Outbound Tracking

Question

I am struggling with the task I was given. I was asked to reset to host an e-commerce site to 0 for all products. I did this, however, after a few hours, the stock was updated to its original values. The same goes for the next two attempts.

The client told me that he used to have some kind of “bridge” between this site and another site with the same products, and that the stock could still be updated. However , I spent hours looking at all the scripts and did not find any connection to this site. I also checked the CRON list, and it is empty, so it is either triggered by some event in the repository, or the update is launched from another site (which I am starting to research now).

Meanwhile, before I get access to another site, is there a way to track a possible outbound connection from the first? There would be a .php script that would connect either to the database of the second site, or with some kind of XML feed from it - is there a way to register these connections or somehow find out which of them initialized the script

Thanks in advance for any advice.

Answer 1

For outgoing, yes, through wirehark, for example. But this is a difficult climb for the average guy.

Inbox, you can see the general query log.

select @@general_log; -- a 1 indicates it is turned on for capture
select @@general_log_file; -- the file that it logs to

, , . , , , . . , , . "connect". , , " ", , honeypots: p

, .

( ) , . . , , .