简体   繁体   English

重复的Magento搜索词攻击

[英]Recurring Magento search term attack

We are recording an extraordinarily high number of searches for a specific search term:- "biscru" or "Ticru" (63,000 times in the past 2 months). 我们正在记录针对特定搜索字词的极高数量的搜索: - “biscru”或“Ticru”(过去2个月内为63,000次)。 The apache log is showing these requests as coming from Googles servers but I find this hard to believe and suspect the IP address is being spoofed. apache日志显示这些请求来自Googles服务器,但我发现很难相信并怀疑IP地址是欺骗性的。

Apache Log Example:- Apache日志示例: -

rawliving.eu:66.249.72.227 - - [06/Jul/2013:01:25:09 +0100]
"GET /catalogsearch/result/index/?cat=47&dir=desc&limit=25&mode=list&order=event_date&p=6
&q=%22biscru%22+OR+%22Ticru%22
HTTP/1.1" 200 20587 "-" "Mozilla/5.0 (compatible; Googlebot/2.1;
+http://www.google.com/bot.html)"

Clearly blocking 66.249.72.227 is not a option as it is a valid google address so can anyone suggest what options we have to prevent this distortion and maybe identify where these requests are coming from and why? 显然阻止66.249.72.227不是一个选项,因为它是一个有效的谷歌地址所以任何人都可以建议我们有什么选择来防止这种扭曲,并可能确定这些请求来自何处以及为什么?

Any advice gratefully received. 任何建议都感激不尽。 Lee 背风处

Add this to your layout-xml definition eg local.xml 将其添加到layout-xml定义,例如local.xml

<catalogsearch_result_index translate="label">
        <reference name="head">
            <action method="setRobots"><value>NOINDEX,NOFOLLOW</value></action>
        </reference>
    </catalogsearch_result_index>
    <catalogsearch_advanced_index translate="label">
        <reference name="head">
            <action method="setRobots"><value>NOINDEX,NOFOLLOW</value></action>
        </reference>
    </catalogsearch_advanced_index>
    <catalogsearch_advanced_result translate="label">
        <reference name="head">
            <action method="setRobots"><value>NOINDEX,NOFOLLOW</value></action>
        </reference>
    </catalogsearch_advanced_result>

Check if the problem remains after a few days... or just use a robots.txt file to block the catalogsearch urls from being indexed. 几天后检查问题是否仍然存在...或者只是使用robots.txt文件阻止编目网址被编入索引。

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM