如果“function.mysql-connect”是我的网站搜索数据中显示人们试图破解哪些内容？
我在电子商务网站上记录了搜索词，并且术语
function.mysql connect
经常出现。我立即担心可能有某种自动机器人在寻找漏洞？也许是 SQL 注入？
有人可以解释一下人们正在尝试做什么吗？如果这确实是狡猾活动的标志，我如何检查自己是否受到保护？
预先非常感谢
I record the search terms in on my e-commerce site and I the term
function.mysql connect
appears frequently. Immediately it concerns me that there may be some kind of automated bot looking for holes? SQL injection perhaps?
Could some one please explain what people are trying to do, and if this is indeed a signature of dodgy activity how can I check that I am protected against it?
Many thanks in advance
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
搜索发起者很可能正在寻找显示为纯文本的动态页面。 IE。如果网络服务器配置错误并将 php 文件显示为纯文本。在这种情况下，mysql 数据库凭据很有可能被暴露。这是恶意用户/机器人搜索数据库密码的常见方式，这不是 SQL 注入。对于 SQL 注入，会有 SQL 查询的一部分。
Most likely the search initiator is looking for dynamic pages that are displaying as plain text. Ie. if a webserver is misconfigured and displaying php files as plain text. In this case, there is a good chance that the mysql database credentials are exposed. This is a common way for malicious users/bots to search for database passwords and this is not SQL injection. For SQL injection, there would be part of a SQL query.