Where is this address coming from?

I am getting originating urls in my user tracking like this /index.php?main_page=http://myloversplace.chat.ru/images? and /index.php?page=http://dwlz2.dwlz2.com/~dwlz2/ice.txt/ and other strange addresses, I have checked some of them and there is no such address. Where are these coming from....they always go to page not found.

Any ideas?

https://www.zen-cart.com/tutorials/index.php?article=320

Thanks!

I tried this and i get a warning on line 1
here's the first lines of code

<?php
/**
 * prevent hack attempts which waste CPU cycles
 */
$paramsToCheck = array('main_page', 'cPath', 'products_id', 'language', 'currency', 'action', 'manufacturers_id', 'pID', 'pid', 'reviews_id', 'filter_id', 'zenid', 'sort', 'number_of_uploads', 'notify', 'page_holder', 'chapter', 'alpha_filter_id', 'typefilter', 'disp_order', 'id', 'key', 'music_genre_id', 'record_company_id', 'set_session_login', 'faq_item', 'edit', 'delete', 'search_in_description', 'dfrom', 'pfrom', 'dto', 'pto', 'inc_subcat', 'payment_error', 'order', 'gv_no', 'pos', 'addr', 'error', 'count', 'error_message', 'info_message', 'cID', 'page');
$contaminated = false;
foreach($paramsToCheck as $key) {
  if (isset($_GET[$key]) && substr($_GET[$key], 0, 4) == 'http') {
    $contaminated = true;
    break;
  }
}
if ($contaminated || isset($_GET['autoLoadConfig']) || isset($_GET['mosConfig_absolute_path']) || isset($_FILES['GLOBALS']) || isset($_REQUEST['GLOBALS']) ) 
{
  header('HTTP/1.1 406 Not Acceptable');
  exit(0);
}
/**
 * application_top.php Common actions carried out at the start of each page invocation.
 *
 * Initializes common classes & methods. Controlled by an array which describes
 * the elements to be initialised and the order in which that happens.
 * see [EMAIL="{@link"]{@link[/EMAIL]  [URL]http://www.zen-cart.com/wiki/index.php/Developers_API_Tutorials#InitSystem[/URL] wikitutorials} for more details.
 *
 * @package initSystem

I have tried this several times and still get the error:
Parse error: syntax error, unexpected T_VARIABLE in /home/mommy3/public_html/includes/application_top.php on line 1

running 1.3.8a

What editor are you using?

This appears fixed...

filezilla
I am still getting these weird addresses...at least as of an hour ago

kobra:

What editor are you using?
Unless I have missed something - filezilla is a FTP client not an editor.

My post was at 11:14 AM & it is currently 11:29 AM

Oh, yeah, you're right, I missed something:yes: notepad++ is my editor!!

Well notepad++ is a decent editor - You musta done something wrong editing that file???

Try adding the code like this, just after the commented out notes, and before
where it says set_magic_quotes_runtime(0) (approx line 17-18):

<?php
/**
 * application_top.php Common actions carried out at the start of each page invocation.
 *
 * Initializes common classes & methods. Controlled by an array which describes
 * the elements to be initialised and the order in which that happens.
 * see {@link  http://www.zen-cart.com/wiki/index.php/Developers_API_Tutorials#InitSystem wikitutorials} for more details.
 *
 * @package initSystem
 * @copyright Copyright 2003-2007 Zen Cart Development Team
 * @copyright Portions Copyright 2003 osCommerce
 * @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
 * @version $Id: application_top.php 7470 2007-11-24 20:54:50Z drbyte $
 */
/*
 * turn off magic-quotes support, for both runtime and sybase, as both will cause problems if enabled
 */
 /**
 * prevent hack attempts which waste CPU cycles
 */

I don't understand what I could have screwed up, I did, undid it, redid and redid it about 5 times now.....still getting the same error. Am I supposed to take out any code?

Where do you see the error?

after I put the code into the file it breaks the cart and my site doesn't load, I get the error....I don't have the code in right now, because it breaks it.

Thanks, somehow it is fixed!!!:wink:
Thanks Kobra!