Ravens PHP Scripts: Forums
 

 

View next topic
View previous topic
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> Security - PHP Nuke
Author Message
jjh221
Worker
Worker


Joined: Dec 05, 2006
Posts: 178

PostPosted: Thu Jan 04, 2007 1:13 am Reply with quote

I was looking through my tracked ip logs and I found an unregistered user viewing the following link: Only registered users can see links on this board! Get registered or login!
I thought that link was only used when in "Your Account" home and when clicking on messages link.

I just went to mysite.com and pasted the link above and it shows in my tracked ip log. Would there be a reason someone would try to copy and paste that link to access anything? or is there something else i should be worried about. All other actions seemed to be that of a curious browser. I guess...
Oh and first they went to "Your Account" link then to "Private Messages" link then to link above. :shrugs:

Is there a way to further track someones actions?
 
View user's profile Send private message
montego
Site Admin


Joined: Aug 29, 2004
Posts: 9449
Location: Arizona

PostPosted: Thu Jan 04, 2007 6:38 am Reply with quote

Quote:

just went to mysite.com and pasted the link above and it shows in my tracked ip log.


I am guessing that you were still logged in either as a regular user or admin.

Quote:

I thought that link was only used when in "Your Account" home and when clicking on messages link.


Regarding this, it is possible that other modules also point to this link. The key is finding out the referring URL. You might have to look at your server access logs to find that. Take the IP address that NukeSentinel shows and the general time-frame when this occurred and go hunting... Smile

Make sure they really did go from YA to PM directly.

_________________
Only registered users can see links on this board! Get registered or login!
Only registered users can see links on this board! Get registered or login! 
View user's profile Send private message Visit poster's website
jjh221
PostPosted: Thu Jan 04, 2007 11:12 am Reply with quote

herm ima keep looking. Oh! and is there an auto prune on the tracked ip's list? I check today and a few of them are missing like wtf. Me thinks someone i messing with me. Or me thinks me lost me mind.
 
montego
PostPosted: Thu Jan 04, 2007 6:08 pm Reply with quote

There is a setting within the NukeSentinel adminstration page for the number of days to track...
 
Display posts from previous:       
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> Security - PHP Nuke

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001-2007 phpBB Group
All times are GMT - 6 Hours
 
Forums ©