Someone appears to be running a PHP script called "test.php" that is
clogging the TiddlyTools server with hundreds of thousands of "404"
errors, while apparently trying to retrieve images files that don't
exist.

Here's the summary of 404 errors from just yesterday...

29581   /images/did_100059.gif
28913   /images/letter A.jpg
22899   /images/did_100065.gif
22793   /images/p_109.jpg
16528   /images/letter O.jpg
15214   /images/letter P.jpg
10964   /images/bid_65.jpg
8678    /images/letter N.jpg
6861            /images/bid_79.jpg
6539            /images/did_100072.gif

This has been going on for at least a few days, if not a week or
more.  I had hoped it was just some stuck runaway process that would
be stopped eventually by an admin, but it seems to be getting even
worse!

Today's bombardment started with this logfile entry:
------------------
123.204.119.64 - - [25/Nov/2008:02:47:18 -0800] "GET /images/
did_100088.gif HTTP/1.1" 404 583 "http://localhost/test.php"; "Mozilla/
5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/525.19 (KHTML,
like Gecko) Chrome/0.3.154.9 Safari/525.19"
------------------
and has thus far seen more HUNDREDS OF THOUSANDS of errors being
generated extremely rapidly (as many as 10-12 every *second*).

Note that the referring URL appears to be obfuscated (i.e.,
"...localhost... "), and says it's coming from "test.php"... which
seems a bit odd, unless perhaps it is some sort of special PHP-
generated TiddlyWiki document.

Even so, I suspect that the cause isn't intentional.  In fact, it
might be due to an errant installation of
   http://www.TiddlyTools.com/#ImagePathPlugin
which automatically attempts to look in 'fallback' locations for
missing images, which is very convenient when moving lots of image
directories around.

However, it is also *very* important to note that, when installing
this plugin YOU SHOULD NOT COPY THE PLUGIN CONFIGURATION TIDDLER
(called [[ImagePathList]]... and yes, I *do* mean to shout that!).
This configuration tiddler contains explict references to the "images"
directory on TiddlyTools.com.  As a result, any missing images files
on your local system will automatically trigger attempts to find them
on MY server!

This goes for everyone who is using TiddlyTools' ImagePathPlugin:

Please IMMEDIATELY check your copy of [[ImagePathList]] and replace
all references to TiddlyTools.com in that tiddler with some other URLs
where *your* images might actually be located.

Sorry to have to make this a public airing, but I can see no other way
to try and get this unfortunate server assault to stop...

Much thanks,
-e
Eric Shulman
TiddlyTools / ELS Design Studios
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"TiddlyWiki" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/TiddlyWiki?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to