Posted by FFMG on 10/24/32 11:54

Jim Higson wrote:
> FFMG wrote:
>
> > Someone inserted a comment on my site, (I removed the page so I cannot
> > really give you a link)
> >
> > The bad part is.
> >
> > ...
> > <FONT face=&#21326;&#25991;&#34892;&#26999;
> >
> color=#ff0000>&#36827;&#20837;&#20845;&#21512;&#24425;&#22235;&#32918;&#21333;&#21452;&#23614;&#25968;&#22823;&#20844;&#24320;</FONT>
> > ...
> >
> > And it looks ugly in FF1.5 but it brings the page down in IE.
> >
> > So I guess the guy is trying to do something nasty, but what can it be?
> >
> > Any ideas?
>
> You first stage in working out should be to decode all those entity
> references. Probably they include some javascript or something like that.

Yes, I tried but all I get is garbage really.
I don't those characters actually stand for anything.

But it does not look like a mistake to me.
Especially given what it does to the site.

Chinese characters maybe?

F

• Next in forum: Re: Html injection/hacking, but what does it do? Any advice?
• Prev in forum: Re: Html injection/hacking, but what does it do? Any advice?
• Thread view: Re: Html injection/hacking, but what does it do? Any advice?

[Reply to this message]