a new browser window / tab, this script takes over to display latest logging data. Requesting fresh data from the
JavaScriptScript file 'real_ping.js' , all new logging data will always been placed into <div id='realLogContainer' /> So, better not to press the 'Reload' button of your browser. The current <div /> might be already empty. . . .
. . .
the server. /admin/real_get.php This script delivers 'refresh rate' and latest 'logging data', requested from the
JavaScriptScript file 'real_ping.js'. Also performs the reset of the 'real_log' table in Sphiders database. Latest logging data is delivered by the /admin/messages.php script that, besides writing into the normal log file, feeds the table . . .
. . .
for media data that will not be indexed: - If inserted in documents like pdf, doc, ppt, etc. - If inserted in
JavaScript or applets and also direct applet implementations. - Image maps that are server-side or client-side included. 13.3 Search for media content The search mode is enabled by the checkbox 'Beside text results also show media results . . .
. . .
cause an XSS attack, shell execution, tag inclusion, SQL injections, directory traversals, XSRF attacks, or a
JavaScriptScript execution If activated, the corresponding search queries will be rejected. The first option is controlled by the file /include/common/black_uas.txt holding lists of user agents known to be evil. Here well known evil bot . . .
. . .
protections are implemented: - Prevent SQL-injections - Prevent XSS-attacks - Prevent Shell-executes - Suppress
JavaScriptScript executions - Suppress Tag inclusions - Prevent Directory Traversal attacks - Delete input if query contains any word of (editable) blacklist - Prevent buffer overflow errors. - Suppress
JavaScriptScript execution and tag . . .
. . .
As the protections against XSS attacks, Shell execution, Tag inclusions, as well as the suppression of
JavaScriptScript executions do avoid some words in the search query, a special Admin setting is used to activate this protection. The setting is to be found in section "Search Settings" and is called: Block all queries, which could cause . . .
. . .
Settings" and is called: Block all queries, which could cause an XSS attack, Shell execution, Tag inclusion, or a
JavaScriptScript execution 19.3 Admin backend protection against remote access In order to hedge the admin backend of Sphider-plus against use as directed, you may prevent usage of the admin backend for remote operation. This means: 'Lock . . .
. . .
could cause an XSS attack, shell execution, tag inclusion, - SQL injection, directory traversal, XSRF attack, or a
JavaScriptScript execution. - Attempts to flood the search form by too many queries per unit of time. - Blocked Internet traffic of IP's, which already caused intrusion attempts (IDS). The log file is available at the admin backend in menu . . .
. . .
part of the search form. Starting with version 3, the suggest framework was switched over from 'Prototype' to the
JavaScriptScript library 'jQuery'. Suggestions are presented for single word queries, as well as for phrases, and also for media search. The suggest framework is configurable in Admin backend. As part of the 'Settings' menu in section . . .
Sphider-plus