https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40954

Marcel de Rooy <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[email protected]

--- Comment #3 from Marcel de Rooy <[email protected]> ---
Saw a few coming by again. Tracing them down to 'hacking stuff' like:

177.135.23.55 - - [29/Oct/2025:17:19:52 +0000] "POST
/admin/categories.php/login.php?cPath=&action=new_product_preview HTTP/1.1" 500
21 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko)
Chrome/124.0 Safari/537.36" "library.rijksmuseum.nl:443" "-"

177.135.23.55 - - [29/Oct/2025:17:19:52 +0000] "GET /includes/configure.php
HTTP/1.1" 404 28935 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36
(KHTML, like Gecko) Chrome/124.0 Safari/537.36" "library.rijksmuseum.nl:443"
"-"

177.135.23.55 - - [29/Oct/2025:17:19:53 +0000] "POST
/admin/banner_manager.php/login.php?action=insert HTTP/1.1" 500 21 "-"
"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko)
Chrome/124.0 Safari/537.36" "library.rijksmuseum.nl:443" "-"

177.135.23.55 - - [29/Oct/2025:17:19:53 +0000] "POST
/cgi-bin/admin/categories.php/login.php?cPath=&action=new_product_preview
HTTP/1.1" 404 28935 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36
(KHTML, like Gecko) Chrome/124.0 Safari/537.36" "library.rijksmuseum.nl:443"
"-"

Not sure why the first and third url results in 500 21? But the fourth url in
404 28935, coming from errors/404.pl.
How does an unexisting php trigger a 500 ?

Also I am wondering if we should pass such Apache errors to Plack? It takes
just a few hundred bytes to say Not found in about 50 ms with a trivial
ErrorDocument but it takes 40K and 500ms to go to errors/404 or 500.pl in
Plack.
Shouldnt we reserve the Plack responses for Plack requests (so real perl ones)?

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to