Why did this trip?

registered · Posted: Wed Jul 30, 2008 9:53 am

Any ideas on why this tripped NS?

Code:




Date &amp; Time: 2008-07-29 12:43:53 CDT GMT -0500


Blocked IP: x.x.x.x


User ID: xxxxxx (2011)


Reason: Abuse-Script


--------------------


Referer: on site


User Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; de; rv:1.8.0.7) Gecko/20060909 Firefox/1.5.0.7


HTTP Host: xxx.com


Script Name: /modules.php


Query String: name=GCalendar&file=submit&op=submit


Get String: name=GCalendar&file=submit&op=submit


Post String: title=PRIMITIVE&location=Komet, Hamburg, GER&m=8&d=1&y=2008&notime=0&sh=10&sm=0&smer=1&eh=5&em=0&emer=1&cat=6&description2=&description=<strong>PRIMITIVE</strong><br />


<br />


Surf / Classics / Dark Wave Blues / Deathrock<br />


Glamrock / Eighties / Stoner / Garage Punk<br />


<br />


Herr Jahn legt auf.<br />


Special Guest: Der Professor<br />


<br />


Freitag, 01. August 2008<br />


ab 22:00h<br />


Eintriitt frei<br />


<br />


<strong>Komet</strong><br />


<a target="_blank" href="http://www.komet-st-pauli.de/index.php">www.komet-st-pauli.de/index.php</a><br />


Erichstrasse 11<br />


St.Pauli <br />


Hamburg / Germany<br />


<br />


<img border="0" alt="" src="http://www.arnejahn.net/temp/august08_net.jpg" />&repeat=0&interval=1&noend=1&monthlyby=0&rsvp=off&eventId=new&ok=Submit Event


Forwarded For: none


Client IP: none


Remote Address: x.x.x.x


Remote Port: 2101


Request Method: POST

registered · Posted: Thu Jul 31, 2008 11:31 pm

If were a betting man, and I think I might be, I would say it's the post string:

Code:

Post String: title=PRIMITIVE&location=Komet, Hamburg, GER&m=8&d=1&y=2008&notime=0&sh=10&sm=0&smer=1&eh=5&em=0&emer=1&cat=6&description2=&description=<strong>PRIMITIVE</strong><br />


<br />


Surf / Classics / Dark Wave Blues / Deathrock<br />


Glamrock / Eighties / Stoner / Garage Punk<br />


<br />


Herr Jahn legt auf.<br />


Special Guest: Der Professor<br />


<br />


Freitag, 01. August 2008<br />


ab 22:00h<br />


Eintriitt frei<br />


<br />


<strong>Komet</strong><br />


<a target="_blank" href="http://www.komet-st-pauli.de/index.php">www.komet-st-pauli.de/index.php</a><br />


Erichstrasse 11<br />


St.Pauli <br />


Hamburg / Germany<br />


<br />


<img border="0" alt="" src="http://www.arnejahn.net/temp/august08_net.jpg" />&repeat=0&interval=1&noend=1&monthlyby=0&rsvp=off&eventId=new&ok=Submit Event

Is this a user submission or an admin submission in the module?

Posted: Thu Jul 31, 2008 11:33 pm

User submission.

Posted: Wed Aug 06, 2008 7:18 pm

What's wrong with it?