Where is this address coming from?

[helpme]

I am getting originating urls in my user tracking like this /index.php?main_page=http://myloversplace.chat.ru/images? and /index.php?page=http://dwlz2.dwlz2.com/~dwlz2/ice.txt/ and other strange addresses, I have checked some of them and there is no such address. Where are these coming from....they always go to page not found.

Any ideas?

[Steven300]

https://www.zen-cart.com/tutorials/i...hp?article=320

[helpme]

Thanks!

[helpme]

I tried this and i get a warning on line 1
here's the first lines of code

<?php
/**
 * prevent hack attempts which waste CPU cycles
 */
$paramsToCheck = array('main_page', 'cPath', 'products_id', 'language', 'currency', 'action', 'manufacturers_id', 'pID', 'pid', 'reviews_id', 'filter_id', 'zenid', 'sort', 'number_of_uploads', 'notify', 'page_holder', 'chapter', 'alpha_filter_id', 'typefilter', 'disp_order', 'id', 'key', 'music_genre_id', 'record_company_id', 'set_session_login', 'faq_item', 'edit', 'delete', 'search_in_description', 'dfrom', 'pfrom', 'dto', 'pto', 'inc_subcat', 'payment_error', 'order', 'gv_no', 'pos', 'addr', 'error', 'count', 'error_message', 'info_message', 'cID', 'page');
$contaminated = false;
foreach($paramsToCheck as $key) {
  if (isset($_GET[$key]) && substr($_GET[$key], 0, 4) == 'http') {
    $contaminated = true;
    break;
  }
}
if ($contaminated || isset($_GET['autoLoadConfig']) || isset($_GET['mosConfig_absolute_path']) || isset($_FILES['GLOBALS']) || isset($_REQUEST['GLOBALS']) ) 
{
  header('HTTP/1.1 406 Not Acceptable');
  exit(0);
}
/**
 * application_top.php Common actions carried out at the start of each page invocation.
 *
 * Initializes common classes & methods. Controlled by an array which describes
 * the elements to be initialised and the order in which that happens.
 * see {@link  http://www.zen-cart.com/wiki/index.p...als#InitSystem wikitutorials} for more details.
 *
 * @package initSystem

[helpme]

I have tried this several times and still get the error:
Parse error: syntax error, unexpected T_VARIABLE in /home/mommy3/public_html/includes/application_top.php on line 1


running 1.3.8a

[kobra]

What editor are you using?

This appears fixed...

[helpme]

filezilla
I am still getting these weird addresses...at least as of an hour ago

[kobra]

What editor are you using?

Unless I have missed something - filezilla is a FTP client not an editor.

My post was at 11:14 AM & it is currently 11:29 AM

[helpme]

Oh, yeah, you're right, I missed something notepad++ is my editor!!

[kobra]

Well notepad++ is a decent editor - You musta done something wrong editing that file???