faulty sites

OldSkoolMan · December 12th, 2008, 09:38 AM

hello,

on my gallery have i faulty access to sites:

/foto-upload/showphoto.php?photo=http://www33.websamba.com/mysons/index.htm?

or

/foto-upload/showphoto.php?photo=http://hoffsons.narod.ru/index.htm?

on the sites

Code:

Content visible to verified customers only.

is following code:

Code:

Content visible to verified customers only.

how does it do? is my site endangered?

how can i block these

Code:

Content visible to verified customers only.

Chuck S · December 12th, 2008, 10:40 AM

well where do you have such links? There are no in our code because photo can only be an interger so thats not a security issue in our program. Thats something trying to spoof your site.

OldSkoolMan · December 12th, 2008, 01:03 PM

hi Chuck,

i use vbgallery with vbulletin. on vbulletin have a "who is online" plugin, where shows the access from users.

...

now, i have write in htaccess:
RewriteCond %{QUERY_STRING} http
RewriteRule ^ - [F]

so block all access with a "http" on query string

this help have i from Index @ modrewrite.de and i hope, its okay so.

reagards from germany
OldSkoolMan

Chuck S · December 12th, 2008, 02:18 PM

well the script your using is photopost pro not vbgallery and as stated the photo id variable can only be an interger so your protected anyway regardless of anything else.