Ravens PHP Scripts: Forums
 

 

View next topic
View previous topic
This forum is locked: you cannot post, reply to, or edit topics.   This topic is locked: you cannot edit posts or make replies.    Ravens PHP Scripts And Web Hosting Forum Index -> NukeSentinel™ v2.4.x
Author Message
Isaiah
Hangin' Around


Joined: Nov 09, 2004
Posts: 32

PostPosted: Sun Feb 05, 2006 2:17 pm Reply with quote

Hi there,

I want to describe a recently problem i had, and maybe someone encountered the same problem with me.

I recently switched to a new server cause the previous one didn't managed to handle the high traffic that the page gets.

My news articles has inside HTML codes (like img src, etc...). Everything was working great at the old server. From time i switched to new one, when i try to add or edit an article that contains HTML code, i get banned from Sentinel (Stringing Blocker).

So whenever i want to do changes to the articles, i disable Stringing Blocker, add the news, and then i enable the blocker again.

Anyone knows where is the problem? I guess that there is no problem with Sentinel (i am using NukeSentinel™ 2.4.2pl3) but something has to do with the new server configuration. Is there something that i must ask from my hosting company to change?

And something ugly happened today, Someone (kiddy script "hacker") took advance of this situation (when i disable Stringing blocker) and added with a script admin access. Then he started changing things to the page, thanks god i was there and deleted his admin account fast.

But i am so sure, that when he made the hack attack, i had the scripting blocker ON !!!!!!!! Is there a new vulnerability script out ???
 
View user's profile Send private message
evaders99
Former Moderator in Good Standing


Joined: Apr 30, 2004
Posts: 3221

PostPosted: Sun Feb 05, 2006 8:35 pm Reply with quote

Are you using the latest Patched files? Other addons.. esp those that allow file uploading?

I have not heard of any newer security issues. But definitely want to take a look and make sure if Sentinel is working or not

_________________
- Only registered users can see links on this board! Get registered or login! -

Need help? Only registered users can see links on this board! Get registered or login! 
View user's profile Send private message Visit poster's website
Isaiah
PostPosted: Mon Feb 06, 2006 4:55 am Reply with quote

I do not use any addons that allow file uploading,
either download module. A lot of modules are disabled to my page,
cause are not needed.

I am sure that i use sentinel 2.4.2pl3, i will be glad if you take a look to the page. I allready sent you a pm.

Thanks.
 
evaders99
PostPosted: Mon Feb 06, 2006 12:51 pm Reply with quote

Do you have server access logs? That would determine exactly how the hacker got in
 
Display posts from previous:       
This forum is locked: you cannot post, reply to, or edit topics.   This topic is locked: you cannot edit posts or make replies.    Ravens PHP Scripts And Web Hosting Forum Index -> NukeSentinel™ v2.4.x

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001-2007 phpBB Group
All times are GMT - 6 Hours
 
Forums ©