As I have mentioned in my
previous posting I have had a look at RFI attacks some time ago and planned to publish my results. Since those results were quite outdated we decided to alse collect come new data. Here one of my colleagues had a great idea, which he has also published on his
blog. By proposing certain .htaccess configurations we allow others to easily protect themseleves from being rfi attacked while in the same time increasing our data feeds regarding RFI attacking attempts. By now we have put some more work on this and came up with a simple
"rfi project" page where we also present some statistics. If you would like to contribute you can do so
here. If there are any questions don't hesitate to drop us a line...
