In a PHP+Mysql web game I have a form that saves the name of the player.
A week ago I’ve noticed that some stranges names have appeared in the beta domain (I have a main domain where the people plays and a “beta domain” that I use for making tests)
The names:
-
Ans:wslite
-
javascript:alert(wslite)
-
../../../../../wslite/../../../../../boot.ini.htm
-
<wslite> -
Ans:wslite=true
I’ve googled wslite and seems that is like a …plugin for groovy? It have any sense? What could be these codes and why are inserted in the application?
There’s probably some exploit in that software,whatever is it. And some “hackers” are trying to use it. I’d suggest you to block them and try to find all exploits in your server/software