On 24/10/16 17:37, Jan Ceuleers wrote: > On 24/10/16 18:29, Allen Coates wrote: >> Over the weekend I had three spam messages get through to my in-box. Two >> contained an "X-PHP-Script" header >> >> one was >> X-PHP-Script: >> folar.org/wp-content/plugins/the-events-calendar/src/Tribe/Aggregator/uploader.php >> for 110.83.63.152 >> >> and the other >> X-PHP-Script: >> 118k.org/wp-content/plugins/formidable/classes/views/frm-entries/stats.php >> for 110.83.62.203 >> >> I suppose I could block them using header_checks, but first, does >> anybody know what they (are supposed to) do? I have not encountered >> them before. > First Google hit?
How to insert / remove / munge them, but not what they do. Or their value as a spam indicator. >