scanned db after the kw "metronidazole" and found following thing:



then:


details:

SELECT * 
FROM  `information_schema`.`PROCESSLIST` 
WHERE (
CONVERT(  `ID` 
USING utf8 ) LIKE  '%metronidazole%'
OR CONVERT(  `USER` 
USING utf8 ) LIKE  '%metronidazole%'
OR CONVERT(  `HOST` 
USING utf8 ) LIKE  '%metronidazole%'
OR CONVERT(  `DB` 
USING utf8 ) LIKE  '%metronidazole%'
OR CONVERT(  `COMMAND` 
USING utf8 ) LIKE  '%metronidazole%'
OR CONVERT(  `TIME` 
USING utf8 ) LIKE  '%metronidazole%'
OR CONVERT(  `STATE` 
USING utf8 ) LIKE  '%metronidazole%'
OR CONVERT(  `INFO` 
USING utf8 ) LIKE  '%metronidazole%'
)
LIMIT 0 , 30

-----------

dear piwigo developers > what could you suggest me?

huge thank you in advance,
Helmuts

Last edited by helmuc (2016-08-16 22:06:55)

Uhm, the information_schema.processlist table lists mysql processes.
So, if you execute a query you will find it in the processlist, of course.
That means: your search on "metronidazole" executes a select on processlist, which just finds itself.

As long the result is 1 and the only match is in the information_schema.processlist, it didn't find any match in any table. All is good.

teekay wrote:

I checked the google results for your site. There are some URIs like "/index.php?p=inderal-5mg" that directly redirect to some online pharmacy. And it's still working.

It "looks" like Piwigo's index.php is doing the redirect, but I suspect this to be more like a .htaccess hack.
Please check for a .htaccess file in your Piwigo installation folder.

Check your webserver access logs for GET requests on php files that are not part of the Piwigo installation.

Some notes on such redirect hacks: https://aw-snap.info/articles/redirects.php

Thank you - will check that. Helmuts