Does many but could also be your phone by default

K

KasumiOP•6/12/24, 2:34 PM

Because many isp's have their own DNS server to block illegal pages like bs.to etc

K

KasumiOP•6/12/24, 2:36 PM

in my country such things should be illegal, because the internet has to be free. Or so idk. Just heard from this law

KKasumi Does many but could also be your phone by default

R

RyanKnack•6/12/24, 10:45 PM

I've checked my DNS settings both on my phone and on my router itself. They were all set to automatic

R

RyanKnack•6/12/24, 10:45 PM

Unless if android does something in the background I'm not aware of

Original message was deleted

R

RyanKnack•6/12/24, 10:46 PM

And yeah I forced all my family to use 1.1.1.2 actually :lul:

R

RyanKnack•6/12/24, 10:46 PM

Just tweak the router and every new client connection gets the default DNS of 1.1.1.2 lol

C

CS176•6/13/24, 3:35 AM

Hey all, I just got a bunch of weird user creations on my PHP site. Here’s what my users table looks like

191 ';print(md5(31337));$a=' 2024-06-12 09:49:49
192 index.php/. 2024-06-12 09:49:49
193 ";print(md5(31337));$a=" 2024-06-12 09:49:49
194 ${@print(md5(31337))} 2024-06-12 09:49:49
195 ${@print(md5(31337))}\ 2024-06-12 09:49:50
196 '.print(md5(31337)).' 2024-06-12 09:49:50
197 eqID37ZX 2024-06-12 09:51:01
198 sample@email.tst' AND 238=68 AND 'l5vH'='l5vH 2024-06-12 09:51:01
199 sample@email.tst" AND 238=68 AND "GDeG"="GDeG 2024-06-12 09:51:02
200 -1 OR 2+22-22-1=0+0+0+1 2024-06-12 09:51:02
201 -1 OR 3+22-22-1=0+0+0+1 2024-06-12 09:51:03
202 sample@email.tst'|' 2024-06-12 09:57:43
219 sample@email.tst'' 2024-06-12 09:57:43

C

CS176•6/13/24, 3:36 AM

I’m not sure if any of my data has been accessed or changed in any way. Still looking through my other tables, but how can I check if any of these SQL injection attacks worked?

A

az•6/13/24, 3:47 AM

if youre looking at that it probably means it didnt work, how are you sanitising your inputs ?

C

CS176•6/13/24, 4:05 AM

Just using a prepared statement to add it to the users table

T

tesla_man•6/13/24, 4:05 AM

C

CS176•6/13/24, 4:05 AM

Hashed passwords using the password_hash() function that php has

C

CS176•6/13/24, 4:05 AM

@az

CCS176 Just using a prepared statement to add it to the users table

I

Isaac McFadyen•6/13/24, 4:30 AM

You should be fine if you're properly using prepared statements.

I

Isaac McFadyen•6/13/24, 4:30 AM

Assuming that those random strings are supposed to be user emails, I'd also try to validate that they're valid emails before inserting into the DB.

RRyanKnack I've checked my DNS settings both on my phone and on my router itself. They were...

K

KasumiOP•6/13/24, 5:12 AM

Strange ISP you have

R

RyanKnack•6/13/24, 5:28 AM

¯\_(ツ)_/¯

K

KasumiOP•6/13/24, 6:46 AM

Does it make sense to cache pages like this https://akami-solutions.cc/akami-cgi/icon/envelope ? Because CloudFlare doesnt think so :0010shiba_think:

K

KasumiOP•6/13/24, 8:01 AM

me: cloudflare.com

My Fingers: cloudfl.re

KKasumi me: cloudflare.com My Fingers: cloudfl.re

H

Hello, I’m Allie!•6/13/24, 8:15 AM

:lul:s in https://cfl.re

T

TothW•6/13/24, 8:25 AM

Hi everyone. Does anyone have any idea why cloudflare ignored my WAF rules? This is the request and these are my rules:

T

TothW•6/13/24, 8:25 AM

based on the rules shouldn't the request be blocked?

T

TothW•6/13/24, 8:25 AM

it was a request with HTTP1.0

TTothW Hi everyone. Does anyone have any idea why cloudflare ignored my WAF rules? This...

H

Hello, I’m Allie!•6/13/24, 8:49 AM

It's because you have Bot Fight Mode enabled. Bot Fight Mode bypasses your rules

HHello, I’m Allie!It's because you have Bot Fight Mode enabled. Bot Fight Mode bypasses your rules

T

TothW•6/13/24, 8:51 AM

yes, but based on their traffic sequence shouldn't after bot fight mode pass through WAF? At least this is what I understand from this top to down sequence

K

KasumiOP•6/13/24, 8:59 AM

No wonder why CloudFlare Dashboard has everytime loading issues. Its made with React I guess :NayaDerp:

TTothW yes, but based on their traffic sequence shouldn't after bot fight mode pass thr...

H

Hello, I’m Allie!•6/13/24, 9:05 AM

Not quite. If you use SuperBotFightMode, then yes, but regular BFM overrides all your rules

H

Hello, I’m Allie!•6/13/24, 9:05 AM

It's generally a heavy hammer, so we recommend only using it when absolutely necessary, or otherwise upgrading to get SBFM

HHello, I’m Allie!It's generally a heavy hammer, so we recommend only using it when absolutely nec...

T

TothW•6/13/24, 9:14 AM

okay, I understand about BFM and SBFM but what do you mean by absolutely necessary? When is it necessary to activate BFM? (I am new to managing DNSes)

J

JellyMuffin•6/13/24, 9:14 AM

How can I configure Cloudflare to allow my IP address to bypass a 301 redirect set by Page Rules and load files directly from the hosting server?

Yesterday, I successfully configured the redirect rule setting to allow my IP address to bypass the 301 redirect. However, I had to delete all settings this morning and start fresh. I can't remember how I did it yesterday. How can I make my IP address bypass the 301 redirect instructions set under page rules?

Thanks.

TTothW okay, I understand about BFM and SBFM but what do you mean by absolutely necessa...

H

Hello, I’m Allie!•6/13/24, 9:16 AM

Basically, only use BFM when you are currently under attack by a lot of bots. It isn't something I would recommend having on all the time

JJellyMuffin How can I configure Cloudflare to allow my IP address to bypass a 301 redirect s...

H

Hello, I’m Allie!•6/13/24, 9:17 AM

Add an