It started with a few but now the number has increased to more than a hundred. I am seeing strange urls getting hit as errors in my Google search console, not sure how is this being done but someone is using the search bar, and it's algo as their tool. enter image description here


(I have replaced the real domain name with example.com)

  • 2
    If you visit those URLs is there content on them? If so, it sounds as if your site was hacked. Commented Apr 29, 2022 at 13:56

1 Answer 1


It looks like they are either:

  • Trying to get information from your database (hacking attempts)
  • Trying to create content on your site (presumably link hacking)

Either way, a few recommendations:

  • Search pages should never be crawled by robots (i.e., Google, Bing). You should mark those pages as noindex.
  • Always sanitize the search variable as much as possible. For example, only allow characters, numbers, and spaces, but nothing more.
  • Whenever possible, don't print out the search query (i.e., You searched for XXX)

These tips should mitigate any current and future attacks.

  • thanks so much for the support man! I might not be able to perform all of it but I think my developer could. Should I simply share the 3 points you have mentioned above? Or are there any instructions to give? Commented May 5, 2022 at 8:23
  • Your developer should be able to make the changes directly or Google on how to implement them if in doubt. Commented May 5, 2022 at 9:18

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.