* Site Security Question *

**newbreed** · 10-13-2004, 06:24 PM

**Sly** · 10-13-2004, 06:26 PM

EDITED: Was thinking of something else, sorry.

**jimmyf** · 10-13-2004, 06:27 PM

Originally posted by newbreed
Why would a refering URL show up in my stats like this...

http://username:[email protected]/members/video/

(user/pass/domain was changed for this example)

Thanks,
Bill

all that I've seen on password sites look like that

**newbreed** · 10-13-2004, 06:33 PM

Originally posted by jimmyf
all that I've seen on password sites look like that

That's what I thought, but of course the member denies any wrongdoing or trading. I wish there was a method to find which site it was on...

**greentea** · 10-13-2004, 06:34 PM

Originally posted by newbreed
That's what I thought, but of course the member denies any wrongdoing or trading. I wish there was a method to find which site it was on...

check your server logs..

**NickPapageorgio** · 10-13-2004, 06:35 PM

Originally posted by newbreed
That's what I thought, but of course the member denies any wrongdoing or trading. I wish there was a method to find which site it was on...

I think that can be determined. I know in my webair stats I can view referrers to certain URLs. I think so anyway. There should be a way you can find that out.

**xclusive** · 10-13-2004, 06:35 PM

try googling it...Slight chance but worth a shot...

**newbreed** · 10-13-2004, 06:35 PM

Originally posted by greentea
check your server logs..

Already did, that's where I found the link I posted above. I don't see any suspicious other sites though, just the url that looks like the format above.

**newbreed** · 10-13-2004, 06:36 PM

Originally posted by xclusive
try googling it...Slight chance but worth a shot...

Tried it already, no luck

**newbreed** · 10-13-2004, 06:37 PM

Originally posted by NickPapageorgio
I think that can be determined. I know in my webair stats I can view referrers to certain URLs. I think so anyway. There should be a way you can find that out.

Hey Nick, I'm using awstats if that means anything.

**JenC** · 10-13-2004, 06:44 PM

Just because the member didn't give out his password doesn't mean that a script kiddie didn't guess it. They have brute force scripts that constantly run trying to guess different un/pw combinations to gain access into sites.

For instance the script will guess:
homer / simpson
bill / clinton
dallas / cowboys

Or whatever. It doesn't even have to be that well known of a combination. As long as it's two dictionary words, their scripts can guess it. I'm using StrongBox to prevent hacks like this since it uses cryptography. Here's their url, excellent anti hack script:
http://webmastersguide.com/?htaccess-cgi/strongbox/

**newbreed** · 10-13-2004, 06:58 PM

Originally posted by topsmutlinks
Just because the member didn't give out his password doesn't mean that a script kiddie didn't guess it. They have brute force scripts that constantly run trying to guess different un/pw combinations to gain access into sites.

For instance the script will guess:
homer / simpson
bill / clinton
dallas / cowboys
[/url]

Nah, this user/pass is all funky, letters and numbers, and I know when my server is under attack, been through it twice this year. I'm familiar with StrongBox, great script, I'm just not ready to go that big yet.

* Site Security Question *