1
limecity
Protector: DirTraversal
  • 2009/3/15 21:04

  • limecity

  • Friend of XOOPS

  • Posts: 1602

  • Since: 2003/7/6 0


Quote:
2009/3/16 3:58:42 Guests 78.47.16.162
DataCha0s/2.0 DirTraversal Directory Traversal '../../../../../../../../../../../../../../../../../../../../../../../etc/passwd\0' found.


Found that in my protector log. What does it mean?

hhttp://www.mounthiking.com
all your hiking gears and gadgets


2
ghia
Re: Protector: DirTraversal
  • 2009/3/15 21:31

  • ghia

  • Community Support Member

  • Posts: 4953

  • Since: 2008/7/3 1


That Protector has detected and stopped someone his attempt to hack your site.
You may block this IP or net, if you don't need the traffic. Look it up with WHOIS and if it is a serious hoster or ISP (most West-European are), you might consider them to send a mail with the relevant data (only from that IP and server time verified) from the Apache log to their spam or abuse email contact address.

3
limecity
Re: Protector: DirTraversal
  • 2009/3/16 4:30

  • limecity

  • Friend of XOOPS

  • Posts: 1602

  • Since: 2003/7/6 0


ah... thank god for protector
hhttp://www.mounthiking.com
all your hiking gears and gadgets


4
trabis
Re: Protector: DirTraversal
  • 2009/3/16 13:33

  • trabis

  • Core Developer

  • Posts: 2269

  • Since: 2006/9/1 1


Quote:

limecity wrote:
ah... thank god for protector


Actually, thank giJoe. Consider doing him a donation.

5
Anonymous
Re: Protector: DirTraversal
  • 2009/3/16 13:57

  • Anonymous

  • Posts: 0

  • Since:


Quote:
trabis wrote:

Actually, thank giJoe. Consider doing him a donation.


Yep - top chap and top module....... caught over 1900 sql-injection attempts in 13 minutes on my site a few weeks ago.

6
sailjapan
Re: Protector: DirTraversal

where do you access the protector log? I can't see it in protector's preferences...
Never let a man who does not believe something can be done, talk to a man that is doing it.

7
ghia
Re: Protector: DirTraversal
  • 2009/3/17 0:24

  • ghia

  • Community Support Member

  • Posts: 4953

  • Since: 2008/7/3 1


It's in admin - modules - protector - protect center: /modules/protector/admin/index.php

8
sailjapan
Re: Protector: DirTraversal

ah. It's empty so I didn't notice it. Does that mean no-one's tried anything naughty on my site?
Never let a man who does not believe something can be done, talk to a man that is doing it.

9
ghia
Re: Protector: DirTraversal
  • 2009/3/17 1:06

  • ghia

  • Community Support Member

  • Posts: 4953

  • Since: 2008/7/3 1


Under the security advisory tab you find two links to check if Protector works. It should also make log entries, if your preferences are set to take action.

Login

Who's Online

317 user(s) are online (231 user(s) are browsing Support Forums)


Members: 0


Guests: 317


more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Nov 30
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits