Hacker changing URL string

this is frustrating-- our server is getting pounded (and so
running JRUN up to 100%) with some hacker changing the URL to
different things. I'm running CFMX 6.1 on Windows 2003. Here's a
sample of query strings that have been changed:
Fuseaction=events&amp;amp;section=events&amp;View=http%3A%2F%2Fwww.vacacionalhouse .com%2Fen%2Fimg%2Fvohe%2Fseyon%2F
Fuseaction=http%3A%2F%2Fwww.psikolojikyardim.org%2Fetkinlik%2Finclude%2Feto%2Fnixaz%2F
Fuseaction=Day&amp;amp;amp;amp;amp;sm=2&amp;amp;amp;amp;amp;sy=http%3A%2F%2Fwww.so easywebsite.com%2Fsoeasycasino%2Fixu%2Fxotem%2F&amp;amp;amp;amp;amp;sd=27&amp;amp; amp;amp;View=all&amp;amp;amp;View=all&amp;amp;View=all&amp;View=all
-->I've added a catch for these where it redirects
them to the main page, but this doesn't seem to stop them
-->notice the ;amp;amp;amp;amp; in that last one....
None are the same IPs and hail from Russia, Portugal, etc. so
I can't block the offending IP, and they're using a normal browser
so I can't block by user-agent
Any ideas?

quote:
Originally posted by:
SilentBob'secretfusion
This is what I do. I pass the variable twice in the url
string. The first unencrypted, the second encrypted. I compare the
two on the next page and if the don't match, I know I am dealing
with an asshat.
Great idea! (And appropriate name too)

Similar Messages

URL String works for weeks, then decides to give up on life.

I have a game that uses the twitter API to call 20 recent tweets from the accoun the URL string is set up to, iot has been working for weeks no problems untill todya, when it just shouted at me! saying:
Error #2044: Unhandled ioError:. text=Error #2032: Stream Error. URL: file:////http://search.twitter.com/search.json?lang=en&q=Lady%20Gaga&rpp=100
          at DocumentMain()[F:\Documents and Settings\Scott Mitchell\Desktop\Comb Over Charlie Style Game\DocumentMain.as:88]
Sometimes i get another error, but thats if i change the url to: https://api.twitter.com/1/statuses/user_timeline.json?screen_name=LadyGaga
The code i have now to get the tweets is:
var loader:URLLoader = new URLLoader(new URLRequest("//http://search.twitter.com/search.json?lang=en&q=Lady%20Gaga&rpp=100"));
                              loader.addEventListener(Event.COMPLETE, loadComplete);
public function loadComplete(e:Event):void
                              processData(e.target.data);
                    public function processData(data:String):void
                              var tweets:Array = JSON.decode(data) as Array;
                              for (var i:int=0; i<21; i++)
                                        TweetHolder.tweet1.text = tweets[1].text;
                                        TweetHolder.tweet2.text = tweets[2].text;
                                        TweetHolder.tweet3.text = tweets[3].text;
                                        TweetHolder.tweet4.text = tweets[4].text;
                                        TweetHolder.tweet5.text = tweets[5].text;
                                        TweetHolder.tweet6.text = tweets[6].text;
                                        TweetHolder.tweet7.text = tweets[7].text;
                                        TweetHolder.tweet8.text = tweets[8].text;
                                        TweetHolder.tweet9.text = tweets[9].text;
                                        TweetHolder.tweet10.text = tweets[10].text;
                                        TweetHolder.tweet11.text = tweets[11].text;
                                        TweetHolder.tweet12.text = tweets[12].text;
                                        TweetHolder.tweet13.text = tweets[13].text;
                                        TweetHolder.tweet14.text = tweets[14].text;
                                        TweetHolder.tweet15.text = tweets[15].text;
                                        TweetHolder.tweet16.text = tweets[16].text;
                                        TweetHolder.tweet17.text = tweets[17].text;
                                        TweetHolder.tweet18.text = tweets[18].text;
                                        TweetHolder.tweet19.text = tweets[19].text;
                                           TweetHolder.tweet20.text = tweets[20].text;
                                        TweetHolder.tweet21.text = tweets[21].text;

haha thanks your a genius. But i removed it and its still not working, I get this error now:
But it seems it does not like this function:
private function loadComplete(e:Event):void
                                   processData(e.target.data);
its saying:
at DocumentMain/loadComplete()[F:\Documents and Settings\Scott Mitchell\Desktop\Comb Over Charlie Style Game\DocumentMain.as:539]
          at flash.events::EventDispatcher/dispatchEventFunction()
          at flash.events::EventDispatcher/dispatchEvent()
          at flash.net::URLLoader/onComplete()

Passing variables through the URL String

I have a template and outside the basic html - all the content is grabbed from a db. I want to use 1 template to generate all of the other pages for the site. So basically, the only way to identify the page would be through the URL string.
So, something like -
www.mysite.com/template.jsp?page_section=aboutus&pageID=1
That string would query the database and output the content for page 1 of the about section.
Does this make sense and where would I start to learn how this is done?.
Again, I appreciate your help.
Mark

since database connections are costly affair i better use
jsp include tag ratter then getting dadta from database
assumming that u can devide your comman pages in 4 parts
just assume
top - logo
bottom - common links
center - data
left - menu
my jsp page would look like this (aboutus.jsp)
<%@ include file="top.html" %>
<%@ include file="left.html" %>
<%@ include file="aboustus.html" %>
<%@ include file="bottom.html" %>
2) disclaimer.jsp
<%@ include file="top.html" %>
<%@ include file="left.html" %>
<%@ include file="disclaimer.html" %>
<%@ include file="bottom.html" %>
this would reduce ur maintainnce as if u want to change top logo only top.html needs to be changed and it would affect in all pages
regards
[email protected]

What does DUMMY=1 mean in the URL string

Hello,
I am executing WAD template that contains a query for my planning layout. When I look at the URL link of the WAD in the browser, it has the following in it:
http://xxx.xxx.com:50000/irj/servlet/prt/portal/prtroot/pcd!3aportal_content!2fcom.sap.pct!2fplatform_add_ons!2fcom.sap.ip.bi!2fiViews!2fcom.sap.ip.bi.bex?TEMPLATE=ZFI_ZFIFMAL02_WT0001&DUMMY=1
What is that DUMMY=1 at the end of the URL string mean ? I have also seen DUMMY=0 in some queries in QA and development systems. Any idea?
thanks

Hi,
thanks a lot for this helpful reply. One question I do have though. So, say I created an iView in portal with the link that points directly to my WAD template and the link has say DUMMY=2 in the query string. Now, if I do update my WAD template, would I need to change the link to DUMMY=3? So far what I have noticed that I do save links with DUMMY=X in the URL and then if I do update my WAD, when the user clicks on the link in portal, the WAD still gets updated. So, do you really need DUMMY=X in your link in that case?
Thanks

How do u change a string to a Date object??

im using GregorianCalendar rite now to get dates..
n i got 2 dates - one is current date, the other is another date(How do i say this?? hmm.... ok, my birthday).
i had put them into "strings"
but i gotta check which date came 1st.(current, or my birthday)
i have found the method in Date.class, but before using the method, i gotta change the String to Date..
this is where i got stuck..
plz give me any info - codes, links, url, any things that helps..
Thz people..

SOrry for replying late..
i did catch the exception, n print out
catch(Exception e)
System.out.println(e); --> this is where it print out the error msg.
hmm, i tried to use the SimpleDateFormat class, as in in this link
http://forum.java.sun.com/thread.jsp?forum=31&thread=345037
the error shown up again, n with ("01/jan/2003");
i wanted it to be in all numbers like ("01/01/2003");
i think im confusing all of u now, coz i aint really good at explaining...
but here parts of my codes..
//edited code ---> using SimpleDateFOrmat
Date d1 = new Date();
Date d2 = new Date();
DateFormat df = new SimpleDateFormat("dd/MM/yyyy");
d1 = df.parse(appDate); //appDate="01/01/2003"
d2 = df.parse(date); //date ="23/05/2003"
}catch(ParseException a){System.out.println(a);}
++++++++++++++++++++++++++++++++++++++++++++++++
//error msg
error: java.text.ParseException: Unparseable date: "(01/jan/2003)";
++++++++++++++++++++++++++++++++++++++++++++++++
//this is the orignal one
Date d1 = new Date();
Date d2 = new Date();
DateFormat df = DateFormat.getDateInstance();
d1 = df.parse(appDate); //appDate="01/01/2003"
d2 = df.parse(date); //date ="23/05/2003"
}catch(ParseException a){System.out.println(a);}
++++++++++++++++++++++++++++++++++++++++++++++++
//error msg
error: java.text.ParseException: Unparseable date: "(01/01/2003)";
++++++++++++++++++++++++++++++++++++++++++++++++
Hope someone out there knows what actually gone wrong..
n For those who reply or replied.. ThanK YOU!!!

Change url connection to socket

hello i have a problem about a socket connection can you help me
i want to change url connection to socket connection
here is
          java.net.URL url = new java.net.URL("http://64.74.75.74/approot/webapp/ZOR/bare");
          connection = new sun.net.www.protocol.http.HttpURLConnection(url, " ", 0);
          connection.setRequestMethod("POST");
          connection.setDoInput(true);
          connection.setDoOutput(true);
          connection.setUseCaches(false);
          java.io.ObjectOutputStream out = new java.io.ObjectOutputStream(connection.getOutputStream());
          out.writeObject(getTextFieldGiden().getText());
          out.flush();
          out.close();
          return (String) (new java.io.ObjectInputStream(connection.getInputStream()).readObject());how can i change it to
socket connection because i must write it in c++
thank you very much

why are you replaying if you don' t have a solution peter?
i have a big c++ project and in it somewhere must do the job the code i send in java do.
İ also want to say i dont want it's c++ code ,i want to know how it can be with java sockets.

How to change url of bsp page

Hi experts
I have created a BSP application , In login pafe i want to change URL which we use for TEST .
Or can can i redirect to another url , when TEST the page.
Thanks & Regards
Prashant Gupta

Hi Prashant,
Re-directing to another URL on load of page is a very simple piece of HTML code.Put this on the layout of page from where you want to re-direct to the other URL.
<html>
<head>
<metas http-equiv="refresh" content="0;url=http://sdn.sap.com">
</head>
</html>
Here the important line is the 3rd line which begins with "<metas". The operation is "refresh" which means to "refresh" the current page with the information that follows. The content begins with a zero, which is the number of seconds to wait, and then the URL that you should be taken to.
So the above code would re-direct you to the http://sdn.sap.com page as soon as you log in.
Hope this helps!
PS : meta changed to metas to allow adding of the code.
Regards,
Saurabh

Japanese Characters working as URL parameters, turning to question marks when in URL string itself

I'm having some trouble getting coldfusion to see japanese
characters in the URL string.
To clarify, if I have something like this:
http://my.domain.com/index.cfm?categorylevel0=Search&categorylevel1=%E3%82%A2%E3%82%B8%E3% 82%A2%E3%83%BB%E3%83%93%E3%82%B8%E3%83%8D%E3%82%B9%E9%96%8B%E7%99%BA
All of my code works correctly and the server is able to pass
the japanese characters to the database and retrieve the correct
data.
If I have this instead:
http://my.domain.com/index.cfm/Search/%E3%82%A2%E3%82%B8%E3%82%A2%E3%83%BB%E3%83%93%E3%82% B8%E3%83%8D%E3%82%B9%E9%96%8B%E7%99%BA
My script (which works fine with English characters) parses
CGI variables and converts these to the same URL parameters that I
had in the first URL using a loop and a CFSET url.etc..
In the first example, looking at the CF debug info shows me
what I expect to see:
URL Parameters:
CATEGORYLEVEL0=Search
CATEGORYLEVEL1=アジア・ビジネス開発
In the second example it shows me this:
URL Parameters:
CATEGORYLEVEL0=Search
CATEGORYLEVEL1=???·??????
Can anyone suggest means for debugging this? I'm not sure if
this is a CF problem, an IIS problem, a JRUN problem or something
else altogether that causes it to lose the characters if they are
in the URL string but NOT as a parameter.

My suggestion was that you test with the
first url, not the second. However, I can see a source of
confusion. I overlooked your delimiter, "/". It should be "?" and
"=" in this case. With these modifications, we get
<cfif Len(cgi.query_string) neq 0>
<cfset i = 1>
<cfloop list="#cgi.query_string#" delimiters="&"
index="currentcatname">
<cfoutput>categorylevel#i# =
#ListGetAt(currentcatname,2,"=")#</cfoutput><br>
<cfset i = i + 1>
</cfloop>
If it is a failing of Coldfusion, the above test should fail,
too.
Now, an adaptation of the same test to your second url.
<cfset url2 = "
http://my.domain.com/index.cfm/Search/%E3%82%A2%E3%82%B8%E3%82%A2%E3%83%BB%E3%83%93%E3%82% B8%E3%83%8D%E3%82%B9%E9%96%8B%E7%99%BA">
<cfset query_str =
ListGetAt(replacenocase(url2,".cfm/","?"),2,"?")>
<cfif Len(query_str) neq 0>
<cfset i = 1>
<cfloop list="#query_str#" delimiters="/"
index="currentcatname">
<cfoutput>categorylevel#i# =
#currentcatname#</cfoutput><br>
<cfset i = i + 1>
</cfloop>

Can I pass variables in the URL string?

I am trying to get some variables into a loaded swf at
runtime. The variables will carry information so the swf can load
the correct xml file. I thought we could pass them through the URL
string like so:
new URLRequest("testing.swf?myVar=varOne
but it just throws an URL cannot be found error. How can I
get variables into my swf at runtime?

What you are doing is fine. But you will always get that
error when testing
the movie (Ctrl+Enter). Try it in a browser and it should
work.
BTW, another way of doing the same is to use a URLVariables
object, like so:
var req:URLRequest = new URLRequest("testing.swf");
var vars:URLVariables = new
URLVariables("myVar=varOne&myVar2=varTwo");
req.data = vars;

Can set charset in jdbc url string?

can set charset in jdbc url string
like mysql
?

China,
As far as I know, you cannot set the charset in the JDBC URL string. However, there are ways to set it. Although I have no experience with setting the charset, I believe the "Oracle JDBC User's Guide and Reference" contains this information. The guide is available from:
http://tahiti.oracle.com
Allow me to give you some advice. Each DBMS does things differently. Oracle's JDBC driver does not work exactly the same way as the JDBC driver for "mySQL". You need to learn how Oracle's JDBC driver does things. In my opinion, the "Oracle JDBC User's Guide nad Reference" is very good for learning how to use Oracle's JDBC driver.
Good Luck,
Avi.

Number format changed to string in excel

I want to store a table in excel file and in the table
there is a number field that when I store it in the
excel file ,I want it change to String format,
because when it store it in the number format,
it is a wrong number.
thanks in advance

"883923"
Pretend you are explaining this to someone who has no idea what you are talking about (because we don't).
Statements like "but therewas a problem" are next to meaningless because you didn't explain what the problem is.
You don't give any useful information such as:
* Version of JDeveloper/ADF
* What technologies are you using (I guess ADF Faces, but I don't know)?
* How did you try exporting to Excel?
* What was the exact problem you had?
I've already spent more time thinking about how to ask you questions to get to the real problem than you have formulating your question.
John

Change a string to upcase

Hi,
How to change a string to all upcase.
Thanks

what about reading the api doc for String class?
http://java.sun.com/j2se/1.3/docs/api/java/lang/String.html

How can i get getwayed url string using pluggable nav in news portlet?

hi.
How can i get getwayed url string using pluggable nav in news portlet?
A code just like below is what I want.
<param value="param=http://.../portal/server.pt/gateway/PTARGS_.../http/...">
I tryed the following, but didn't work as I wanted.
1.<param value="<pcs:valueexpr='var'/>">
-> transformed. but I want the prefix 'param=' in the enquoted string's too.
2. <param value="param=<pcs:valueexpr='var'/>">
-> not transformed.
Any idea?
Hiroyuki

Hi all,
We have HPROF functionality in our latest roadmap, so you will see that feature in our next major release called JRockit R28.
I recommend, above from the MemLeak documentation suggested by Makiey, the following information on how to use JRockit tools.
Performance Tuning & Profiling:
http://download.oracle.com/docs/cd/E13150_01/jrockit_jvm/jrockit/geninfo/diagnos/part_02.html
Using JRockit tools:
http://download.oracle.com/docs/cd/E13150_01/jrockit_jvm/jrockit/geninfo/diagnos/part_03.html
Diagnostics & Troubleshooting
http://download.oracle.com/docs/cd/E13150_01/jrockit_jvm/jrockit/geninfo/diagnos/part_04.html
Best Regards,
Tuva
JRockit PM

To change the string in Class Builder "New Method"

HI friends,
Im using the std program of "RFDOPR10"...(changed into my customised program as ZRFDOPR10).....
Here i want to change the strings of Id_type eq 4 availble under the class builder "New Method".
"id_ruler_string = '2.13.24.29|43|58|73|88|103|118|'" (for 24...i want to give 38.....then 45...)
Pls help me how to change the std method function for my z program...
FYR:
RFDOPR10 is the std program for tcode :"s_alr_87012178", Customer analysis.If u want to c the example report, in this tcode...give OI:1, Summ level:6, OI list:1 and Company CD:2 under Output control tab in selection screen with Company code.Now, u able to see the reports in the screen.There, after Customer number....I've to give some more spaces(length) for Sort field.
Thanks & regards
Sankar.

No, but I suggest using a different editor which does allow a different text option and just pasting it in.

GetConnection(String URL) vs. (String URL, String user, String password)

Hi,
would have a question referring to the documention at http://docs.oracle.com/cd/E11882_01/appdev.112/e13995/oracle/jdbc/OracleDriver.html where the forms of getConnection are described.
I would like to convert from using a signature that takes the URL, user name, and password as separate parameters to using a signature that takes the URL, user name, and password all as part of a URL parameter.
While I was able to successfully connect to my database using the form getConnection(String URL, String, user, String password); I am not able to achieve the same when using getConnection(String URL).
Here are the code snippets, maybe someone can point out the reason why the second approach is not working?
approach 1 - working fine
String driver = "oracle.jdbc.driver.OracleDriver";
try {
          Class.forName(driver);
          } catch(java.lang.ClassNotFoundException e) {
          String connectionURL = "jdbc:oracle:thin:@localhost:1521:PMT";
          String pgUser = "\"James.Smith@000\"";
          String pgPwd = "\"js\"";
     try {
               Connection conn = DriverManager.getConnection(connectionURL, pgUser, pgPwd);
approach 2 - error: java.sql.SQLException: The Network Adapter could not establish the connection
String driver = "oracle.jdbc.driver.OracleDriver";
try {
          Class.forName(driver);
          } catch(java.lang.ClassNotFoundException e) {
String connectionURL = "jdbc:oracle:thin:\"James.Smith@000\"/\"js\"@localhost:1521:PMT";
     try {
               Connection conn = DriverManager.getConnection(connectionURL);
Thanks a lot in advance
Kind regards
Thomas

Let me get this clear.
You want a login dialog.
Some program calls the dialog and waits untile user respond
once the user press ok or cancel it reutrn the users input to the caller.
You can do this directly using JFrame
but you can do it wil JDialog if you use it as aModal dialog.
it will look like this
class LogInDialog extends JDialog implements ActionListener{
   String value;
   public LogInDialog(){
      setModel(true);
    // This is what you invoke
    public String loadDialog(){
        setVisible(true);
        return value;
    public void actionListener(..... e){
        if (e.getSource() == bCancel)
           value = null;
        else if (e.getSource() == bOk)
           value = //generate the string
        dispose();
}

Hacker changing URL string

Similar Messages

Maybe you are looking for