That's precisely the same thing as was tried here – from the same address.

Cheers

GT

ns1.vnwebhosting.com
Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)
05/07/2009 09:44:26

//phpMyAdmin/main.php
05/07/2009 09:44:28

//phpmyadmin/main.php
05/07/2009 09:44:29

//pma/main.php
05/07/2009 09:44:33

//dbadmin/main.php
05/07/2009 09:44:33

//mysql/main.php
05/07/2009 09:44:34

//php-my-admin/main.php
05/07/2009 09:44:35

//myadmin/main.php
05/07/2009 09:44:36

//PHPMYADMIN/main.php

In this case, it showed up in StatPress' "Spy" function, but also in the server log for the 404 page since this hopeless gimboid's attempt was a straightforward use of "http://marketmentat.com/MarketRant//phpmyadmin/main.php" and variations on that theme (using all variants of phpmyadmin/pma/phpadmin and main.php/index.php).

I've also got index and script protection (in htaccess), and some obfuscation in some php scripts.

And of course, stripslashes (and sensible use of order by and limit in validation queries) to minimise risk of SQL injection exploits.

You're never going to avoid good professionals though – that killed my Forums, and I won't reactivate them until they are exploit-proof. Script-kiddies are easy to deal with… and a well-developed global private market for extreme violence helps on the 'teaching them not to do it again' front.

Cheers

GT