TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Ask HN: urgent Security and unsuaul user activity

1 点作者 ahmedaly大约 14 年前
Hello.. I need to ask about something... There is a visitor who keeps visiting my website through multiple proxies at the same time, but as you know.. most of proxy services pass the real IP in the requests.<p>And after his visits, a mysql db errors keep raising..<p>I need to know.. is it normal that a user visits a website through multiple proxies at the same time?

2 条评论

lukencode大约 14 年前
You are probably better off asking this somewhere like stackoverflow or severfault but it sounds like someone might be trying an sql injection attack. See if you can grab the url and querystring of the pages that are being visited
评论 #2431437 未加载
david_shaw大约 14 年前
It's probably a botnet performing automated SQL injection checks on your site; you definitely need to make sure that you are correctly sanitizing any user input, especially if it's echoed back to the page (XSS) or used directly in a database query (SQL injection).<p><i>Especially</i> if you're having database problems, you're going to want to check things. If you have a database of accounts, you might even consider taking the site offline until you can verify that it is secure (and that it hasn't already been dumped to an attacker).