Error 406, Sanity Worm?

allhandl · February 1st, 2005, 07:58 AM

Fellas..

Ive been running Gallery since its intro. Ive kind of fallin asleep at the wheel and havent touched any files for a long time now. 3 days ago I received a report that the upload process of gallery was no longer working. It seems I get

Quote:

HTTP Error 406 - Not acceptable

I recently ran across a thread in another script's forum and found this:

Quote:

I understand that there is a new version of the Sanity Worm which targets PHP vulnerabilities. According to K-OTik Security in Montpellier, France, it uses search engines including Google, Yahoo, and AOL to identify exploitable Web pages written in PHP which use the functions "include()" and "require()" in an insecure manner. To prevent these attacks, it may be necessary to recode the site to use the include() and require() functions in a safe manner.

Do you think this is related? Anyone else experiencing this?

February 1st, 2005, 08:07 AM

Would you mind submitting a support ticket so I can have a look at things?

allhandl · February 1st, 2005, 08:21 AM

Thanks for the quick response. I submitted the ticket.

Im still running the 3.0.4 and plan to upgrade the site once i have some time to do so. Its appears as though the only issue with all of the scripts is the upload file for gallery. Let me know when you are done and Ill do a fresh install of everything.

its odd that it just changed considering I havent FTP anything for a month.

allhandl · February 2nd, 2005, 07:48 AM

Ive been doing some research on the dreaded 406 Error that I have and it may be something on my end (server). I found this thread over at vb.com .

Im not having any VB problems with posts like above nor any problems with any other scripts (incl. VbaLinks). Its just the upload file of VbaGallery so far. So im scratching my head because im guessing there is soemthing in the code that my server is rejecting. Does that make sense?

I use a large hosting company akwebhosting.net and listed a ticket with them as well to see if there has been any changes in past week that would spark the 406.

keep you guys posted just in case anyone ever runs into this.