MyBB Community Forums

Full Version: Unusual page activity.
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Hi,

I have been seeing a lot of activity like this in "Who's online" all listed as "Unknown Location"

misc.php?page=main_index/RK=0/RS=yaQOxH8tjAV9LmSi8JkSQqOiaAs-
misc.php?page=main_index/RK=0/RS=Bbx5Hxof5EA6NH1rI1ZUYhy.Bdw-
misc.php?page=main_index/RK=0/RS=ba67JAWxEeG8yeOS16eTzQ4Z4F0
misc.php?page=main_index/RK=0/RS=nMtkPfXxEmKExXf9w9CGEZasMoI-
misc.php?page=main_index/RK=0/RS=gMSqr1uMkO1vzl0eLeRWYzQv8kc-

Any Idea what this is about? Always seem to be different when I notice them and more frequent now. I never seen so many "Unknown Location" page requests.

- Rich -

Hi,

This is related to the "page manager plugin" and the "main_index" part is a page manager page, like this:
http://www.phoenixusc.com/board/misc.php...main_index

What I am trying to understand is what the "/RK=0/RS=ba67JAWxEeG8yeOS16eTzQ4Z4F0" (for example) is. Putting it all together "http://www.phoenixusc.com/board/misc.php?page=main_index/RK=0/RS=ba67JAWxEeG8yeOS16eTzQ4Z4F0" will show a blank page that has a "1" as the source code for that page.

I just have the feeling somethings up. Let me know if you have any ideas.

- Rich -

Hi,

A Google search of "/RK=0/RS=" shows I am not the only one getting hit with the above. So far it looks like no one knows what this is.

- Rich -
Few results after googling 'RK=0':
http://stackoverflow.com/questions/22761...er-rk-0-rs (fix)
http://rankexploits.com/musings/2014/it-...oo-in-uri/ (discussion about what the bots are up to)
Hi,

Ya, I came across those. Lots of rumor but no facts yet. Wink

- Rich -