Page 1 of 1

SQL Injection attack?

Posted: Fri Feb 08, 2013 3:46 pm
by Tolwrath
So apparently some russian guy went and tried to use SQL injection to try to do... something. I'm not sure it worked because of how the SQL ended up as actual thread names.

Not gonna test it myself though. What would anyone even want from the Kenshi forum anyway?

Re: SQL Injection attack?

Posted: Fri Feb 08, 2013 3:51 pm
by lionroot
Not sure but I thought that's this was a bot posting in the forum.

At least is seems like that.

Re: SQL Injection attack?

Posted: Fri Feb 08, 2013 3:53 pm
by Tolwrath
With some minor searching, that username has hundreds of registrations on other forums, usually with no posts. I would suggest banning that account/IP.

Re: SQL Injection attack?

Posted: Fri Feb 08, 2013 3:55 pm
by demidevil
The weird part is that he has a pic, didn't expect a spammer to go that far, but it seems his posts are already getting deleted so nice job mod, I assume it was you toaster?

Re: SQL Injection attack?

Posted: Fri Feb 08, 2013 4:06 pm
by 1337
Nope was me. Btw you are crazy fast :lol: , i didn't even had time to reload the unread posts page that you had already posted about it.

He was banned obviously.

Edit:
Deleted topic “/register.html?agreed=” written by » ClezeripLoveroo toaster Assassin 08 Feb 2013, 16:04
Banned user for reason “spammer” » ClezeripLoveroo 1337 08 Feb 2013, 16:04
Closed report » /register.html?agreed= 1337 08 Feb 2013, 16:03

the best teamwork is the one you are not aware of until it is done :lol:

Re: SQL Injection attack?

Posted: Fri Feb 08, 2013 4:13 pm
by Cat_Fuzz
I googled the website it was linking to - I don't think russian cosmetics are must have for Kenshi tbh. :P

Re: SQL Injection attack?

Posted: Fri Feb 08, 2013 4:14 pm
by toaster Assassin
True that! :D



I hope this isn't the prologue to another half-assed spam-siege.




Most of the recent spam seemed to have originated from Russia. (Though there are applications to blur the true location)

Re: SQL Injection attack?

Posted: Sun Feb 10, 2013 4:02 pm
by Clawdius Talonious
I was a bit saddened when I logged on and saw that the new threads were all spam, and not just some new member who loved Clezerips.