Ultimate SEO Urls

SQL injection - Ultimate SEO Urls

SQL injection

by cbs » Mon Mar 02, 2026 8:22 am

I think someone is trying to inject SQL using this addon

PHP Warning: aPage_Modules::stripPathToLastNumber: Incorrect path value of 9' AND ,EXTRACTVALUE(5224,CONCAT(0x5c,'~',(SELECT/**/(ELT(5224=5224,1))),'~'))-- - presented in includes/apps/ultimate_seo_urls/abstracts/page_modules.php on line 319

Should I be worried or is this normal?
cbs
Member
Posts: 46
Joined: Tue Oct 26, 2021 9:42 am
Phoenix Version: v1.1.0.6
Contact:

Re: SQL injection

by bonbec » Wed Apr 01, 2026 11:07 am

This addon is not the target.

This addon filters requested URLs, so the hacking attempt necessarily bypasses this filtering, hence the mention of this addon's file.

The simplest way to prevent MySQL hacks is to install protection via .htaccess.
Many tutorials can be found online, such as this one:
https://shane.kinsch.com/htaccess-rules ... njections/
Old MS2.2 PHP7.4 site being converted to CE Phoenix v1.1.0.6 PHP 8.3
User avatar
bonbec
Contributor
Posts: 190
Joined: Mon Oct 26, 2020 12:23 pm
Phoenix Version: V1.1.0.7
Contact: