Ravens PHP Scripts: Forums
 

 

View next topic
View previous topic
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> General/Other Stuff
Author Message
Tizwit
Involved
Involved


Joined: Aug 29, 2004
Posts: 324
Location: New Mexico

PostPosted: Tue Dec 06, 2005 3:11 am Reply with quote

I am running a test site and I am testing the Arcade and could not get it to submit and record the score until I found this:

Code:
----]Clip 

After installing chatserv patche's 3.1 on phpnuke7.6 the arcade will not update the score any more.
arcade is just refresh the game.
All works great with the chatserv patch 3.0 and nuke 2.0.17.
line#238
Remove them of the new mainfile.php and all works great

The problem was follow thing in the new mailfile.php that came with the chatserv fixe's 3.1

// Posting from other servers in not allowed
// Fix by Quake
// Bug found by PeNdEjO
if ($_SERVER['REQUEST_METHOD'] == "POST") {
if (isset($_SERVER['HTTP_REFERER'])) {
if (!stripos_clone($_SERVER['HTTP_REFERER'], $_SERVER['HTTP_HOST'])) {
die('Posting from another server not allowed!');
}
} else {
die($posttags);
}
}

----]End of Clip


All I did is // out the code here in the mainfile.php and now it works. What security issues or other issue would this create or should I just stay away from the arcades?

_________________
Brian Only registered users can see links on this board! Get registered or login!
Helping the Children in the NM Children's Hospital 
View user's profile Send private message Visit poster's website
evaders99
Former Moderator in Good Standing


Joined: Apr 30, 2004
Posts: 3221

PostPosted: Tue Dec 06, 2005 7:39 pm Reply with quote

While the concept was good, the code wasn't quite right. You should be able to remove it with no real security issues.

_________________
- Only registered users can see links on this board! Get registered or login! -

Need help? Only registered users can see links on this board! Get registered or login! 
View user's profile Send private message Visit poster's website
restinpeace
New Member
New Member


Joined: Jul 07, 2005
Posts: 3

PostPosted: Thu Dec 22, 2005 3:04 am Reply with quote

i'm using phpnuke version 7.9.0.3.1b and arcade v3.0.2 alsa facing the same problems. after i delete that code in mainfile.php now it can submit score.

but now the problems is, after score been submited, the page will automaticly to to the forum mainpage. where can I fix this error?
 
View user's profile Send private message
Display posts from previous:       
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> General/Other Stuff

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001-2007 phpBB Group
All times are GMT - 6 Hours
 
Forums ©