Possible attack

[stevenpicado]

Hello everyone,

 

I have recently received a fake support request from someone under a ymail address, I currently have the ability to send tickets without requiring registration but I might need to change that from now on, I would just like to know if this kind of spam could harm my DBs in any way or if I should be looking to a damage or any other thing I should look out to, thanks for any help provided, below the message subject:

 {php}evaL(base64_decode<<removed>>;exit;{/php}

[tripler]

Thats not spam. Its an exploit attempt at uploading a php shell to your directory.

 

Read through http://forum.whmcs.com/showthread.php?t=44066 and make sure you have the security patch put out in November or December of 2011

[stevenpicado]

Thanks tripler, looks like I'm fine.

 

I'm blocking that address and turning on the "Only allow registered clients to open tickets in this department" feature.

 

Thanks a lot