SQL Injection Detection


 
Thread Tools Search this Thread
Top Forums Shell Programming and Scripting SQL Injection Detection
# 8  
Old 06-18-2014
why this line is included:

210.186.182.212 - - [15/Jun/2014:15:55:30 +0300] "GET /feedLive.php HTTP/1.0" 200 3707 "http://forexmt4ea.com/profit-on-drop-script-mt4/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_5) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/6.1.3 Safari/537.75.14"



only a single word "drop" appears in the above.

also the lines that contain "drop sdaadsa DROpddd" should not be listed.
# 9  
Old 06-18-2014
Sure? Look into Macintosh ...

And, I'd propose you play around with the proposals and adapt them to your satisfaction.
# 10  
Old 06-18-2014
Smilie thanks guys!!!!

---------- Post updated at 02:56 PM ---------- Previous update was at 02:13 PM ----------

One last thing. I am tring to use only last 1000 lines of the log file as an input in this way:

tail -1000 /var/log/httpd/mysite-access_log.log |awk 'BEGIN{IGNORECASE=1}NR==FNR {SRCSTR=SRCSTR DELIM $0; DELIM="|"; next} gsub (SRCSTR,"&")>=2' patternfile

what am I doing wrong?
# 11  
Old 06-18-2014
Codetags! Please

Try :

Code:
$ tail -1000 /var/log/httpd/mysite-access_log.log | awk 'BEGIN{IGNORECASE=1}NR==FNR {SRCSTR=SRCSTR DELIM $0; DELIM="|"; next} gsub (SRCSTR,"&")>=2' patternfile -

# 12  
Old 06-18-2014
Thanks once again!
# 13  
Old 06-18-2014
Thanks! it worked!
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question