Hello everyone!

I feel someone is trying to hack my site or just be annoying (because this only happens when foreign and/or porno sites submit to my search engine) but they submit a link and somehow the script lets them go past without an e-mail address, name (even though they are required) and then doesn't assign the link an id, date, hits, rates, new, popular, or recievemail. It just leaves the fields blank and makes me have go manuel insert the above items in validate.db and reset the linksid.txt which can get really really annoying after doing it every other day. I've heard CGI is one of the most insecure codings on the web, is this true? How can Links let them get past without filling in the required fields?

I had reported the problem before (http://www.gossamer-threads.com/...=25&Old=allposts) and I tried the stuff that Alex gave me but it didn't work. I also installed the ban certain URLs mod that is in the Resource Center but that didn't work either. It's like their browsers just ignore it and Links let them right by.

Thanks for any help you can give me! God bless!


<><-----------------><>
Daniel
AKA Dan the Great
<><-----------------><>

Did you add the hidden fields as Eliot (not Alex) suggested? What's the URL to your site?

Martin Webster
--
Cebidae's UK Internet Resource
http://www.cebidae.co.uk/

Wow! Is this a case where someone can use their own CGI to access someone else's validate.db etc! I'm not clear on the protection provided by file permission settings but this does give me the impression that someone is accessing your validate.db with their own version of 'Links'.

Martin... is it possible to do this? I'm on holiday in California at the mo and using my Sisters Computer so I don't have my usual facilities. If I did I could check this out using my multiple ISP's.

Daniel... If you are being hacked in this way then as I see it you need to change your /data directory location and of course, all references to it in links.cfg. This may stop whoever but in the long run they may get your links.cfg and start over.

George E.D. Burville
Ed: www.appbe.com

Hello everyone,

Sorry I did not reply sooner but I was on vacation in Colorado.

Yes, I installed the hidden fields as Alex suggested but it did not work.

My URL is http://www.christian-search.net and http://www.christian-search.net/cgi-bin/add.cgi for the add form.

Thanks and God bless!

<><-----------------><>
Daniel
AKA Dan the Great
<><-----------------><>

My name is NOT Alex...it is Eliot...look at the Thread more carefully!



Regards,

E l i o t

Very sorry, the hidden fields that Eliot suggested. God bless!


<><-----------------><>
Daniel
AKA Dan the Great
<><-----------------><>

Although I am not an expert, I have been annoyed by (repeated) multiple entries and more SPAM.
Obviously these entries were entered by robots.
I installed add-confirm and I am now completely free from robots. (Knock on wood).
I wouldn't be surprised if your unwanted visitor is also a robot. So: install add-confirm an see if it stops!

René Hasekamp
Find my Portal (Links 2.0) on
http://www.hasekamp.net/links/pages/