mikey
06-12-2006, 01:05 AM
Wasn't quite sure where to post this but it is rather annoying. Your shoutbox is constantly requesting a refresh. I don't like requests that just come out of the blue like that. It's also a bit ill mannered toward anyone on dialup who disconnects while leaving your page up...it causes his connection to reactivate. It also causes paranoid folk like me to investigate the origin. :)
GET /forum/images/smiles/icon_sad.gif HTTP/1.1
Accept: */*
Referer: http://www.experiencewindows.co.uk/forum/shoutbox_view.php?0?auto_refresh=1
Accept-Language: en-us
Accept-Encoding: gzip, deflate
If-Modified-Since: Wed, 14 Jun 2006 04:55:40 GMT
If-None-Match: "374107-43b-448f96cc"
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 2.0.50727; .NET CLR 1.1.4322)
Host: www.experiencewindows.co.uk
Connection: Keep-Alive
Cookie: phpbb2mysql_data=xxx
X-ProcessAndThread: IEXPLORE.EXE [1400; 1556]
HTTP/1.1 304 Not Modified
Date: Tue, 05 Dec 2006 22:59:25 GMT
Server: Apache/1.3.37 (Unix) mod_auth_passthrough/1.8 mod_log_bytes/1.2 mod_bwlimited/1.4 PHP/4.4.3 FrontPage/5.0.2.2635.SR1.2 mod_ssl/2.8.28 OpenSSL/0.9.7a
Connection: close
ETag: "374107-43b-448f96cc"
==============
BTW If you want to stop telling all the would_be hacks what versions you are running, you could edit the signature so that only a generic Apache sig shows such as;
HTTP/1.0 304 Not Modified
Date: Tue, 05 Dec 2006 23:26:05 GMT
Server: Apache
Connection: close
ETag: "2547b4-439-93e47a80"
To make the change;
#ssh to your box
su -
#Use vi, pico, or whatever editor you like and bring up
/etc/httpd/conf/httpd.conf
#Then serch there for
ServerSignature on
#edit 'ServerSignature on' to 'ServerSignature off'
#Underneath that edit on the next line add this:
ServerTokens ProductOnly
#Then save and exit
#Then Restart Apache
/etc/rc.d/init.d/httpd restart
I hope you don't think I'm just being a busy body. I simply tend to point out things when I see them. Some find it helpfull...others tell me where to go. :)
HTH
GET /forum/images/smiles/icon_sad.gif HTTP/1.1
Accept: */*
Referer: http://www.experiencewindows.co.uk/forum/shoutbox_view.php?0?auto_refresh=1
Accept-Language: en-us
Accept-Encoding: gzip, deflate
If-Modified-Since: Wed, 14 Jun 2006 04:55:40 GMT
If-None-Match: "374107-43b-448f96cc"
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 2.0.50727; .NET CLR 1.1.4322)
Host: www.experiencewindows.co.uk
Connection: Keep-Alive
Cookie: phpbb2mysql_data=xxx
X-ProcessAndThread: IEXPLORE.EXE [1400; 1556]
HTTP/1.1 304 Not Modified
Date: Tue, 05 Dec 2006 22:59:25 GMT
Server: Apache/1.3.37 (Unix) mod_auth_passthrough/1.8 mod_log_bytes/1.2 mod_bwlimited/1.4 PHP/4.4.3 FrontPage/5.0.2.2635.SR1.2 mod_ssl/2.8.28 OpenSSL/0.9.7a
Connection: close
ETag: "374107-43b-448f96cc"
==============
BTW If you want to stop telling all the would_be hacks what versions you are running, you could edit the signature so that only a generic Apache sig shows such as;
HTTP/1.0 304 Not Modified
Date: Tue, 05 Dec 2006 23:26:05 GMT
Server: Apache
Connection: close
ETag: "2547b4-439-93e47a80"
To make the change;
#ssh to your box
su -
#Use vi, pico, or whatever editor you like and bring up
/etc/httpd/conf/httpd.conf
#Then serch there for
ServerSignature on
#edit 'ServerSignature on' to 'ServerSignature off'
#Underneath that edit on the next line add this:
ServerTokens ProductOnly
#Then save and exit
#Then Restart Apache
/etc/rc.d/init.d/httpd restart
I hope you don't think I'm just being a busy body. I simply tend to point out things when I see them. Some find it helpfull...others tell me where to go. :)
HTH