Karsten Bolding wrote:
> 
> I've looked into the problem and have found the following: from .bin
> log file from mysql. # at 2279334 #061014 16:52:09 server id 1
> end_log_pos 2279527 Query thread_id=84 exec_time=0 error_code=0 SET
> TIMESTAMP=1160837529; DELETE FROM recorded WHERE chanid = '1003' AND
> title = 'Dommedag nu - redux, fortsat' AND starttime =
> '2006-01-06T22:50:00';
> 
> many other similar deleted files.
> 
> from apache2/access.log 74.6.73.81 - - [14/Oct/2006:16:52:04 +0200]
> "GET /mythweb/tv/recorded?delete=yes&chanid=1003&starttime=1136584200
> HTTP/1.0" 302 27 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp;
> http://help.yahoo.com/help/us/ysearch/slurp)" ^^^^^^^^^^
> 
> + many other similar entrances - all from
> http://help.yahoo.com/help/us/ysearch/slurp
> 
> Notice the time when yahoo accessed my machine and when the file was
> deleted.
> 
> Now my question is - can it really be that a search robot is able
> delete my recordings?

This is a question better suited to the MythTV list, but in short the
answer is yes.  A search engine robot will normally try to follow all
links available on a page for indexing.  This means it would try to
follow the delete link on your page.

> If that is the case what can I do to prevent this happening in the
> future - I've now included a robots.txt - is that enough.

Short answer, secure that portion of the web server in some way.  You
could add a need for basic authentication before viewing the page or
even restrict the range of IPs that are allowed to view the page.

-- 
Jamin W. Collins



-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Mvpmc-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mvpmc-users
mvpmc wiki: http://mvpmc.wikispaces.com/

Reply via email to