My server has been discovered by hackers who keep trying to insert external url's that point to a php script of their own into any GET they can find.
What I would like to do is to intercept all responses from browsers so I can check the string for http:// If I see that (its never present in legitimate traffic), I want to alter it so that its always invalid.
Where do I need to insert my parse function so that I always get first look at strings returned by browsers? Another goal is to introduce a random delay just for these hackers.
How can I intercept responses from browsers?
Perhaps the following is of help / interest:
http://www.phpwcms.de/forum/viewtopic.php?t=15830
http://www.phpwcms.de/forum/viewtopic.php?t=15830
I found this thread which answered all my questions and more..
http://www.phpwcms.de/index.php?id=1,40,0,0,1,0
http://www.phpwcms.de/index.php?id=1,40,0,0,1,0