1

주제: 필터가 제대로 필터링하지 못함

홈페이지, 이름, 본문 필터에 분명히 'buy'와 'online'을 넣어두었습니다.
한참 전에 넣어둔 필터 단어인데 트랙백 2개가 날아들어왔군요.

"buy cialis online"

필터가 뚫린 건지, 제대로 잡아내지를 못하는지 모르겠습니다.

1.0.5 베타2입니다.

마모루 (2006-05-01 19:14:49)에 의해 마지막으로 수정

현재 사용중인 서버 세팅 - Apache 2.2.3 / mysql 5.0.24 / php 5.1.6
메인블로그 - http://sumomo.tistory.com/
스킨블로그 - http://mamoru.homeip.net/skin/

2

답글: 필터가 제대로 필터링하지 못함

제 블로그에서 마모루님 블로그로 buy cialis online 이라는 내용으로 트랙백을 보내보니 실패하던데..
가능하시면 테스트 한번 부탁드립니다

1. blog/trackback/item.php 파일을 열어서 맨 첫부분(<? 다음줄)에 아래의 코드를 넣는다

$fp = fopen('trackback_'.date('Ymd_His').'_'.$_SERVER['REMOTE_ADDR'].'.log', 'w');
fwrite($fp, var_export(array($_SERVER, $_POST), true));
fclose($fp);

2. 자신의 블로그로 트랙백을 보내보고 blog/trackback 디렉토리에 trackback_20060501_214916_218.38.16.66.log 같은 이름의 파일이 생겼는지 확인한다
2-1. 생기지 않았으면 blog/trackback 디렉토리의 퍼미션을 777 정도로 조절하고 다시 2번으로..
3. 로그파일이 제대로 생겼다면 스팸 트랙백이 오기만을 기다린다
4. 필터링을 뚫고 스팸이 도착하면 로그파일 내용을 이곳에 올려주시거나 저한테 메일로 보내주시면 아마도 해결책이 나올 것이라고 생각합니다 smile

3

답글: 필터가 제대로 필터링하지 못함

무참히(?) 뚫렸고, 내용은 아래와 같습니다.
(제가 스스로 스팸과 같은 내용을 보내봤습니다)

array (
  0 =>
  array (
    'COMSPEC' => 'C:\\\\WINDOWS\\\\system32\\\\cmd.exe',
    'CONTENT_LENGTH' => '163',
    'CONTENT_TYPE' => 'application/x-www-form-urlencoded; charset=utf-8',
    'DOCUMENT_ROOT' => 'c:/apm_setup/htdocs',
    'HTTP_CONNECTION' => 'close',
    'HTTP_HOST' => 'mamoru.homeip.net',
    'HTTP_USER_AGENT' => 'Mozilla/4.0 (compatible; Eolin)',
    'PATH' => 'C:\\\\RWAPM\\\\RTM20040531\\\\bin\\\\;C:\\\\WINDOWS\\\\system32;C:\\\\WINDOWS;C:\\\\WINDOWS\\\\System32\\\\Wbem;C:\\\\Program Files\\\\ESTsoft\\\\ALZip\\\\;C:\\\\Program Files\\\\Executive Software\\\\Diskeeper\\\\;C:\\\\APM_Setup\\\\Server\\\\MySQL\\\\bin;C:\\\\APM_Setup\\\\Server\\\\PHP4\\\\dlls;C:\\\\APM_Setup\\\\Server\\\\PHP4;C:\\\\APM_Setup\\\\Server\\\\Apache\\\\bin;C:\\\\APM_Setup\\\\Server\\\\MySQL\\\\bin;C:\\\\APM_Setup\\\\Server\\\\PHP4\\\\dlls;C:\\\\APM_Setup\\\\Server\\\\PHP4;C:\\\\APM_Setup\\\\Server\\\\Apache\\\\bin;C:\\\\APM_Setup\\\\Server\\\\MySQL\\\\bin;C:\\\\APM_Setup\\\\Server\\\\PHP4\\\\dlls;C:\\\\APM_Setup\\\\Server\\\\PHP4;C:\\\\APM_Setup\\\\Server\\\\Apache\\\\bin;C:\\\\APM_Setup\\\\Server\\\\MySQL\\\\bin;C:\\\\APM_Setup\\\\Server\\\\PHP4\\\\dlls;C:\\\\APM_Setup\\\\Server\\\\PHP4;C:\\\\APM_Setup\\\\Server\\\\Apache\\\\bin;C:\\\\APM_Setup\\\\Server\\\\MySQL\\\\bin;C:\\\\APM_Setup\\\\Server\\\\PHP4\\\\dlls;C:\\\\APM_Setup\\\\Server\\\\PHP4;C:\\\\APM_Setup\\\\Server\\\\Apache\\\\bin;C:\\\\APM_Setup\\\\Server\\\\MySQL\\\\bin;C:\\\\APM_Setup\\\\Server\\\\PHP4\\\\dlls;C:\\\\APM_Setup\\\\Server\\\\PHP4;C:\\\\APM_Setup\\\\Server\\\\Apache\\\\bin;C:\\\\APM_Setup\\\\Server\\\\MySQL\\\\bin;C:\\\\APM_Setup\\\\Server\\\\PHP4\\\\dlls;C:\\\\APM_Setup\\\\Server\\\\PHP4;C:\\\\APM_Setup\\\\Server\\\\Apache\\\\bin;C:\\\\APM_Setup\\\\Server\\\\MySQL\\\\bin;C:\\\\APM_Setup\\\\Server\\\\PHP4\\\\dlls;C:\\\\APM_Setup\\\\Server\\\\PHP4;C:\\\\APM_Setup\\\\Server\\\\Apache\\\\bin;C:\\\\APM_Setup\\\\Server\\\\MySQL\\\\bin;C:\\\\APM_Setup\\\\Server\\\\PHP4\\\\dlls;C:\\\\APM_Setup\\\\Server\\\\PHP4;C:\\\\APM_Setup\\\\Server\\\\Apache\\\\bin;C:\\\\APM_Setup\\\\Server\\\\MySQL\\\\bin;C:\\\\APM_Setup\\\\Server\\\\PHP4\\\\dlls;C:\\\\APM_Setup\\\\Server\\\\PHP4;C:\\\\APM_Setup\\\\Server\\\\Apache\\\\bin;C:\\\\APM_Setup\\\\Server\\\\MySQL\\\\bin;C:\\\\APM_Setup\\\\Server\\\\PHP4\\\\dlls;C:\\\\APM_Setup\\\\Server\\\\Apache\\\\bin;C:\\\\APM_Setup\\\\Server\\\\Apache\\\\bin;C:\\\\APM_Setup\\\\Server\\\\Apache\\\\bin;C:\\\\APM_Setup\\\\Server\\\\MySQL\\\\bin;C:\\\\APM_Setup\\\\Server\\\\PHP4\\\\dlls;C:\\\\APM_Setup\\\\Server\\\\PHP4',
    'REDIRECT_STATUS' => '200',
    'REDIRECT_SURI' => '1',
    'REDIRECT_URL' => '/blog/trackback/85',
    'REMOTE_ADDR' => '125.186.188.52',
    'REMOTE_PORT' => '62257',
    'SCRIPT_FILENAME' => 'c:/apm_setup/htdocs/blog/blog/trackback/item.php',
    'SERVER_ADDR' => '192.168.123.170',
    'SERVER_ADMIN' => 'webmaster@localhost',
    'SERVER_NAME' => 'mamoru.homeip.net',
    'SERVER_PORT' => '80',
    'SERVER_SIGNATURE' => '<ADDRESS>Apache/1.3.34 Server at mamoru.homeip.net Port 80</ADDRESS>
',
    'SERVER_SOFTWARE' => 'Apache/1.3.34 (Win32) PHP/4.4.2',
    'SystemRoot' => 'C:\\\\WINDOWS',
    'WINDIR' => 'C:\\\\WINDOWS',
    'GATEWAY_INTERFACE' => 'CGI/1.1',
    'SERVER_PROTOCOL' => 'HTTP/1.1',
    'REQUEST_METHOD' => 'POST',
    'QUERY_STRING' => '',
    'REQUEST_URI' => '/blog/trackback/85',
    'SCRIPT_NAME' => '/blog/blog/trackback/item.php',
    'PATH_TRANSLATED' => 'c:/apm_setup/htdocs/blog/blog/trackback/item.php',
    'PHP_SELF' => '/blog/blog/trackback/item.php',
    'argv' =>
    array (
    ),
    'argc' => 0,
  ),
  1 =>
  array (
    'url' => 'http://mamoru.homeip.net/test/2',
    'title' => 'buy cialis online',
    'blog_name' => 'buy cialis online',
    'excerpt' => 'Wow! Very nice site! generic cialis',
  ),
)

어라, 로그 발생 후에 혹시나 해서 필터의 내용을 지우고 다시 입력한 후에 트랙백을 보내니 실패했다고 뜨는군요.
백업하고 XML 복원하는 과정에서 뭔가 문제가 있는 것 같은데, 역시 수정되어야 하겠기에 일단 로그 올려봅니다^^

마모루 (2006-05-02 10:50:54)에 의해 마지막으로 수정

현재 사용중인 서버 세팅 - Apache 2.2.3 / mysql 5.0.24 / php 5.1.6
메인블로그 - http://sumomo.tistory.com/
스킨블로그 - http://mamoru.homeip.net/skin/