Is NukeSentinel interpreting rnxhr.php as a script attempt?

Posted: Tue Feb 07, 2012 11:08 pm

Created By: NukeSentinel(tm) 2.6.03
Date & Time: 2012-02-07 22:15:38 CST GMT -0600
Blocked IP: 50.29.129.15
User ID: Anonymous (1)
Reason: Abuse-Script
--------------------
Referer: on site
User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.7 (KHTML, like Gecko) Chrome/16.0.912.77 Safari/535.7
HTTP Host: www.clanfga.com
Script Name: /rnxhr.php
Query String: name=Your_Account&file=public/userAvailability&ya_username=Duffman(StrayBullet)
Get String: name=Your_Account&file=public/userAvailability&ya_username=Duffman(StrayBullet)
Post String: Not Available
Forwarded For: none
Client IP: none
Remote Address:
Remote Port: 1559
Request Method: GET

registered · Site Admin Joined: Jun 04, 2004 Posts: 6437

It isn't rnxhr, per se, but the username with parentheses. If ( is a valid character for a user name, we need to figure out how to allow that in NukeSentinel. If not, it should be blocked in RNYA before checking availability.

Posted: Wed Feb 08, 2012 1:26 pm

Ah, OK, thanks. I had turned off the blocker because so many were getting block trying to register.