RSS 답글: 필터가 제대로 필터링하지 못함

null@example.com (마모루) — Mon, 01 May 2006 13:19:39 +0000

무참히(?) 뚫렸고, 내용은 아래와 같습니다.
(제가 스스로 스팸과 같은 내용을 보내봤습니다)

array (
0 =>
array (
'COMSPEC' => 'C:\\\\WINDOWS\\\\system32\\\\cmd.exe',
'CONTENT_LENGTH' => '163',
'CONTENT_TYPE' => 'application/x-www-form-urlencoded; charset=utf-8',
'DOCUMENT_ROOT' => 'c:/apm_setup/htdocs',
'HTTP_CONNECTION' => 'close',
'HTTP_HOST' => 'mamoru.homeip.net',
'HTTP_USER_AGENT' => 'Mozilla/4.0 (compatible; Eolin)',
'PATH' => 'C:\\\\RWAPM\\\\RTM20040531\\\\bin\\\\;C:\\\\WINDOWS\\\\system32;C:\\\\WINDOWS;C:\\\\WINDOWS\\\\System32\\\\Wbem;C:\\\\Program Files\\\\ESTsoft\\\\ALZip\\\\;C:\\\\Program Files\\\\Executive Software\\\\Diskeeper\\\\;C:\\\\APM_Setup\\\\Server\\\\MySQL\\\\bin;C:\\\\APM_Setup\\\\Server\\\\PHP4\\\\dlls;C:\\\\APM_Setup\\\\Server\\\\PHP4;C:\\\\APM_Setup\\\\Server\\\\Apache\\\\bin;C:\\\\APM_Setup\\\\Server\\\\MySQL\\\\bin;C:\\\\APM_Setup\\\\Server\\\\PHP4\\\\dlls;C:\\\\APM_Setup\\\\Server\\\\PHP4;C:\\\\APM_Setup\\\\Server\\\\Apache\\\\bin;C:\\\\APM_Setup\\\\Server\\\\MySQL\\\\bin;C:\\\\APM_Setup\\\\Server\\\\PHP4\\\\dlls;C:\\\\APM_Setup\\\\Server\\\\PHP4;C:\\\\APM_Setup\\\\Server\\\\Apache\\\\bin;C:\\\\APM_Setup\\\\Server\\\\MySQL\\\\bin;C:\\\\APM_Setup\\\\Server\\\\PHP4\\\\dlls;C:\\\\APM_Setup\\\\Server\\\\PHP4;C:\\\\APM_Setup\\\\Server\\\\Apache\\\\bin;C:\\\\APM_Setup\\\\Server\\\\MySQL\\\\bin;C:\\\\APM_Setup\\\\Server\\\\PHP4\\\\dlls;C:\\\\APM_Setup\\\\Server\\\\PHP4;C:\\\\APM_Setup\\\\Server\\\\Apache\\\\bin;C:\\\\APM_Setup\\\\Server\\\\MySQL\\\\bin;C:\\\\APM_Setup\\\\Server\\\\PHP4\\\\dlls;C:\\\\APM_Setup\\\\Server\\\\PHP4;C:\\\\APM_Setup\\\\Server\\\\Apache\\\\bin;C:\\\\APM_Setup\\\\Server\\\\MySQL\\\\bin;C:\\\\APM_Setup\\\\Server\\\\PHP4\\\\dlls;C:\\\\APM_Setup\\\\Server\\\\PHP4;C:\\\\APM_Setup\\\\Server\\\\Apache\\\\bin;C:\\\\APM_Setup\\\\Server\\\\MySQL\\\\bin;C:\\\\APM_Setup\\\\Server\\\\PHP4\\\\dlls;C:\\\\APM_Setup\\\\Server\\\\PHP4;C:\\\\APM_Setup\\\\Server\\\\Apache\\\\bin;C:\\\\APM_Setup\\\\Server\\\\MySQL\\\\bin;C:\\\\APM_Setup\\\\Server\\\\PHP4\\\\dlls;C:\\\\APM_Setup\\\\Server\\\\PHP4;C:\\\\APM_Setup\\\\Server\\\\Apache\\\\bin;C:\\\\APM_Setup\\\\Server\\\\MySQL\\\\bin;C:\\\\APM_Setup\\\\Server\\\\PHP4\\\\dlls;C:\\\\APM_Setup\\\\Server\\\\PHP4;C:\\\\APM_Setup\\\\Server\\\\Apache\\\\bin;C:\\\\APM_Setup\\\\Server\\\\MySQL\\\\bin;C:\\\\APM_Setup\\\\Server\\\\PHP4\\\\dlls;C:\\\\APM_Setup\\\\Server\\\\Apache\\\\bin;C:\\\\APM_Setup\\\\Server\\\\Apache\\\\bin;C:\\\\APM_Setup\\\\Server\\\\Apache\\\\bin;C:\\\\APM_Setup\\\\Server\\\\MySQL\\\\bin;C:\\\\APM_Setup\\\\Server\\\\PHP4\\\\dlls;C:\\\\APM_Setup\\\\Server\\\\PHP4',
'REDIRECT_STATUS' => '200',
'REDIRECT_SURI' => '1',
'REDIRECT_URL' => '/blog/trackback/85',
'REMOTE_ADDR' => '125.186.188.52',
'REMOTE_PORT' => '62257',
'SCRIPT_FILENAME' => 'c:/apm_setup/htdocs/blog/blog/trackback/item.php',
'SERVER_ADDR' => '192.168.123.170',
'SERVER_ADMIN' => 'webmaster@localhost',
'SERVER_NAME' => 'mamoru.homeip.net',
'SERVER_PORT' => '80',
'SERVER_SIGNATURE' => '
Apache/1.3.34 Server at mamoru.homeip.net Port 80

',
'SERVER_SOFTWARE' => 'Apache/1.3.34 (Win32) PHP/4.4.2',
'SystemRoot' => 'C:\\\\WINDOWS',
'WINDIR' => 'C:\\\\WINDOWS',
'GATEWAY_INTERFACE' => 'CGI/1.1',
'SERVER_PROTOCOL' => 'HTTP/1.1',
'REQUEST_METHOD' => 'POST',
'QUERY_STRING' => '',
'REQUEST_URI' => '/blog/trackback/85',
'SCRIPT_NAME' => '/blog/blog/trackback/item.php',
'PATH_TRANSLATED' => 'c:/apm_setup/htdocs/blog/blog/trackback/item.php',
'PHP_SELF' => '/blog/blog/trackback/item.php',
'argv' =>
array (
),
'argc' => 0,
),
1 =>
array (
'url' => 'http://mamoru.homeip.net/test/2',
'title' => 'buy cialis online',
'blog_name' => 'buy cialis online',
'excerpt' => 'Wow! Very nice site! generic cialis',
),
)

어라, 로그 발생 후에 혹시나 해서 필터의 내용을 지우고 다시 입력한 후에 트랙백을 보내니 실패했다고 뜨는군요.
백업하고 XML 복원하는 과정에서 뭔가 문제가 있는 것 같은데, 역시 수정되어야 하겠기에 일단 로그 올려봅니다^^

RSS 답글: 필터가 제대로 필터링하지 못함

null@example.com (crizin) — Mon, 01 May 2006 12:53:33 +0000

제 블로그에서 마모루님 블로그로 buy cialis online 이라는 내용으로 트랙백을 보내보니 실패하던데..
가능하시면 테스트 한번 부탁드립니다

1. blog/trackback/item.php 파일을 열어서 맨 첫부분(

$fp = fopen('trackback_'.date('Ymd_His').'_'.$_SERVER['REMOTE_ADDR'].'.log', 'w');
fwrite($fp, var_export(array($_SERVER, $_POST), true));
fclose($fp);

2. 자신의 블로그로 트랙백을 보내보고 blog/trackback 디렉토리에 trackback_20060501_214916_218.38.16.66.log 같은 이름의 파일이 생겼는지 확인한다
2-1. 생기지 않았으면 blog/trackback 디렉토리의 퍼미션을 777 정도로 조절하고 다시 2번으로..
3. 로그파일이 제대로 생겼다면 스팸 트랙백이 오기만을 기다린다
4. 필터링을 뚫고 스팸이 도착하면 로그파일 내용을 이곳에 올려주시거나 저한테 메일로 보내주시면 아마도 해결책이 나올 것이라고 생각합니다

필터가 제대로 필터링하지 못함

null@example.com (마모루) — Mon, 01 May 2006 10:10:26 +0000

홈페이지, 이름, 본문 필터에 분명히 'buy'와 'online'을 넣어두었습니다.
한참 전에 넣어둔 필터 단어인데 트랙백 2개가 날아들어왔군요.

"buy cialis online"

필터가 뚫린 건지, 제대로 잡아내지를 못하는지 모르겠습니다.

1.0.5 베타2입니다.

TNF : Tatter Network Foundation forum - 필터가 제대로 필터링하지 못함

RSS 답글: 필터가 제대로 필터링하지 못함

RSS 답글: 필터가 제대로 필터링하지 못함

필터가 제대로 필터링하지 못함