# Odd Redirects: Security issue in deployed app?

**URL:** <https://www.ruby-forum.com/t/odd-redirects-security-issue-in-deployed-app/113968>\
**Category:** Rails\
**Created:** [September 6, 2007, 7:03pm UTC](https://www.ruby-forum.com/t/odd-redirects-security-issue-in-deployed-app/113968 "2007-09-06T19:03:44Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![zakifataya](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/z/c89c15/32.png) [@zakifataya](https://www.ruby-forum.com/u/zakifataya)\
**Post date:** [September 6, 2007, 7:03pm UTC](https://www.ruby-forum.com/t/odd-redirects-security-issue-in-deployed-app/113968/1 "2007-09-06T19:03:44Z")

</div>

I’m checking my production log after a week’s vacation, and I’m finding  
a lot of entries like these

---- snip ----

Processing FilelistController#index (for 86.209.164.247 at 2007-08-26  
17:36:20) [GET]  
Session ID: 6f9443f4ebbef638dc95caa2583eb801  
Parameters: {“action”=\>“index”, “controller”=\>“filelist”}  
Redirected to [Miniville](http://fab84farcry.miniville.fr/login)  
Completed in 0.01631 (61 reqs/sec) | DB: 0.01005 (61%) | 302 Found  
[[http://fab84farcry.miniville.fr/](http://fab84farcry.miniville.fr/)]

Processing LoginController#index (for 86.209.164.247 at 2007-08-26  
17:36:20) [GET]  
Session ID: a10c110d4e30ab82673535b8ce13d2bd  
Parameters: {“action”=\>“index”, “controller”=\>“login”}  
Rendering within layouts/login  
Rendering login/index  
Completed in 0.04463 (22 reqs/sec) | Rendering: 0.04397 (98%) | DB:  
0.00000 (0%) | 200 OK [[Miniville](http://fab84farcry.miniville.fr/login)]

---- snip ----

[miniville.fr](http://miniville.fr) is not my domain. I’ve never heard of them before today.  
The specific server and IP address changes, but the entries are all from  
this domain.

My app’s default controller is filelist; action index. You need to  
log-in, so if you go to the site and don’t have credentials, you’re  
redirected to a login page. The two entries above seem to show this -  
the first is the redirect, the second is the login page being rendered.

But where are these references to [miniville.fr](http://miniville.fr) coming from? They aren’t  
in my code. Ideas?