Advertisement
It is currently Fri Mar 12, 2010 4:43 pm


Information
Bot Tracker

Yahoo [Bot]
Fri. Mar. 12 2010, 16:42
MSN [Bot]
Fri. Mar. 12 2010, 16:36
Google [Bot]
Fri. Mar. 12 2010, 16:34
Google Adsense [Bot]
Fri. Mar. 12 2010, 16:15
Baidu [Spider]
Fri. Mar. 12 2010, 15:41
MSNbot Media
Fri. Mar. 12 2010, 09:05
Exabot [Bot]
Fri. Mar. 12 2010, 05:12
Gigabot [Bot]
Fri. Mar. 12 2010, 03:23
Ask Jeeves [Bot]
Thu. Mar. 11 2010, 19:46
Alexa [Bot]
Wed. Mar. 10 2010, 10:16

Search

Left Ads

Post a new topic Post a reply 
Page 1 of 12      [ 167 posts ] Next topic Bottom of the page. Who posted in this topic. Print view Bookmark topic Previous topic
Go to page  1, 2, 3, 4, 5 ... 12  
Author Message
Offline
Integra Dev Team
User avatar

Joined: Tue Mar 14, 2006 6:25 pm
Posts: 1296
Location: Canada
Flag
Cash:10
Male
   
Post CrackerTracker Exploit False Positives


 
Have you ever gotten this message while trying to do something you know you should be allowed to do?

Image


There is a KB Article located here that will explain how to use the debug mode of CrackerTracker to detect the problem file and give you a solution.

This thread is for those that have already found their solution and want to share it with the rest of the community. So, feel free to share your CrackerTracker Debug Logs with everyone. All verified and validated False Positive fixes will be contained within this first post.

NOTE: Please do not post support questions in this thread, it is only for CT Debug info. If you are having a problem using the debug mod or have another CrackerTracker related question or problem, please start another thread or post in a thread with the same topic material.

Verified Fixes

Tell a Friend fix
OPEN tellafriend.php
FINDAFTER ADD

Occupation Fix (in profiles)
OPEN profile.php
FIND
  1. $ct_ignorepvar = array('helpbox','delete','deleteall','phpBBSecurity_question','user_interests');
REPLACE WITH
  1. $ct_ignorepvar = array('helpbox','delete','deleteall','phpBBSecurity_question','user_interests','user_occ');

_________________
A childhood can be a terrible thing to waste... that's why I've extended mine well into my 20's.


Last edited by Teelk on Tue Jan 23, 2007 1:23 am, edited 2 times in total.

Thu Jan 18, 2007 5:08 pm
Top
Profile    E-mail 
Offline
Sr Integra Member|Sr Integra Member|Sr Integra Member

Joined: Wed May 24, 2006 11:14 pm
Posts: 430
No gender specified
   
Post 


 
When you click the "Tell a Friend" button, you'll get a CrackerTracker error. I have edited the instructions that CrackerTracker gave me to match what you'll actually have to do to fix this.

  1. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  2. Script-Filename: /tellafriend.php
  3. ----------------
  4.  
  5. Request-Method: GET
  6.  
  7. Possible solution:
  8. ------------------
  9.  
  10. #
  11. #-----[ OPEN ]------------------------------------------
  12. #
  13. /tellafriend.php
  14.  
  15. #
  16. #-----[ FIND ]------------------------------------------
  17. #
  18. define('IN_PHPBB', true);
  19.  
  20. #
  21. #-----[ AFTER, ADD ]------------------------------------------
  22. #
  23. define('CT_SECLEVEL', 'MEDIUM');
  24.  
  25. #
  26. #-----[ SAVE/CLOSE ALL FILES ]------------------------------------------
  27. #
  28. # EoM


Before it said to look for "define('IN_PHPBB', 1); but in IM 1.4.1 it is "define('IN_PHPBB', true);" so this code will fix the problem.

Zac


Thu Jan 18, 2007 5:20 pm
Top
Profile    E-mail 
Offline

Joined: Thu Jul 27, 2006 6:37 pm
Posts: 39
No gender specified
   
Post Re: CrackerTracker Exploit False Positives


 
A user couldn't change their style in the control panel. Debugging showed this

  1.  
  2. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  3. Script-Filename: /4xforum/profile.php
  4. ----------------
  5.  
  6. Request-Method: POST
  7.  
  8. Matching rule: or
  9. In variable:   user_occ
  10.  
  11. Matching rule: '
  12. In variable:   user_occ
  13.  
  14. Possible solution:
  15. ------------------
  16.  
  17. #
  18. #-----[ OPEN ]------------------------------------------
  19. #
  20. /4xforum/profile.php
  21.  
  22. #
  23. #-----[ FIND ]------------------------------------------
  24. #
  25. define('IN_PHPBB', 1);
  26.  
  27. #
  28. #-----[ AFTER, ADD ]------------------------------------------
  29. #
  30. define('CT_SECLEVEL', 'MEDIUM');
  31. $ct_ignorepvar = array('user_occ');
  32.  
  33. #
  34. #-----[ SAVE/CLOSE ALL FILES ]------------------------------------------
  35. #
  36. # EoM


So I patched the file

  1.  
  2. --- profile.php.orig    2007-01-22 15:40:55.000000000 -0500
  3. +++ profile.php 2007-01-22 15:41:15.000000000 -0500
  4. @@ -12,7 +12,7 @@
  5.  
  6.  define('IN_PHPBB', true);
  7.  define('CT_SECLEVEL', 'MEDIUM');
  8. -$ct_ignorepvar = array('helpbox','delete','deleteall','phpBBSecurity_question','user_interests');
  9. +$ct_ignorepvar = array('helpbox','delete','deleteall','phpBBSecurity_question','user_interests','user_occ');
  10.  if ( (isset($HTTP_GET_VARS['mode']) && ($HTTP_GET_VARS['mode'] == 'viewprofile')) || (isset($HTTP_POST_VARS['mode']) && ($HTTP_POST_VARS['mode'] == 'viewprofile')) )
  11.  {
  12.         define('IN_CASHMOD', true);
  13.  


I hope this is what I am supposed to do :mrgreen:


Mon Jan 22, 2007 3:06 pm
Top
Profile    E-mail 
Offline

Joined: Wed Jan 17, 2007 11:35 pm
Posts: 41
No gender specified
   
Post 


 
For anyone wanting an easy way to make these changes without using a single FTP program, just use the eXtreme Styles template editor. I have for instance created backups in both versions of ctracker/engines/ct_security.php

Hope this helps some of you guys.

DDay


Fri Jan 26, 2007 12:54 am
Top
Profile    E-mail 
Offline
Sr Integra Member|Sr Integra Member|Sr Integra Member

Joined: Wed May 24, 2006 11:14 pm
Posts: 430
No gender specified
   
Post 


 
One of my users was having trouble updating his information. Seems that the 'user_realname' parameter was causing the trouble. Here is the patch for it (I have altered it to work with the integramod code)

  1. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  2. Script-Filename: /profile.php
  3. ----------------
  4.  
  5. Request-Method: POST
  6.  
  7. Matching rule:  chr
  8. In variable:   user_realname
  9.  
  10. Possible solution:
  11. ------------------
  12.  
  13. #
  14. #-----[ OPEN ]------------------------------------------
  15. #
  16. /profile.php
  17.  
  18. #
  19. #-----[ FIND ]------------------------------------------
  20. #
  21. $ct_ignorepvar = array
  22. ('helpbox','delete','deleteall','phpBBSecurity_question','user_interests')
  23.  
  24. #
  25. #-----[IN-LINE FIND]------------------------------------------
  26. #
  27.  
  28. 'helpbox','delete','deleteall','phpBBSecurity_question','user_interests'
  29.  
  30. #
  31. #-----[ IN-LINE, AFTER, ADD ]------------------------------------------
  32. #
  33.  
  34. ,'user_realname'
  35.  
  36. #
  37. #-----[ SAVE/CLOSE ALL FILES ]------------------------------------------
  38. #
  39. # EoM
  40.  


The whole string of code will look like this after the patch:

$ct_ignorepvar = array
('helpbox','delete','deleteall','phpBBSecurity_question','user_interests','user_realname')

I think this is the right instructions that you'll need. Feel free to alter, it's just important to get the 'user_realname' parameter unblocked.

Zac


Last edited by ZacFields on Sat Jan 27, 2007 2:37 pm, edited 1 time in total.

Fri Jan 26, 2007 11:09 am
Top
Profile    E-mail 
Offline
Sr Integra Member|Sr Integra Member|Sr Integra Member

Joined: Wed May 24, 2006 11:14 pm
Posts: 430
No gender specified
   
Post 


 
I couldn't edit anything in my ACP ==> Configuration area before adding this fix: (Altered to match integramod code)

  1. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  2. Script-Filename: /admin/admin_board.php
  3. ----------------
  4.  
  5. Request-Method: POST
  6.  
  7. Matching rule: and
  8. In variable:   board_email_sig
  9.  
  10. Matching rule:  like
  11. In variable:   board_disable_msg
  12.  
  13. Possible solution:
  14. ------------------
  15.  
  16. #
  17. #-----[ OPEN ]------------------------------------------
  18. #
  19. /admin/admin_board.php
  20.  
  21. #
  22. #-----[ FIND ]------------------------------------------
  23. #
  24. define('CT_SECLEVEL', 'MEDIUM');
  25. $ct_ignorepvar = array('cookie_name');
  26. #
  27. #-----[ IN-LINE FIND]------------------------------------------
  28. #
  29.  
  30. 'cookie_name'
  31.  
  32. #
  33. #-----[ IN-LINE AFTER, ADD]------------------------------------------
  34. #
  35.  
  36. ,'board_email_sig','board_disable_msg'
  37.  
  38. #
  39. #-----[ SAVE/CLOSE ALL FILES ]------------------------------------------
  40. #
  41. # EoM
  42.  


The whole string of code will look like this after the patch:

$ct_ignorepvar = array('cookie_name','board_email_sig','board_disable_msg');

Now as far as I can tell, I can change anything in the configuration section in the ACP.

Zac


Last edited by ZacFields on Sat Jan 27, 2007 2:36 pm, edited 1 time in total.

Fri Jan 26, 2007 3:02 pm
Top
Profile    E-mail 
Offline
Sr Integra Member|Sr Integra Member|Sr Integra Member

Joined: Wed May 24, 2006 11:14 pm
Posts: 430
No gender specified
   
Post 


 
To create a forum, there is one minor error that needs to be resolved. Very simple and SMALL problem but here is the patch for it (Altered to match IM code)

  1.  
  2. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  3. Script-Filename: /admin/admin_forums_extend.php
  4. ----------------
  5.  
  6. Request-Method: POST
  7.  
  8. Matching rule: '
  9. In variable:   desc
  10.  
  11. Possible solution:
  12. ------------------
  13.  
  14. #
  15. #-----[ OPEN ]------------------------------------------
  16. #
  17. /admin/admin_forums_extend.php
  18.  
  19. #
  20. #-----[ FIND ]------------------------------------------
  21. #
  22. $ct_ignorepvar = array('create','delete','name','icon');
  23.  
  24. #
  25. #-----[ IN-LINE, FIND ]------------------------------------------
  26. #
  27. 'delete','name','icon'
  28.  
  29. #
  30. #-----[ IN-LINE AFTER, ADD ]------------------------------------------
  31.  
  32. ,'desc'
  33.  
  34. #
  35. #
  36. #-----[ SAVE/CLOSE ALL FILES ]------------------------------------------
  37. #
  38. # EoM
  39.  


The string of code after the fix will look like this:

$ct_ignorepvar = array('create','delete','name','icon','desc');

Once this is fixed, you should be able to create forums just fine.

Zac

*EDIT* This fix seems to also work for creating categories as well.


Sat Jan 27, 2007 2:34 pm
Top
Profile    E-mail 
Offline
Site Admin
User avatar

Joined: Fri Apr 21, 2006 7:59 pm
Posts: 882
Location: Illinois
Flag
Cash:380
Male
   
Post Re: CrackerTracker Exploit False Positives


 
Tried Adding a GNU license in downloads and cracker tracker went off. Letting you know so it can be patched when ever and I used ZacFields fixes and my board is alot more free now.

_________________
Image


Tue Jan 30, 2007 1:07 am
Top
Profile     
Offline

Joined: Sun Dec 31, 2006 10:53 am
Posts: 68
No gender specified
   
Post 


 
Biggest problem I am having right now is on one of my sites, I can't edit style.css sheets on the site itself. I have to download them, edit them on my machine, and submit the edited version. That wouldn't be an issue if I wasn't the kind to try something, and nick and pick at it til I liked it. :(

_________________
www.dickdynamite.com


Tue Jan 30, 2007 1:29 am
Top
Profile    E-mail 
Offline
Beta Tester

Joined: Sun Oct 01, 2006 5:02 pm
Posts: 144
No gender specified
   
Post Re: CrackerTracker Exploit False Positives


 
ctracker is blocking the cookieMod program. I found the easy go around was to rename ctracker to something else. Run cookieMod and then change the file name back to ctracker.


Tue Jan 30, 2007 1:53 am
Top
Profile    E-mail 
Offline

Joined: Sun Dec 31, 2006 10:53 am
Posts: 68
No gender specified
   
Post 


 
The CTracker folder?

_________________
www.dickdynamite.com


Tue Jan 30, 2007 2:05 am
Top
Profile    E-mail 
Offline
Beta Tester

Joined: Sun Oct 01, 2006 5:02 pm
Posts: 144
No gender specified
   
Post 


 
If you look at the root of your forums you will see a folder called ctracker. It was in the files you uploaded for 141.


Tue Jan 30, 2007 11:21 am
Top
Profile    E-mail 
Offline
Sr Integra Member|Sr Integra Member|Sr Integra Member

Joined: Wed May 24, 2006 11:14 pm
Posts: 430
No gender specified
   
Post 


 
I will take a look at the aforementioned problems and see if we can find a patch for it.

The Devs (and I, the newbie dev) are working on a real patch for crackertracker but we want to make sure we've got most of the major fixes on there before we release it.

I have uploaded a patch that you guys can use in the meantime that will help you be able to do some of the basic stuff like create forums, edit forums, etc.

Zac


Tue Jan 30, 2007 11:59 am
Top
Profile    E-mail 
Offline

Joined: Sun Dec 31, 2006 10:53 am
Posts: 68
No gender specified
   
Post 


 
Sorry, Leadfoot, I was asking if you meant the folder itself, or the CTracker_security.php file.

_________________
www.dickdynamite.com


Tue Jan 30, 2007 1:18 pm
Top
Profile    E-mail 
Offline

Joined: Sun Dec 31, 2006 10:53 am
Posts: 68
No gender specified
   
Post 


 
Also, now I can't even change those settings at all. [Avatar/Sig, ect.]. I'm tempted to just uninstall ctracker until something is made to work. :(

_________________
www.dickdynamite.com


Tue Jan 30, 2007 1:38 pm
Top
Profile    E-mail 
Display posts from previous:  Sort by  
Page 1 of 12      [ 167 posts ] Next topic Top Who posted in this topic. Print view Bookmark topic Previous topic
Go to page  1, 2, 3, 4, 5 ... 12  
Post a new topic Post a reply 


Who is online

Users browsing this forum: No registered users and 0 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  

Advertisement