protect.inc.php

Guess I am mostly just being paranoid. In my site stats, people landed my site twice from the keywords search "protect.inc.php’. It seems to me hacker was trying to find security flaw. Is this something I should concern about?

I tried searching the ’protect.inc.php’ file from my server via FTP, but don’t see it.

Thanks!

tgp

If I am right, there is no file named protect.inc.php in MODx... and if you searched and found nothing, nothing to worry about I guess.

As of 0.9.6, manager/includes/protect.inc.php is a file in MODx, but it is simply included, and I don’t understand how searching for it with keywords would land someone on your site. Second, they can search for security flaws, and if they find one, we’ll patch it, but I do not believe you have anything to worry about based on their search for this file name.

Here is the screen shot taken from my google analytics account.



I tried entering ’mysite.com/protect.inc.php’ and it brings me to the homepage, so there is nothing to worry I believe. The fact that hackers looking for this specific file means there is a potential security flaw that can be exploited correct? I am glad Modx doesn’t have security issue on this.

tgp

Quote from: chinesedream at Jul 16, 2007, 10:09 AM

The fact that hackers looking for this specific file means there is a potential security flaw that can be exploited correct?

No, not necessarily. Though it is good to be pro-active when seeing strange attempts on your site, perhaps they are looking for the existence of that file from another project (there are other php projects that have a file named protect.inc.php) to exploit, or they are searching for it in relation to MODx so they know not to attempt hacking on it; MODx has been secured via that file only since the release of version 0.9.6.

Quote from: ganeshXL at Jul 18, 2007, 11:16 AM

just FYI, I just stumbled upon a file that actually does:

require_once(’../../../../../includes/protect.inc.php’);

-> manager/media/browser/mcpuk/connectors/php/config.php line 23

And...