Sentinel is doing its job and then some

wrecit · Regular Joined: Jan 27, 2008 Posts: 99

I have...... Well Sentinel has caught and blocked a few hack attempts on my site and I love it.

I do have one problem though. I am running HTTP Video stream modual and one of the features of this modual is members can submit videos to the site then the admin gets the request info in the admin panel and approves or denies the video.

When my members submit a video Sentinel does not allow the submition and I recieve this

Quote:

Date & Time: 2008-02-05 17:52:31 EST GMT -0500
Blocked IP: 205.188.116.130
User ID: miguel (6)
Reason: Abuse-Script
--------------------
User Agent: Mozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; SV1; iebar; acc=vonner)
Query String: therectorboys.com/modules.php?name=Video_Stream&page=vidadd
Get String: therectorboys.com/modules.php?name=Video_Stream&page=vidadd
Post String: therectorboys.com/modules.php?title=king george speedway&category=8&description=the final Virginia pavement Divisional in jr stock&url=<object width=\"425\" height=\"355\"><param name=\"movie\" value=\"http://www.youtube.com/v/wlsDA2-Hy_k&rel=1\"></param><param name=\"wmode\" value=\"transparent\"></param><embed src=\"http://www.youtube.com/v/wlsDA2-Hy_k&rel=1\" type=\"application/x-shockwave-flash\" wmode=\"transparent\" width=\"425\" height=\"355\"></embed></object>&picurl=&thumbimg=&width=425&height=355&plugin=5&ADDIT=Add Video
Forwarded For: none
Client IP: none
Remote Address: 205.188.116.130
Remote Port: 37197
Request Method: POST
--------------------
Who-Is for IP

How can I fix this?

Raven · Posted: Wed Feb 06, 2008 1:34 am

Try this. Edit includes/nukesentinel.php.

FIND:
if (stristr($qs,'name=Forums')!==false && stristr($qs,'file=posting')!==false && (strtolower($qsName[0])=="private_messages" || strtolower($qsName[0])=="forums")) {

CHANGE TO:
if (stristr($qs,'name=Video_Stream')!==false || stristr($qs,'name=Forums')!==false && stristr($qs,'file=posting')!==false && (strtolower($qsName[0])=="private_messages" || strtolower($qsName[0])=="forums")) {

Should this work, there are security implications which I will discuss after you reply back.

wrecit · Regular Joined: Jan 27, 2008 Posts: 99

ok Raven it took me a while to get back to my site (real world job gave no time)

I just made the code modifycation and going to have some friends submit a video today

Now how bad have I just opened my site to hacking lol