Chockstone Forum

      Sponsored By
      ROCK
   HARDWARE

Chockstone Photography

Australian Landscape Prints

Chockstone Forum - Chockstone Feedback

Provide Feedback About This Website

Topic Date User

31/12/14 Chockstone spam-hack-attack 22-Jan-2015 At 3:51:35 PM Mike

Message

I've been adding to the blocked words list quite a bit of late in order to prevent the ongoing hacks. The word "c_rsor" (if correctly worded) is on the block list because it's a SQL statement used to iterate through record sets. The word "d_clare" (if correctly worded) is also blocked. I wanted to block "select" too but figured people might use it.

It's possibly going to come down to how upset users are by not having certain words available to them, vs having the site down for a few days when a hack occurs.

Their robot is still attacking us. Even as we speak the logs are being filled by hex encoded SQL script they are trying to inject into various page query strings. So far this week (touch wood), the block list and some extra validation code I added is repelling them.

Just don't use those words.