Re: [suse-security] RE: strange Apache Log entries

suse@karsites.net schrieb:

I've just noticed the following in my apache logs:

207.180.26.146 - - [21/Jul/2004:20:57:28 +0000] "GET / HTTP/1.0" 200 5480

So I guess that the strange entries below are just returning the contents of my home page.

Correct. That seems to be due to a bug in mod_php - or in Apache, leading to display the index.php for any unknown request method. See <2m5fheFg1v3hU1@uni-berlin.de> and followups in de.comp.security.misc (if you're able to read and understand German) or try http://bugs.php.net/bug.php?id=19113 instead. -thh