Help me! someone is hacking my db

reeferd

Hi everyone...
Some irritating shithead is continously insert an empty field into one of my tables storing emails every 10`th minute.

I relalized that I had forgot to make a block against people who try to insert empty fields...

But when I fixed this, there is still coming empty fields into my table.
Argh.

Do you think the "hacker" has gained access to my database server???

Any help on this issue is greatly appreciated!!

Anon

Maybe they are inserting ghost characters like alt-255 or alt-0160?

reeferd

That sounds logical...

hmm.. But how to stop it..
I found another "gap" in my scripts, and it seems as if they don`t insert anything more for now...

Anon

Are you sure that someone is doing this on purpose, and it's not just a bug in you script doing it?

brad.

Anon

Well.. I havent checked my scripts. But I am pretty sure that it isnt me.
You see. These data inserts came periodically with intervalls of 10 minutes.
It could go on for 2 - 3 hours, and then it suddenly stopped.
Anywayz: I found out where he was putting in ghost characters, and I`ve stopped it for now. It was the script that does the tellafriend thingy...
I had forgot to put in a block against null values here...
And instead I store each time someone tries to insert null values in another table now.

Do you know how I can grab the users IP address??? Someone on this list had suggested $REMOTE_ADDR, but that didnt seem to work..

Anon

Hi,

The $REMOTE_ADDR is an Apache specific thing, the documentation says that it may work under other web servers, but also may not return the desired results.

Also, and someone can correct me if I'm wrong, but in order for PHP to access Apache envoinrment variables, it will probably have to be configured as an Apache module, not statically. This little script will tell you most everything you need to know about your php enviornment. Just don't leave it up when you don't need it, it's a big security hole:

<?
phpInfo()
?>

Brad.