php suhosin 警报

Question

我用的是suhosin。我收到以下警报。

ALERT-SIMULATION - tried to register forbidden variable '_REQUEST' through GET variables (attacker<br/>
ALERT-SIMULATION - tried to register forbidden variable '_REQUEST[option]' through GET variables (attacker<br/>
ALERT-SIMULATION - tried to register forbidden variable '_REQUEST[Itemid]' through GET variables (attacker<br/>
ALERT-SIMULATION - tried to register forbidden variable 'GLOBALS' through GET variables (attacker

他们是真正的攻击者吗？如果没有，如何设置 suhosin 配置以忽略这些警报？

Answer 1

这些不一定是“攻击”，而是测试/刺激您的网站以确定他们(潜在的攻击者)是否可以通过启用 register_globals 注入(inject)代码。

用于产生这些错误的 uri 如下所示

http://www.example.com/index.php?_REQUEST=someValue
http://www.example.com/index.php?_REQUEST[option]=someValue
http://www.example.com/index.php?_REQUEST[ItemId]=someValue
http://www.example.com/index.php?GLOBALS=someValue

您是否将 register_globals 设置为 on？

该 IP 跟踪到 ATL:http://www.ip-adress.com/ip_tracer/