[pLog-svn] tangerine.limedaley.com 2008-06-08 19:02 Security Alerts (fwd)

[Jon Daley]

 	If you all haven't seen suhosin, it is pretty nifty.  It is 
enabled by default in either php5 or debian's php5.  It filters out lots 
of stuff.

---------- Forwarded message ----------
Date: Sun,  8 Jun 2008 19:02:08 -0400 (EDT)
From: Logcheck system user

Security Alerts
=-=-=-=-=-=-=-=
       12 tangerine suhosin: ALERT - script tried to increase memory_limit to 536870912 bytes which is above the allowed value (attacker 'REMOTE_ADDR not set', file '/home/libertynews/www/brandscapital/finder/Finder.php', line 678)
        1 tangerine suhosin: ALERT - ASCII-NUL chars not allowed within request variables - dropped variable 'action' (attacker '68.178.172.77', file '/home/lifetype/forums/viewtopic.php')
        1 tangerine suhosin: ALERT - ASCII-NUL chars not allowed within request variables - dropped variable 'action' (attacker '208.109.30.101', file '/home/lifetype/forums/viewtopic.php')
        1 tangerine suhosin: ALERT - ASCII-NUL chars not allowed within request variables - dropped variable 'action' (attacker '216.69.170.111', file '/home/lifetype/forums/viewtopic.php')
        1 tangerine suhosin: ALERT - ASCII-NUL chars not allowed within request variables - dropped variable 'action' (attacker '72.18.155.74', file '/home/lifetype/forums/viewtopic.php')
        1 tangerine suhosin: ALERT - ASCII-NUL chars not allowed within request variables - dropped variable 'action' (attacker '195.56.189.33', file '/home/lifetype/forums/viewtopic.php')
        1 tangerine suhosin: ALERT - ASCII-NUL chars not allowed within request variables - dropped variable 'action' (attacker '193.205.194.23', file '/home/lifetype/forums/viewtopic.php')
        1 tangerine suhosin: ALERT - ASCII-NUL chars not allowed within request variables - dropped variable 'action' (attacker '193.232.11.93', file '/home/lifetype/forums/viewtopic.php')
        1 tangerine suhosin: ALERT - ASCII-NUL chars not allowed within request variables - dropped variable 'action' (attacker '168.158.128.26', file '/home/lifetype/forums/viewtopic.php')