1

I've noticed on the backend under recent and top search terms several strange searches.

'EKGQ') AND 4671=CAST((CHR(113)||CHR(116)||CHR(117)||CHR(97)||CHR(113))||(SELECT (CASE WHEN (4671=4671) THEN 1 ELSE 0 END))::tex

EKGQ%' AND (SELECT 4655 FROM(SELECT COUNT(*),CONCAT(0x7174756171,(SELECT (CASE WHEN (4655=4655) THEN 1 ELSE 0 END)),0x7169756471

EKGQ%' AND 4671=CAST((CHR(113)||CHR(116)||CHR(117)||CHR(97)||CHR(113))||(SELECT (CASE WHEN (4671=4671) THEN 1 ELSE 0 END))::text

EKGQ%' AND 6277=CONVERT(INT,(SELECT CHAR(113)+CHAR(116)+CHAR(117)+CHAR(97)+CHAR(113)+(SELECT (CASE WHEN (6277=6277) THEN CHAR(49

There are about 20 of those in different variations over the past few weeks, any ideas as to what they are/where they are coming from? They seem to return all products in my store.

1 Answer 1

2

These are tries to SQL-Inject your installation. I don't know whether there was a securite issue in the past, afaik there is no, so no need to worry about.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.