Not Solved Mybb security issue!
#4
Not Solved
This user has been denied support. This user has been denied support.
(2019-01-30, 02:57 PM)mhh_rabih Wrote: Also I would like to ask about task.php 
what is this file used for and is it normal for it to be accessed by forum visitors directly (I see it in access.log).

It's normal, it's how PHP task systems work in lieu of a real cron functionality. Tasks are run by piggy-backing on user visit requests. If nobody visits your site (or you remove task.php from the user templates), tasks will not run.


(2019-01-30, 06:50 PM)mhh_rabih Wrote: I disabled/uninstall this plugin but no change!

URI /xmlhttp.php?action=unreadPosts_getUnreads&fid0

Still under attack!

Best regards.

You can't stop people from sending requests to your webserver.

If you don't like it you have to start banning IP (on firewall or webserver level, not just in the admin cp).
Reply


Messages In This Thread
Mybb security issue! - by mhh_rabih - 2019-01-30, 02:57 PM
RE: Mybb security issue! - by WallBB - 2019-01-30, 04:43 PM
RE: Mybb security issue! - by mhh_rabih - 2019-01-30, 06:50 PM
RE: Mybb security issue! - by frostschutz - 2019-01-30, 08:14 PM

Forum Jump:


Users browsing this thread: 1 Guest(s)