Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Plans for Core_Events #5

Open
13 tasks
szepeviktor opened this issue Oct 14, 2017 · 0 comments
Open
13 tasks

Plans for Core_Events #5

szepeviktor opened this issue Oct 14, 2017 · 0 comments

Comments

@szepeviktor
Copy link
Owner

szepeviktor commented Oct 14, 2017

  • robots & errors in /wp-comments-post.php (as in block-bad-requests.inc)
  • non-attack 404:
    logsearch.sh -e wpf2b_404|sed -ne 's|.*wpf2b_404 (s:[0-9]\+:"\([^"]*\)";).*|\1|p'|grep -vx "/[a-z/-]\+/\|.*\.jpg"|sort
    • non-ascii post slugs
  • fake Googlebot, Referer: http://www.google.com
    grep -hi ' "[^"]*Googlebot[^"]*"$' /var/log/apache2/*access.log|grep -v "^66\.249\."
  • core: No filter for successful XMLRPC login in wp_authenticate()
  • write test.sh
  • robot requests not through /index.php (exclude: xmlrpc, trackback, see: wp_403())
  • append: http://plugins.svn.wordpress.org/block-bad-queries/trunk/block-bad-queries.php
  • option to immediately ban on non-WP scripts (.php$ .aspx?$)
  • new: invalid user during lost password
  • new: invalid "lost password" token
  • log xmlrpc? add_action( 'xmlrpc_call', function( $call ) { if ( 'pingback.ping' == $call ) {} } );
  • log proxy IP: HTTP_X_FORWARDED_FOR, HTTP_INCAP_CLIENT_IP, HTTP_CF_CONNECTING_IP backed by mod_remoteip
  • registration errors: the dirty way
    add_filter( 'login_errors', function ( $em ) { error_log( 'em:' . $em ); return $em; }, 0 );
@szepeviktor szepeviktor changed the title Plans for the MU plugin Plans for Core_Events Mar 30, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant