+- MyBB Community Forums (https://community.mybb.com)
+-- Forum: Community Archive (https://community.mybb.com/forum-106.html)
+--- Forum: Archived Forums (https://community.mybb.com/forum-143.html)
+---- Forum: Archived Development and Support (https://community.mybb.com/forum-155.html)
+----- Forum: MyBB 1.6 (https://community.mybb.com/forum-138.html)
+------ Forum: 1.6 Security Management and Support (https://community.mybb.com/forum-153.html)
+------ Thread: Unusual page activity. (/thread-153364.html)
Unusual page activity. - Vidiot_X - 2014-05-01
Hi,
I have been seeing a lot of activity like this in "Who's online" all listed as "Unknown Location"
misc.php?page=main_index/RK=0/RS=yaQOxH8tjAV9LmSi8JkSQqOiaAs-
misc.php?page=main_index/RK=0/RS=Bbx5Hxof5EA6NH1rI1ZUYhy.Bdw-
misc.php?page=main_index/RK=0/RS=ba67JAWxEeG8yeOS16eTzQ4Z4F0
misc.php?page=main_index/RK=0/RS=nMtkPfXxEmKExXf9w9CGEZasMoI-
misc.php?page=main_index/RK=0/RS=gMSqr1uMkO1vzl0eLeRWYzQv8kc-
Any Idea what this is about? Always seem to be different when I notice them and more frequent now. I never seen so many "Unknown Location" page requests.
- Rich -
Hi,
This is related to the "page manager plugin" and the "main_index" part is a page manager page, like this:
http://www.phoenixusc.com/board/misc.php?page=main_index
What I am trying to understand is what the "/RK=0/RS=ba67JAWxEeG8yeOS16eTzQ4Z4F0" (for example) is. Putting it all together "http://www.phoenixusc.com/board/misc.php?page=main_index/RK=0/RS=ba67JAWxEeG8yeOS16eTzQ4Z4F0" will show a blank page that has a "1" as the source code for that page.
I just have the feeling somethings up. Let me know if you have any ideas.
- Rich -
Hi,
A Google search of "/RK=0/RS=" shows I am not the only one getting hit with the above. So far it looks like no one knows what this is.
- Rich -
RE: Unusual page activity. - Destroy666 - 2014-05-01
Few results after googling 'RK=0':
http://stackoverflow.com/questions/22761208/htaccess-rewrite-rule-remove-everything-after-rk-0-rs (fix)
http://rankexploits.com/musings/2014/it-q-rk0rsfoo-in-uri/ (discussion about what the bots are up to)
RE: Unusual page activity. - Vidiot_X - 2014-05-01
Hi,
Ya, I came across those. Lots of rumor but no facts yet.
- Rich -