Magento

Hello all,

Since 3 days someone or something is entering strange seraches in the frontend of the websites. If I look in my admin, then the latest searches shown include these: !S!WCRTESTINPUT000000!E!’ and !S!WCRTESTINPUT000000!E!’ and ‘7’=’7 and variations of it like 999999 7=7 and so on.

Is someone trying to hack the website? Is there a way to prevent this, can I for instance block entry of special characters in the search field,
so characters like ! and ‘are not accepted?

Your advice is very much appreciated,
thanks and regards,
wessel

Hi,

yes, this is a very stupid try to hack you by testing the search function for mySQL injection.

Don’t worry Magento is by design save against this kind of attacks so you don’t need to change anything on your website.

Just ignore it

thank you for your answer, saves a lot of stress!

Cheers,
Wessel