On Mon, 6 Feb 2017 20:17:00 +0100 (CET), Lentes, Bernd wrote: > Why has the request status code 200 ? Because the request was for the root document: "/" The rest of the crap was a malicious query string that -- if your root doc was .php, AND if your php version was vulnerable -- _might_ have executed and done damage. So, 200 == it successfully fetched the root document. Jonesy --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx