Removing Errors from our site - /includes/templates/classic/css/none

Although solving the problem will take some deep investigation you should be able to eliminate the errors by using:

Redirect Gone /includes/templates/classic/css/none

Put the above line in the main or top level .htaccess file.

Yes but if it s a probe that still results in leaking server information.

How so?

Do your physic powers tell you what kind of information is being provided by the Error pages for the OP's site?

Please do not look for fault in whatever is posted. The idea is to help and, without knowing everything, single, little, thing about how a person has their site setup and/or their current level of knowledge & experience with coding, we can only provide information / help based on the information provided.

No statistical probability, default configuration and 12 years experience all tell me that Error pages leak information as do headers. So a one liner that leaks less is a better course of action.

That is a non-answer.

Your 'one-liner' stills creates error entries whereas my 'one-liner' does not.

As to what someone has in their Error pages is and should be, up to them. It is each person's responsibility to determine or learn, what to put in an Error page and what not to.

No it is a correct answer, mine leaks less information reagrdless of circumstance and still allows requests to be tracked easily and in the same manner as the OP is going. It is my responsibility to ensure that when I advise someone I give the most appropriate advice, not to give an answer that I know could result in feeding a hacker with more information or pass the buck onto the OP. There's a common probe that appears in logs that looks for

"GET /thisdoesnotexistahaha.php HTTP/1.1" 404

which is straight from my logs, your advice feeds that bot, mine err, doesn't. :cool:

epsonprintersrock - try a search through a copy of all of your site for coding which is something like:

display: none;

Website Rob - you should know better. You've only been here for three and a half years helping people constructively.

Vger

Well my favourite advice from Website Rob so far has been

redirects any URL that includes: record_company.php/password_forgotten.php

RedirectMatch Permanent ^/(.*[record_company.php]+)/(password_forgotten.php)$ /page_not_found.php

redirects any URL that includes: /images/wp- with 'wp-' being anything that ends with '.php'

this allows for images named such as 'wp-header.jpg' to work

RedirectMatch Permanent ^/(.[images]+)/(wp-..php)$ /page_not_found.php

and indeed anything that goes to page not found, because it means that every single error for a hack attempt loads 170 files into memory and puts in 300 database queries, and that is why Rob appears to be following me around. So far the average bot attack on a server lasts minutes from multiple ip address (the maximum appearing to be 84 servers) doing 5 queries each, so let's quarter that number to 21 machine making 5 requests each, leading to 105 queries and 31500 database queries and the loading and processing of PHP 17850 pages to talk to a bot.

Yes Webiste Rob made a mistake, which is fair enough, anyone can, I have repeatedly in this thread, but I'm not going around disputing everything he says, in fact I posted my advice first and it is good solid advice.

MattyMatt:

...
and indeed anything that goes to page not found, because it means that every single error for a hack attempt loads 170 files into memory and puts in 300 database queries, and that is why Rob appears to be following me around. So far the average bot attack on a server lasts minutes from multiple ip address (the maximum appearing to be 84 servers) doing 5 queries each, so let's quarter that number to 21 machine making 5 requests each, leading to 105 queries and 31500 database queries and the loading and processing of PHP 17850 pages to talk to a bot.
Ya ya ya ... that's about the 50th time you've said that same thing in the last 2 weeks. And most of the time, like this one, it's way off topic.
If you've got something constructive and specifically beneficial to help deal with the posted problem, share it. But if you want to start rabbit-trails, especially belaboring ideas that have already been mentioned ad nauseum, find some other place to do it.
Moaning about bots has its place. Try to keep it there, not splattered everywhere.

The point is that I am trying to help by saving server resources from bots and misplaced files if the shop owner uses the Zen cart file

extras/htaccess_for_page_not_found_redirects.htaccess

or Rob's code, there's already been an example on the forum where similar code has slowed a website down because of a misconstructed template file. I think the forum should be a place where problems are solved in the most appropriate way and should highlight issues that can optimize a website and improve the development of Zen Cart, no one is saying my code is incorrect, nor that it does not do what is advertised or for the reasons stated and yet persistently I find myself being followed by two individuals who seem bent on corrupting the advice, deliberately misconstruing my comments and by posting information that could be detrimental to a shop owner, because I pointed out that they were wrong when I was a "newbie" to the forum but not in this field.

Matt.

... and this forum is for SHOP OWNERS not server systems admins.

MattyMatt:

Rob appears to be following me around

I'm flattered you would think I am doing that but it is obviously not so.

Going back to original posting and the OP specifically, I would suggest that whatever can be gleamed from this thread be done so. If problem still not solved then hire someone or use the Commercial Forum to post a request, to resolve the issue for you.

I feel that this thread has turned into beating a dead horse and that is getting no one nowhere.

Well, it seems you all have had a very busy weekend.

I'll take some time to look at the advice given and decide on a course of action. When all these problems are fixed I'll let you know what helped.

If anyone else does have any constructive advice it'd be great to hear it. :bigups:

Ok, so I downloaded firebug for mozilla firefox, its a really handy suggestion. And I watched through all the html requests that the browser made when I went onto our homepage and no error came up and no /templats/classic/css/none file request was made :no:

So I'm still none the wiser about whats causing it. Yesterday that file request caused about 300 errors, 95% of all our error logs are made up of that request. :(

Surely this has happened to someone else? Or do other people not bother with their error logs and just remain oblivious?? :blink:

epsonprintersrock:

Surely this has happened to someone else?Possibly not.
epsonprintersrock:

Or do other people not bother with their error logs and just remain oblivious?? :blink:
In all the log-reviewing I've done on hundreds of sites, I've never seen what you describe.
Plus, there's no code in (a default uncustomized install of) Zen Cart do create such links, so unless you've added specific custom code, it's not originating from a normal install of Zen Cart.

You'll need to identify a pattern in those log messages.
ie:

• are they all from the same IP address?
• regardless of same address or not, how do those IP addresses compare with the server activity log?
  --- ie: the server activity log tracks non-error activity of all visitors. Use it to find out what else the visitors attempting to hit your "none" file are also doing. Identify patterns.
• what referrer is being logged for those visitors
• what browser or user-agent are they using
• etc