Arcade and 3.1 Patch

registered · Posted: Tue Dec 06, 2005 3:11 am

I am running a test site and I am testing the Arcade and could not get it to submit and record the score until I found this:

Code:

----]Clip 


After installing chatserv patche's 3.1 on phpnuke7.6 the arcade will not update the score any more. 


arcade is just refresh the game. 


All works great with the chatserv patch 3.0 and nuke 2.0.17. 


line#238 


Remove them of the new mainfile.php and all works great 





The problem was follow thing in the new mailfile.php that came with the chatserv fixe's 3.1 





// Posting from other servers in not allowed 


// Fix by Quake 


// Bug found by PeNdEjO 


if ($_SERVER['REQUEST_METHOD'] == "POST") { 


if (isset($_SERVER['HTTP_REFERER'])) { 


if (!stripos_clone($_SERVER['HTTP_REFERER'], $_SERVER['HTTP_HOST'])) { 


die('Posting from another server not allowed!'); 


} 


} else { 


die($posttags); 


} 


} 





----]End of Clip

All I did is // out the code here in the mainfile.php and now it works. What security issues or other issue would this create or should I just stay away from the arcades?

Posted: Tue Dec 06, 2005 7:39 pm

While the concept was good, the code wasn't quite right. You should be able to remove it with no real security issues.

New Member Joined: Jul 07, 2005 Posts: 3

i'm using phpnuke version 7.9.0.3.1b and arcade v3.0.2 alsa facing the same problems. after i delete that code in mainfile.php now it can submit score.

but now the problems is, after score been submited, the page will automaticly to to the forum mainpage. where can I fix this error?