Almost Sure Ive Seen This

New Member Joined: Nov 17, 2003 Posts: 20

Today a user was blocked for trying to rate a link in the links module. I am almost positive that I remember this happening to others and Bob addressing the issue, for the life of me I cant seem to find it the thread.

Posted: Wed Aug 25, 2004 11:18 pm

Usually happens when the weblink in question has "parenthesis" somewhere in it.....if I remember correctly....

New Member Joined: Aug 18, 2004 Posts: 6

I had a member blocked recently with this code

Quote:

Date & Time: 2004-08-25 00:50:09
Blocked IP: removed ip
User ID: all4one (57)
Reason: Abuse - SCRIPT
--------------------
User Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Query String: [ Only registered users can see links on this board! Get registered or login! ]"
Forwarded For: none
Client IP: none
Remote Address: removed ip
Remote Port: 7074
Request Method: GET

Does any one have any idea why this would be blocked. It appears that all he did was check his private messages. Im not sure why there is a \ at the end of the link? I can't duplicate it myself.

Pilgrim

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

The \" means he/it attempted to escape the quote marks. Quote marks are filtered out by both nuke and NukeSentinel™.

Client Joined: Jul 18, 2003 Posts: 977

Raven I just had one of these... I understand the wording of your post but I do not understand what the user did to get the ban. Please explain. Thank you.

Code:

www.gamersroam.com/modules.php?name=Private_Messages&file=index&folder=inbox\"

Posted: Sun Sep 05, 2004 11:00 pm

By placing the \" at the end, this usually indicates that the user was trying to append something in quote marks. Quote marks should not be being passed at the end of a url in nuke, so it is flagged.

Posted: Mon Sep 06, 2004 1:32 pm

Thank you. What would the user be trying to do, something wrong? Or could it be innocent?

Posted: Mon Sep 06, 2004 5:20 pm

Download your server logs and find that entry to see the entire string.