Actinic Trial being accessed without our knowledge

[Josie]

Hello all,

We were just checking our access log and found this message:

81.130.182.6 - - [10/Dec/2003:20:32:15 +0100] "GET /cgi-bin/md000001.pl?BASE=text%20price%20prod&USER=trial3434743&PASS=x_x_x_x&VER=6%20DDVA HTTP/1.1" 200 620 csbooks.co.uk "-" "Catalog" "-"

(password x'd out)

This trial is about four months old and we haven't done anything with it or tried to access it since establishing the local host in August this year. It may still be hanging around but we certainly haven't accessed it and as far as I'm aware there aren't any connections between the current Actinic store and the trial.

I don't understand why it is being accessed. Is it Actinic? We believe this is our ip address. Is there a way to delete old trial stores that are no longer in use? We thought that they were automatically deleted after a month, but have check an even older store and found it still there. Will it cause an error?

Please put my mind at rest!

[cdicken]

Don't worry, it won't cause an error. The link you saw there is a call to the 'md' script, which is called at the end of an upload to merge the latest changes to the store.

Actinic would have been unsuccesful in the request as the account is disabled, and so the username and password will not work any more. I don't know why it suddenly decided to call that script at that time - when you look at the rest of the access logs, are there references to the 'md' script on your current server?

If you give me the URL of your old trial store, I can permenantly remove all files from it.

[Josie]

We haven't picked up on this previously in the logs but were having problems with crashing halfway through uploading which we thought might be due to our isp and might cause 'funnies' when next uploading. We will be keeping a close eye in future for this kind of thing!

http://trials.actinic.com/trials/trial2131 is the site that is still hanging around. It would be good if you could delete this for us.

Thanks and Happy Christmas,

Josie

[cdicken]

Your old store is removed from the web.

Have a good Christmas as well.