[blue]
I was viewing the top lists section, and found bvgsoft_s
at the top of the page. Out of interest, I looked at his
profile, and it displayed [b]32,798[/b] logins.
This is okay, but looking at his/her profile...
[/blue][code]
Registered: 2006-06-08
Latest login: 2006-06-08
[/code][blue]
This means this user was only active for one day.
Now for the question...[b]How can a user log in 32,000
times in a single day...?[/b] Is/Was this a bug of sorts..?
It doesnt seem possible within only 24 hrs..
This question is only being asked out of curiosity.
Anyone have ideas?
Thanks,
~mt2002[/blue]
Comments
: I was viewing the top lists section, and found bvgsoft_s
: at the top of the page. Out of interest, I looked at his
: profile, and it displayed [b]32,798[/b] logins.
:
: This is okay, but looking at his/her profile...
: [/blue][code]
: Registered: 2006-06-08
: Latest login: 2006-06-08
: [/code][blue]
: This means this user was only active for one day.
:
: Now for the question...[b]How can a user log in 32,000
: times in a single day...?[/b] Is/Was this a bug of sorts..?
: It doesnt seem possible within only 24 hrs..[/blue]
:
Oh, sure it is...you just hack up some script that calls our login page 32,000 times in quick succession. I can write you one in just a couple of minutes. Spread over 24 hours, 32,000 hits is only one request every 3 seconds or so, which wouldn't DoS the server.
If that's what was done though...well...what a loser. I'll leave it to Tore to poke further, but it was so long back I'm not certain we'd have the server logs any more...
Jonathan
###
for(74,117,115,116){$::a.=chr};(($_.='qwertyui')&&
(tr/yuiqwert/her anot/))for($::b);for($::c){$_.=$^X;
/(p.{2}l)/;$_=$1}$::b=~/(..)$/;print("$::a$::b $::c hack$1.");
I have changed his viewcounter back to 1 to make it more realistic.
Thanks for reporting!
[blue][italic][b]/WEBMASTER[/b][/italic][/blue]
Also, guess I have to include some abuse stopper in the login system.
[blue][italic][b]/WEBMASTER[/b][/italic][/blue]