like this:
-212 sent a message using the contact form at
http://www.scmsgalveston.com/contact.
NxT8u1 cbuqletisxnd,
[url=some other .com]vqlqoatushrq[/url],
[link=same .com as url[/link], [link]
What kind of crack-attack is this and how can I be sure to foil the saltene?
Comments
That looks like a bot trying
That looks like a bot trying to make a post with links on a VBulletin or something. Not a SQL injection.
To second Kirk's post, it's
To second Kirk's post, it's definitely not SQL injection. I'm not how you could think it was as it's not php and it definitely doesn't contain any SQL commands.
Probably just a bot
Hi Richard,
As others here suggested, it is probably just a bot checking your forms - my contact forms get this kind of junk all the time. The bot submits some data and sees what comes back - to determine if your form is vulnerable to attacks. in this case, probably spam (trying to post links) :)
My company (built on Drupal) can actually scan your site for vulnerabilities like SQL Injection, cross site scripting, etc, and help you pinpoint how to fix it. Basic scan is free, so no harm in checking it out. I don't usually comment with a sales pitch, but this fit so nicely with my site, I couldn't resist, so don't hold me too liable ;)
the site is https://www.golemtechnologies.com
If you have questions, let me know, I'd be glad to work with you.
Deny some stupid bots to post comments
I'm using the Capcha module and the spam from this type of bots has gone.
Thanks to all
I am closing this one today. Since posting I boned up on cleaning and filtering data using php, and will probably wind up submitting a module when I get it working. Always consider data dirty until you clean and filter it somehow - rule of thumb. Captcha works, but is problematic in other ways for me.