getpage.php
Menu getpage.php
 

getpage.php

The entry for getpage.php is getting reported in my Google Analytics reports. This is strange as the page requested does not exist or even the directory that it is looked for. It will return a 404 and not any useful information, if that was why the "Probe" was made.

" Returns the page geometry associated with the Imagick object in an associative array with the keys "width", "height", "x", and "y", throwing ImagickException on error. "

Who are ImageMagick

" ImageMagick is a software suite to create, edit, and compose bitmap images. It can read, convert and write images in a variety of formats (over 100) including DPX, EXR, GIF, JPEG, JPEG-2000, PDF, PhotoCD, PNG, Postscript, SVG, and TIFF. "

I am not sure what the probe has with respect to my website.

The Google Analytics log entry:

/data/getpage.php?reportkey=04aac9ecb00cd1ebb52d927261cfe8e1&contenttype=text/html

Possible probe for vulnerability

Over the years running a website I have seen some pretty bizarre entries in the server logs. Many of the entries can only be explained by "script kiddies" trying to find a weakness in my website.

A popular MO is that a particular php script or proceedure is looked for in the regular locations on your server. If the probe returns other than a 404 error the person making the probe knows that the file that they are requesting exists on your server and it is worthwhile trying to "exploit" it. Often even if the actual PHP (or other vulnerable file) is not used by you, an exploit is attempted anyway.

Links

Top

References:

  • imagick.php manual - https:// www.php.net/manual/en/ book.imagick.php
  • Imagick::getpage - https:// www.php.net/manual/en/ imagick.getpage.php
  • Google Analytics get page view - https:// stackoverflow.com/questions/19484009/ google-analytics-api-get-page-view-information-for-specific-urls
  • Script Kiddie - https:// en.wikipedia.org/wiki/Script_kiddie

Site design by Tempusfugit Web Design -