We launched new forums in March 2019—join us there. In a hurry for help with your website? Get Help Now!
    • 3677
    • 130 Posts
    I’ve seen a few off entries in Google Analytics where the referring keyword is a strange modx error string.

    Examples:

    • fatal error: class ’xpdodriver_’ not found in core/xpdo/xpdo.class.php on line 1456
    • modx.class.php on line 349 fatal error: class ’xpdodriver_’ not found in
    • #2 is not an array in /modx.class.php on line 349

    Even odder, all of these are showing up for one particular site only (A US oriented site for Albuquerque, NM) and the origin city is unusual (Barcelona, Moscow, Dublin).

    Is this someone trying to break things intentionally you think?

    -Brian
      • 15083
      • 697 Posts
      GA is a bad place to identify hack treats.
      Look at your log files. Determine the following:

      Is the client GET or POST to your page
      What page are they posting to, and does this page pull any data from the DB (SQL injection), or show data back to the user(XSS).
      Look at what the client is POSTING, look for input that would not be generated by your site, ie: &city= ’-- DELETE * FROM users’;
      Ok simple example but you get the idea smiley