>>The frequency of the occurrences, and the constantly changing URL and client IP, suggests a bot.
Exact, and also the fact that the user agent is always the same: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; ..NET CLR 1.1.4322) The fact that the IP address changes, suggests it is some kind of worms or virus acting from individual PC it has infected. I have added some code in my templates that checks for url parameters that contains either the string "http://";, (link injection) or "user" (SQL injection) and if yes, the IP address is instantly banned for a few days. -- _______________________________________ REUSE CODE! Use custom tags; See http://www.contentbox.com/claude/customtags/tagstore.cfm (Please send any spam to this address: [EMAIL PROTECTED]) Thanks. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;192386516;25150098;k Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:304000 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
