在Web服务器日志中包含'A = 0或'0 = A的奇怪URL [英] Strange URL containing 'A=0 or '0=A in web server logs

问题描述

在上周末，我的一些网站记录错误，这意味着我们的网址使用错误：

During the last weekend some of my sites logged errors implying wrong usage of our URLs:

...news.php?lang=EN&id=23'A=0

或

...news.php?lang=EN&id=23'0=A

而不是

...news.php?lang=EN&id=23

我发现只有一个页面提到这个（ https://forums.adobe.com/thread/1973913 ），他们推测附加查询字符串来自GoogleBot或编码错误。

I found only one page originally which mentioned this (https://forums.adobe.com/thread/1973913) where they speculated that the additional query string comes from GoogleBot or an encoding error.

我最近更改了我的网站使用PDO而不是 mysql _ * 。也许这种变化造成了错误？任何提示都是有用的。

I recently changed my sites to use PDO instead of mysql_*. Maybe this change caused the errors? Any hints would be useful.

此外，所有请求都来自下面显示的相同的用户代理。 p>

Additionally, all of the requests come from the same user-agent shown below.

Mozilla/5.0 (Windows; U; Windows NT 5.1; pt-PT; rv:1.9.1.2) Gecko/20090729 Firefox/3.5.2 (.NET CLR 3.5.30729)

这导致我找到以下主题：
pt-BR
和
URL中的奇怪参数 - 他们在尝试什么？

This lead me to find the following threads: pt-BR and Strange parameter in URL - what are they trying?

推荐答案

由于这是一个非常旧的FireFox版本，我将其阻止在我的htaccess文件中 -

since this is a very old version of FireFox, I blocked it in my htaccess file -

RewriteCond %{HTTP_USER_AGENT} Firefox/3\.5\.2 [NC]
RewriteRule .* err404.php  [R,L]

这篇关于在Web服务器日志中包含'A = 0或'0 = A的奇怪URL的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！