Geek Answers Handbook

Access denied: my last name reads as php command

So, a few months ago I had such a problem when, when I tried to access some sites, I would accidentally get a page with access denied. At first, I did not think very much about this and continued my life. Move forward. I tried to sign a contract with the Madness march and was blocked. I cannot register on Kohls sites or other online stores. I can't get greyhounds or amtrek tickets. I can’t access my bank account. Essentially, this is getting a little more uncomfortable.

Having tried random things, I tried to call my surname (Fread) in a different way. Instead, I put Freya, with no “d” at the end. Magically, everything will work again. After talking with friends, they helped me troubleshoot, and we found out that Fread is a php command fread, and we realized that if we typed other php commands, i.e. fwrite, we will also get a page with access denied.

The problem is solved, except in reality. I do not know how to fix this problem. I don’t even know who to talk to or contact the numerous websites that block me. My bank has been working on this issue for 2 months and has not updated me after 2 weeks on what they are doing to solve the problem.

Unfortunately, for me I can’t use my credit card with the wrong last name and still can’t access my bank account, because fread is part of my username. I would appreciate any feedback that would help me regain the opportunity to use my last name on these websites again!

Who should I contact? How to get people to care enough to fix it? What for? Thoughts to help?

, , , -, . - footlocker . , , Fread submit. ! . Fwrite submit. ! . , php. , .

, !

*****: IP-, , , , . .

+4
3

: , .

, , , -. IRS, , Amtrak, Greyhound, Footlocker , , . ...

!

, - . POST "Test event, " 403. , , , POST .

, , . , ( ) "fread" . , 403 .

(XSS)

- , . XSS. , - - , .

, - ( XSS) . , . , , . , "", , , 403.

ModSecurity

, ModSecurity, Apache -, ( ) POST- XSS. , POST, , , ( ), .

ModSecurity 2.9.1 9 2016 , , , , . , , , Amtrak/Greyhound/Footlocker , .

:

: 90% , ModSecurity, , , . GitHub .

: - . , , , / ModSecurity . , , .

!

+3

, , , , . , , , . , ...

0

, .. , ..

( -, ..), , ,

Frad ( )

Fred ( - )

F r e a d ( )

_Fread ( )

Ｆread ( )

, .

, Fread , PHP. , .

The good news is that modern websites rarely have such problems, I believe that websites with these problems will be updated in the near future.

0
source

More articles:


All Articles