Strange happenings on website

Discussion in 'Site & Server Administration' started by ian_ok, Jan 11, 2005.

  1. #1
    Hi all,

    I've recived 3 emails from my website...that's all fine...apart from it had no subject and the message was just the text that i add to the message so i know what is what ie.

    name:
    email:
    message:

    My log doesn't show any use of the POST command yet it does so the mail sent PHP file was accessed.

    How?

    A part of my log:

    2005-01-10 21:40:29 W3SVC1 10.216.12.229 GET /MYMAILSENTFILE.php - 80 VHOSTS2\domain635401 213.137.0.87 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322) - - 200 0 0 7011 393 656

    Can you help?

    Ian
     
    ian_ok, Jan 11, 2005 IP
  2. J.D.

    J.D. Peon

    Messages:
    1,198
    Likes Received:
    65
    Best Answers:
    0
    Trophy Points:
    0
    #2
    If you log bytes received (%I), you might be able to see if there was something in that request (keep in mind, %I includes HTTP header size). Another possibility is to check your SMTP logs. Depending on how much you log, you might be able to tell what is going on.

    It could be that somebody is poking your site or just that somebody simply pressed/clicked your Submit button/link, in case if you don't check that all fields are filled out properly.

    J.D.
     
    J.D., Jan 11, 2005 IP
  3. J.D.

    J.D. Peon

    Messages:
    1,198
    Likes Received:
    65
    Best Answers:
    0
    Trophy Points:
    0
    #3
    I just realized that it's IIS log (php threw me off). Same applies, though - check if your cs-bytes is logged and how much is it for these requests.

    J.D.
     
    J.D., Jan 11, 2005 IP
  4. ian_ok

    ian_ok Peon

    Messages:
    551
    Likes Received:
    11
    Best Answers:
    0
    Trophy Points:
    0
    #4
    If they just hit send...it does come to me. BUT it would have a subject line, the 3 emails didn't.

    The log show is the only log I can get...what is cs-bytes?

    Ian
     
    ian_ok, Jan 11, 2005 IP