FIX: NukeSentinel(tm) 2.4.x and probably all prior versions

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

It has come to my attention (thanks Foggy) that the CGI Auth routines were not always honoring the NukeSentinel(tm) admin username. depending on how the .staccess file was created, NukeSentinel(tm) was mistakenly using the nuke_authors table aid column. As a result, you could never get a match for security.

To correct this, you need to modify 1 line in 2 different files.

Edit admin/modules/nukesentinel/ABAuthEditSave.php
FIND
$stwrite .= $adminrow['aid'].":".$adminrow['password_crypt']."\n";

CHANGE TO
$stwrite .= $adminrow['login'].":".$adminrow['password_crypt']."\n";

Edit admin/modules/nukesentinel/ABCGIBuild.php
FIND
$stwrite .= $adminrow['aid'].":".$adminrow['password_crypt']."\n";

CHANGE TO
$stwrite .= $adminrow['login'].":".$adminrow['password_crypt']."\n";

This will be corrected in the next release of NukeSentinel(tm)

This will be referred to as v2.4.2pl3 until we release v2.4.3

Posted: Tue Jan 10, 2006 9:51 am

I have also made a download patch available from [ Only registered users can see links on this board! Get registered or login! ]

Regular Joined: Mar 11, 2005 Posts: 52

Hi raven many tnx fo suppor to sentinel..
i don't find the v2.4.2pl3 i have take a look on nukescript and here but nothing where is the v2.4.2pl3????

Many tnx

Posted: Tue Jan 10, 2006 2:30 pm

In the post right above yours is the link.

Posted: Tue Jan 10, 2006 2:37 pm

this is a upgrade file s not a full version
i dont' find the full versios v2.4.2pl3 to make this fix

Posted: Tue Jan 10, 2006 2:44 pm

The full version v2.4.2 is available from [ Only registered users can see links on this board! Get registered or login! ] You will still need to apply this patch.

Posted: Tue Jan 10, 2006 2:46 pm

Ok many tnx Smile

registered · New Member Joined: Dec 06, 2005 Posts: 12

Ciao Raven,

on the download patch i see 3 files and not 2.
-admin/modules/nukesentinel/ABAuthEditSave.php
-admin/modules/nukesentinel/ABCGIBuild.php
-includes/nukesentinel.php

Wich its correct patch? 2 files or 3 files?
Thanks for your big work!
Rino [ Only registered users can see links on this board! Get registered or login! ]

Posted: Tue Jan 10, 2006 5:26 pm

All 3 - it is a cumulative patch