PHP Web Host - Quality Web Hosting For All PHP Applications Sign up for PayPal and start accepting credit card payments instantly
  Login or Register
 • Home • Downloads • Your Account • Forums • 

View next topic
View previous topic


Google
 
Web RavenPHPScripts (This Site)
Post new topic   Reply to topic
Author Message
hitwalker
Sells PC To Pay For Divorce


Joined:
Posts: 5661

PostPosted: Fri Jun 09, 2006 2:55 am Reply with quote Back to top

ok that was fun...upgraded to latest and trashed forum....
only thing it shows is hacking attempt..
(edit: problem seems to be in common.php)
View user's profile Send private message
Coldy
Hangin' Around


Joined: Apr 24, 2004
Posts: 40
Location: Austria

PostPosted: Fri Jun 09, 2006 3:27 am Reply with quote Back to top

Hi!

The problem is the line 87 in the common.php
I have changed it with the code from the 2.0.20.

Maybe somebody have an other idea for this. Smile

Coldcut Cool
View user's profile Send private message Visit poster's website
hitwalker
Sells PC To Pay For Divorce


Joined:
Posts: 5661

PostPosted: Fri Jun 09, 2006 3:30 am Reply with quote Back to top

well thats not a way to solve it....
View user's profile Send private message
Guardian2003
Site Admin


Joined: Aug 28, 2003
Posts: 6373
Location: Vsetin, Czech Republic

PostPosted: Fri Jun 09, 2006 9:26 am Reply with quote Back to top

Has the ported update been released already?
I must have missed that somehow.
View user's profile Send private message Send e-mail Visit poster's website
technocrat
Life Cycles Becoming CPU Cycles


Joined: Jul 07, 2005
Posts: 511

PostPosted: Fri Jun 09, 2006 9:49 am Reply with quote Back to top

Only registered users can see links on this board!
Get registered or login to the forums!
View user's profile Send private message
benson
Worker
Worker


Joined: May 15, 2004
Posts: 119
Location: Germany

PostPosted: Fri Jun 09, 2006 10:37 am Reply with quote Back to top

Hi technocrat,

I can not find the link you gave ...

Why does it works on my local installation and not on any of my sites online ?
View user's profile Send private message Visit poster's website
technocrat
Life Cycles Becoming CPU Cycles


Joined: Jul 07, 2005
Posts: 511

PostPosted: Fri Jun 09, 2006 10:43 am Reply with quote Back to top

I can't answer that for sure. The problem is with the name, admin, and cookie being an actual variable.

If you cannot find the line just look for $not_unset = array( and replace the entire line.
View user's profile Send private message
daemon
Worker
Worker


Joined: Jan 07, 2005
Posts: 163

PostPosted: Fri Jun 09, 2006 10:53 am Reply with quote Back to top

is this a perm fix or temp?
View user's profile Send private message Visit poster's website AIM Address
daemon
Worker
Worker


Joined: Jan 07, 2005
Posts: 163

PostPosted: Fri Jun 09, 2006 10:57 am Reply with quote Back to top

after applying that, i can't access the forums admin page. any ideas?
View user's profile Send private message Visit poster's website AIM Address
technocrat
Life Cycles Becoming CPU Cycles


Joined: Jul 07, 2005
Posts: 511

PostPosted: Fri Jun 09, 2006 11:01 am Reply with quote Back to top

I would take it as temp.

I manually patched Evo, so there might be more issues with bbtonuke.
View user's profile Send private message
daemon
Worker
Worker


Joined: Jan 07, 2005
Posts: 163

PostPosted: Fri Jun 09, 2006 11:18 am Reply with quote Back to top

well the forums page work after patch but the admin page says not authorized to admin the board....lol
View user's profile Send private message Visit poster's website AIM Address
technocrat
Life Cycles Becoming CPU Cycles


Joined: Jul 07, 2005
Posts: 511

PostPosted: Fri Jun 09, 2006 11:19 am Reply with quote Back to top

Was their a modules/Forums/admin/pagestart.php in the bbtonuke upgrade? If so try putting back the old one.
View user's profile Send private message
daemon
Worker
Worker


Joined: Jan 07, 2005
Posts: 163

PostPosted: Fri Jun 09, 2006 11:28 am Reply with quote Back to top

there wasnt one
View user's profile Send private message Visit poster's website AIM Address
benson
Worker
Worker


Joined: May 15, 2004
Posts: 119
Location: Germany

PostPosted: Fri Jun 09, 2006 11:31 am Reply with quote Back to top

Code:
   // Merge all into one extremely huge array; unset
   // this later
   $input = array_merge($HTTP_GET_VARS, $HTTP_POST_VARS, $HTTP_COOKIE_VARS, $HTTP_SERVER_VARS, $HTTP_SESSION_VARS, $HTTP_ENV_VARS, $HTTP_POST_FILES);

   unset($input['input']);
   unset($input['not_unset']);

   while (list($var,) = @each($input))
   {
      if (in_array($var, $not_unset))
      {
         die('Hacking attempt!');
      }
      unset($$var);
   }

   unset($input);
}


That is the part where I think the problem is located. What have I to change in that to get it temp. fixed ?
View user's profile Send private message Visit poster's website
technocrat
Life Cycles Becoming CPU Cycles


Joined: Jul 07, 2005
Posts: 511

PostPosted: Fri Jun 09, 2006 11:32 am Reply with quote Back to top

Its like 2 line about what you just posted
View user's profile Send private message
daemon
Worker
Worker


Joined: Jan 07, 2005
Posts: 163

PostPosted: Fri Jun 09, 2006 9:16 pm Reply with quote Back to top

no one else got any ideas?
View user's profile Send private message Visit poster's website AIM Address
hitwalker
Sells PC To Pay For Divorce


Joined:
Posts: 5661

PostPosted: Sat Jun 10, 2006 3:21 am Reply with quote Back to top

well any response were waiting for would come from chaserv or evaders99...
maybe they are on vacation... Smile
View user's profile Send private message
technocrat
Life Cycles Becoming CPU Cycles


Joined: Jul 07, 2005
Posts: 511

PostPosted: Sat Jun 10, 2006 9:42 am Reply with quote Back to top

Evaders answered the thread on NukeFixes
View user's profile Send private message
hitwalker
Sells PC To Pay For Divorce


Joined:
Posts: 5661

PostPosted: Sat Jun 10, 2006 10:43 am Reply with quote Back to top

any direct link cause i see about 1789.000.000.000 posts about this...
View user's profile Send private message
daemon
Worker
Worker


Joined: Jan 07, 2005
Posts: 163

PostPosted: Sat Jun 10, 2006 3:43 pm Reply with quote Back to top

i only see one same problems as posted here, evaders said he was gonna look at it, no update as of yet. there isnt an open forum there yet for 2.0.21 its in another.
View user's profile Send private message Visit poster's website AIM Address
hitwalker
Sells PC To Pay For Divorce


Joined:
Posts: 5661

PostPosted: Sat Jun 10, 2006 3:45 pm Reply with quote Back to top

well i still dont know what technocrat means with..
Quote:
Evaders answered the thread on NukeFixes

i asume he means the current problem.
View user's profile Send private message
Guardian2003
Site Admin


Joined: Aug 28, 2003
Posts: 6373
Location: Vsetin, Czech Republic

PostPosted: Sat Jun 10, 2006 11:27 pm Reply with quote Back to top

I think that thread addressed a different issue.
View user's profile Send private message Send e-mail Visit poster's website
hitwalker
Sells PC To Pay For Divorce


Joined:
Posts: 5661

PostPosted: Sun Jun 11, 2006 4:45 am Reply with quote Back to top

ah i see,thats how things get complicated........lol
View user's profile Send private message
strik9
New Member
New Member


Joined: Jul 02, 2005
Posts: 8

PostPosted: Sun Jun 11, 2006 6:10 am Reply with quote Back to top

The cirrent upgrade i used is definately working. I have it on the test site as we speak.
View user's profile Send private message
Guardian2003
Site Admin


Joined: Aug 28, 2003
Posts: 6373
Location: Vsetin, Czech Republic

PostPosted: Sun Jun 11, 2006 6:45 am Reply with quote Back to top

strik9 wrote:
The cirrent upgrade i used is definately working. I have it on the test site as we speak.

And you do not have the session issue or forum language selection problem?
If thats the case it will be worth me installing it into my own test site.
View user's profile Send private message Send e-mail Visit poster's website
Display posts from previous:       
Post new topic   Reply to topic

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Forums ©
 

All logos and trademarks in this site are property of their respective owner.
The comments are property of their posters, all the rest © 2002-2011 by Raven

You can syndicate our news using the file xml

CSE HTML Validator Helped Clean up This Page! [Valid RSS] valid RSS 2.0 Valid robots.txt Stop Spam Harvesters, Join Project Honey Pot

Website engines core code is © copyright by PHP-Nuke but has been heavily patched and modified by myself and others.
PHP-Nuke is a free software released under the GNU/GPL.


:: fisubice phpbb2 style by Daz :: PHP-Nuke theme by www.nukemods.com ::
:: fisubice Theme Modified by the RavenNuke™ Team ::

:: W3C CSS Compliance Validation :: W3C HTML 4.01 Transitional Compliance Validation ::

zerosum