Skip to main content

This site requires you to update your browser. Your browsing experience maybe affected by not having the most up to date version.

We've moved the forum!

Please use forum.silverstripe.org for any new questions (announcement).
The forum archive will stick around, but will be read only.

You can also use our Slack channel or StackOverflow to ask for help.
Check out our community overview for more options to contribute.

General Questions /

General questions about getting started with SilverStripe that don't fit in any of the categories above.

Moderators: martimiz, Sean, Ed, biapar, Willr, Ingo, swaiba

Joomla spambots attacking Silverstripe sites


Go to End


3 Posts   1017 Views

Avatar
mikeyc7m

Community Member, 19 Posts

6 May 2014 at 10:47am

Lately I've noticed a lot of errors logged by my silverstripe sites regarding database connections. That in itself is a separate issue, but the strange thing about them is the reported URLs. All of the URLs are formatted for Joomla websites, like this:
http://mysite.com/index.php?option=com_community&view=frontpage
http://othersite.com/index.php?nn_qp=1&url=http://www.nonumber.nl/

It's as though some sort of spambot is attacking Silverstripe websites in the mistaken belief that they are Joomla websites. Has anyone else noticed this behaviour? Should we be concerned?

Avatar
ss23

Community Member, 9 Posts

6 May 2014 at 12:46pm

Not exactly anything to do with SilverStripe, rather, just what happens if you have an indexed site anywhere.
All of my websites get constant "attacks" like this, regardless of whether they're SilverStripe.

Not anything to worry about though! You should probably take a look at the errors though, as in general, users should not be able to cause database errors to be triggered. Because they're aimed at Joomla though, you have almost no chance of actually having anything 'bad' happen from these kinds of requests.

Avatar
Mo

Community Member, 541 Posts

22 May 2014 at 11:59am

Sounds to me like script kiddies or just some bots. I get a lot of these types of requests on my server as well.

Most of the ones I get are looking for PhpMyAdmin or Wordpress urls, but it is the same pricipal.

Cheers,

Mo