Mystery infestation strikes Linux/Apache Web sites
Posted by: Anonymous
[ip: 193.254.61.192]
on January 26, 2008 11:27 AM
Stop that regexp stupidity. The cPanel example was meant as a quick check, not a perfect scan. And FWIW, [a-z]{5} will match exactly 5 characters, period. It will also match abcdefghktrj.js because it matches against the last 5 chars before .js, not because [a-z]{5} matches 5 or more chars. To get exact matches you'd have to add a ^ in front of the regexp, but then you'd have to match against the file name only; which is not practical since the input is from tcpdump.
Mystery infestation strikes Linux/Apache Web sites
Posted by: Anonymous [ip: 193.254.61.192] on January 26, 2008 11:27 AM#