CrackerTracker Exploit False Positives

Support for IntegraMOD 141

Moderator: Integra Moderator

Re: CrackerTracker Exploit False Positives

PostAuthor: TheJT » Sat May 26, 2007 3:04 am

i always get an allert in acp->Forum Admin->Management + -> Creat New Forum

sometimes when i try to write something under "De.scription" i get this allert
Last edited by TheJT on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

TheJT
Members
Members
 
Posts: 55
Likes: 0 post
Liked in: 0 post
Joined: Sat May 06, 2006 1:12 am
Cash on hand: 0.00

PostAuthor: nGAGE » Sat May 26, 2007 9:23 pm

There is a fix for that already, but nobody really posted here anymore... so I don't have my bookmarks to the patch anymore :-? ) It will have the fix though to solve your specifig issue and most of the common ones!
You may simply want to use the "Patch"-like edit, or do all the individual edits, either way... a lot of problems with CT will be solved. Personally I prefer editing the individual files, as I will then be assured that I only change something for that specific file and not globally, like the patch might do (not sure though).

Anyhow... have fun creating forums after this 8)
Last edited by nGAGE on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
[url=http][img=left]http://www.net-clan-gaming.eu/ftp/ngage/images/nEt_v3_sig.png[/img][/url]
User avatar
nGAGE
Sr Integra Member
Sr Integra Member
 
Posts: 248
Likes: 0 post
Liked in: 0 post
Joined: Mon Mar 27, 2006 6:28 am
Cash on hand: 0.00

Re: CrackerTracker Exploit False Positives

PostAuthor: Michalis » Mon Jul 02, 2007 5:46 am

Hi guys.
Just wanted to say a few things. This integramod 1.4.1 is awsome. it has to be one of the best moded php i have come accross recently.
I have been a fan of & using in the past PHPBB2+. This Integramod 1.4.1 has opened my eyes & made my board more popular with its features in place.

I di have a few probs atm with the ct tracker on the board, I have searched on this forum for individual examples that effect me to & with no luck I did not find any help.

Also just to point out I have added the new ctracker patches & unfortunately my small problems are not fixed.

The problems I have are as follows.

1. Links SOLVED
I have added 2 links already to my board thru the ACP with no problem, but adding any more I get the dreaded pink box from the C Tracker. I really dont understand why this is causing me problems. (remember i have added the latest CT patch.).

1. Downloads SOLVED After making the catorgories for the Download section of the board I have come accross with another dreaded pink box when trying to ad info & files in file management.

Is there any individual fixes for the problems I have or can someone kindly help me resolve these issues. This has been bugging me for some time, I have been very patient in searching this forum for resolutions.

Thanx guys for reading this & hope someone maybe able to help.

Integramod definately rocks php
Last edited by Michalis on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
[img=left]http://www.houseofdance.net/images/Banners/HoDbanner2008.gif[/img]
User avatar
Michalis
Integra Member
Integra Member
 
Posts: 138
Likes: 0 post
Liked in: 0 post
Joined: Sat Jun 16, 2007 4:37 pm
Cash on hand: 0.00
Location: UK

Re: CrackerTracker Exploit False Positives

PostAuthor: Michalis » Tue Jul 10, 2007 11:03 am

Well I have to say the following:

I finally managed to read all the posts in this perticular section & must say that i finally got round to understanding some of the fixes that most of you sorted.

I must admin this section does actually work, especially if somke of the members who post in this section could actually put the title what the debug or fix is for.
But anyway I managed to go thru this section & payed attention to the problems that i faced too. I went out of my way & followed the instruction of the fixes I needed to do. I must say thanx to all in this section for you effort in reporting the debugs / fixes that we have with the cool CTracker. I actually managed to fix some of my board with the advice here.

Links
Banners
Downloads

I still have a few minor probs now which have not been answered or have popped up again with a fault.

one of them is to do with the index permissions
http://www.integramod.com/forum/viewtop ... highlight=

& unread messages
http://www.integramod.com/forum/viewtop ... highlight=

also some of my members cannot enter registration cause they get the pink box & when I add them thru the ACP & they try to enter the forum again to login the box appears again. so that one has confused me alot..

But besides all that I really do love this new php version (integramod) real quality. I also noticed in this section a few members were impatient.
This is a shame because the main members who do all of this & give helpful advise are not robots, but human being who do need rest on a few occasions. Plus these fixes cannot be known unless people tell. But take it in mind this integramod is free of charge & we should be thankful that it is shared to the public.

So guys lets be patient if there is no fix on the other section of this board then this section may have your answer if not then relax & wait .

Thanx again for all your help that u have provided me in some of the fixes/help I needed. very much obliged...
Last edited by Michalis on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
[img=left]http://www.houseofdance.net/images/Banners/HoDbanner2008.gif[/img]
User avatar
Michalis
Integra Member
Integra Member
 
Posts: 138
Likes: 0 post
Liked in: 0 post
Joined: Sat Jun 16, 2007 4:37 pm
Cash on hand: 0.00
Location: UK

Re: CrackerTracker Exploit False Positives

PostAuthor: Juppertje » Wed Jul 18, 2007 11:38 am

I have done what is mentiomet below and afther i edited the file i still get


SECURITY ALERT ÂÂ » ÂÂ » ÂÂ » ÂÂ »
CBACK CrackerTracker has detected a potential attack on this site with a worm or exploit .script so the Security System stopped the .script.


If you can see this page after including a new MOD into your board or after clicking on a link please contact the Board Administrator with this error message and a de.scription what you have done before you could see this page, that the Admin has the possibility to fix the problem.



So now what?

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Script-Filename: /forum/admin/admin_kb_cat.php
----------------

Request-Method: POST

Matching rule: rm
In variable: catname

Matching rule: rm
In variable: catname

Possible solution:
------------------

#
#-----[ OPEN ]------------------------------------------
#
/forum/admin/admin_kb_cat.php

#
#-----[ FIND ]------------------------------------------
#
define('IN_PHPBB', 1);

#
#-----[ AFTER, ADD ]------------------------------------------
#
define('CT_SECLEVEL', 'MEDIUM');
$ct_ignorepvar = array('catname');

#
#-----[ SAVE/CLOSE ALL FILES ]------------------------------------------
#
# EoM

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Script-Filename: /forum/admin/admin_kb_cat.php
----------------

Request-Method: POST

Matching rule: rm
In variable: catname

Matching rule: rm
In variable: catname

Possible solution:
------------------

#
#-----[ OPEN ]------------------------------------------
#
/forum/admin/admin_kb_cat.php

#
#-----[ FIND ]------------------------------------------
#
define('IN_PHPBB', 1);

#
#-----[ AFTER, ADD ]------------------------------------------
#
define('CT_SECLEVEL', 'MEDIUM');
$ct_ignorepvar = array('catname');

#
#-----[ SAVE/CLOSE ALL FILES ]------------------------------------------
#
# EoM


Here is the full admin_kb_cat.php file

Code: Select all
<php>sql_query( $sql ) )     {         message_die( GENERAL_ERROR, "Couldn't get list of forums", "", __LINE__, __FILE__, $sql );     }       $forumlist = '<select>';       if ( $sel_id == 0 )     $forumlist .= '<option> Select a Forum !</option>';         while ( $row = $db->sql_fetchrow( $result ) )     {         if ( $sel_id == $row['forum_id'] )         {             $status = "selected";         }         else         {             $status = '';         }         $forumlist .= '<option>' . $row['forum_name'] . '</option>';     }       $forumlist .= '</select>';       return $forumlist;}    if ( isset( $HTTP_POST_VARS['mode'] ) || isset( $HTTP_GET_VARS['mode'] ) ){     $mode = ( isset( $HTTP_POST_VARS['mode'] ) ) ? $HTTP_POST_VARS['mode'] : $HTTP_GET_VARS['mode'];}else{     if ( $create )     {         $mode = 'create';     }     else if ( $edit )     {         $mode = 'edit';     }     else if ( $delete )     {         $mode = 'delete';     }     else     {         $mode = '';     }}  switch ( $mode ){     case ( 'create' ):           if ( !$HTTP_POST_VARS['submit'] )         {             $new_cat_name = stripslashes( $HTTP_POST_VARS['new_cat_name'] );                         // Generate page                         $template->set_filenames( array( 'body' => 'admin/kb_cat_edit_body.tpl' )                 );               $template->assign_block_vars( 'switch_cat', array() );               $template->assign_vars( array( 'L_EDIT_TITLE' => $lang['Create_cat'],                     'L_EDIT_DESCRIPTION' => $lang['Create_de.scription'],                     'L_CATEGORY' => $lang['Category'],                     'L_DESCRIPTION' => $lang['Article_de.scription'],                     'L_NUMBER_ARTICLES' => $lang['Articles'],                     'L_CAT_SETTINGS' => $lang['Cat_settings'],                     'L_CREATE' => $lang['Create'],                     'L_PARENT' => $lang['Parent'],                     'L_NONE' => $lang['None'],                       'PARENT_LIST' => get_kb_cat_list( '', 0, 1, 0, 0, true ),                       'L_FORUM_ID' => $lang['Forum_id'],                     'L_FORUM_ID_EXPLAIN' => $lang['Forum_id_explain'],                     'FORUM_LIST' => get_forums( ),                       'S_ACTION' => append_sid( $module_root_path . "admin/admin_kb_cat.$phpEx?mode=create" ),                     'CAT_NAME' => $new_cat_name,                     'DESC' => '',                     'NUMBER_ARTICLES' => '0',                                         // Category permissions                     'L_CAT_PERMISSIONS' => $lang['Category_Permissions'],                     'L_VIEW_LEVEL' => $lang['View_level'],                     'L_UPLOAD_LEVEL' => $lang['Upload_level'],                     'L_RATE_LEVEL' => $lang['Rate_level'],                     'L_COMMENT_LEVEL' => $lang['Comment_level'],                     'L_EDIT_LEVEL' => $lang['Edit_level'],                     'L_DELETE_LEVEL' => $lang['Delete_level'],                     'L_APPROVAL_LEVEL' => $lang['Approval_level'],                     'L_APPROVAL_EDIT_LEVEL' => $lang['Approval_edit_level'],                     'L_GUEST' => $lang['Forum_ALL'],                     'L_REG' => $lang['Forum_REG'],                     'L_PRIVATE' => $lang['Forum_PRIVATE'],                     'L_MOD' => $lang['Forum_MOD'],                     'L_ADMIN' => $lang['Forum_ADMIN'],                                         'L_DISABLED' => $lang['Disabled'],                                       'VIEW_GUEST' => 'selected="selected"',                     'UPLOAD_REG' => 'selected="selected"',                     'RATE_REG' => 'selected="selected"',                     'COMMENT_REG' => 'selected="selected"',                     'EDIT_REG' => 'selected="selected"',                     'DELETE_MOD' => 'selected="selected"',                     'APPROVAL_DISABLED' => 'selected="selected"',                                         'S_GUEST' => AUTH_ALL,                     'S_USER' => AUTH_REG,                     'S_PRIVATE' => AUTH_ACL,                     'S_MOD' => AUTH_MOD,                     'S_ADMIN' => AUTH_ADMIN                      ) );         }         else if ( $HTTP_POST_VARS['submit'] )         {             $cat_name = trim( $HTTP_POST_VARS['catname'] );               if ( !$cat_name )             {                 echo "Please put a category name in!";             }               $cat_desc = $HTTP_POST_VARS['catdesc'];             $parent = intval( $HTTP_POST_VARS['parent'] );             $comments_forum_id = intval( $HTTP_POST_VARS['forum_id'] );                         if ( $comments_forum_id == 0 )             {                 mx_message_die(GENERAL_MESSAGE , 'Select a Forum');               }             $view_level = intval( $HTTP_POST_VARS['auth_view'] );             $post_level = intval( $HTTP_POST_VARS['auth_post'] );             $rate_level = intval( $HTTP_POST_VARS['auth_rate'] );             $comment_level = intval( $HTTP_POST_VARS['auth_comment'] );             $edit_level = intval( $HTTP_POST_VARS['auth_edit'] );             $delete_level = intval( $HTTP_POST_VARS['auth_delete'] );             $approval_level = intval( $HTTP_POST_VARS['auth_approval'] );             $approval_edit_level = intval( $HTTP_POST_VARS['auth_approval_edit'] );               $sql = "SELECT MAX(cat_order) AS cat_order             FROM " . KB_CATEGORIES_TABLE . " WHERE parent = $parent";             if ( !( $result = $db->sql_query( $sql ) ) )             {                 mx_message_die( GENERAL_ERROR, 'Could not obtain next type id', '', __LINE__, __FILE__, $sql );             }               if ( !( $id = $db->sql_fetchrow( $result ) ) )             {                 mx_message_die( GENERAL_ERROR, 'Could not obtain next type id', '', __LINE__, __FILE__, $sql );             }             $cat_order = $id['cat_order'] + 10;               $sql = "INSERT INTO " . KB_CATEGORIES_TABLE . " ( category_name, category_details, number_articles, parent, cat_order, auth_view, auth_post, auth_rate, auth_comment, auth_edit, auth_delete, auth_approval, auth_approval_edit, comments_forum_id)" . " VALUES                                                             ( '$cat_name', ' $cat_desc', '0',                 '$parent', '$cat_order', '$view_level', '$post_level', '$rate_level', '$comment_level', '$edit_level', '$delete_level', '$approval_level', '$approval_edit_level', '$comments_forum_id')";               if ( !( $results = $db->sql_query( $sql ) ) )             {                 mx_message_die( GENERAL_ERROR, "Could not create category", '', __LINE__, __FILE__, $sql );             }               $message = $lang['Cat_created'] . '<br><br>' . sprintf( $lang['Click_return_cat_manager'], '<a>', '</a>' ) . '<br><br>' . sprintf( $lang['Click_return_admin_index'], '<a>', '</a>' );               message_die( GENERAL_MESSAGE, $message );         }         break;       case ( 'edit' ):           if ( !$HTTP_POST_VARS['submit'] )         {             $cat_id = intval( $HTTP_GET_VARS['cat'] );               $sql = "SELECT * FROM " . KB_CATEGORIES_TABLE . " WHERE category_id = " . $cat_id;               if ( !( $results = $db->sql_query( $sql ) ) )             {                 mx_message_die( GENERAL_ERROR, "Could not obtain category information", '', __LINE__, __FILE__, $sql );             }             if ( $kb_cat = $db->sql_fetchrow( $results ) )             {                 $cat_name = $kb_cat['category_name'];                 $cat_desc = $kb_cat['category_details'];                 $number_articles = $kb_cat['number_articles'];                 $parent = $kb_cat['parent'];                 $comments_forum_id = $kb_cat['comments_forum_id'];             }                         // Generate page                         $template->set_filenames( array( 'body' => 'admin/kb_cat_edit_body.tpl' )                 );               $template->assign_block_vars( 'switch_cat', array() );             $template->assign_block_vars( 'switch_cat.switch_edit_category', array() );               $template->assign_vars( array( 'L_EDIT_TITLE' => $lang['Edit_cat'],                     'L_EDIT_DESCRIPTION' => $lang['Edit_de.scription'],                     'L_CATEGORY' => $lang['Category'],                     'L_DESCRIPTION' => $lang['Article_de.scription'],                     'L_NUMBER_ARTICLES' => $lang['Articles'],                     'L_CAT_SETTINGS' => $lang['Cat_settings'],                     'L_CREATE' => $lang['Edit'],                       'L_PARENT' => $lang['Parent'],                     'L_NONE' => $lang['None'],                       'PARENT_LIST' => get_kb_cat_list( '', $parent, $parent, true, 0, true ),                       'S_ACTION' => append_sid( $module_root_path . "admin/admin_kb_cat.$phpEx?mode=edit" ),                     'CAT_NAME' => $cat_name,                     'CAT_DESCRIPTION' => $cat_desc,                     'NUMBER_ARTICLES' => $number_articles,                       'L_FORUM_ID' => $lang['Forum_id'],                     'L_FORUM_ID_EXPLAIN' => $lang['Forum_id_explain'],                     'FORUM_LIST' => get_forums( $comments_forum_id ),                                         // Cat permissions                     'L_CAT_PERMISSIONS' => $lang['Category_Permissions'],                     'L_VIEW_LEVEL' => $lang['View_level'],                     'L_UPLOAD_LEVEL' => $lang['Upload_level'],                     'L_RATE_LEVEL' => $lang['Rate_level'],                     'L_COMMENT_LEVEL' => $lang['Comment_level'],                     'L_EDIT_LEVEL' => $lang['Edit_level'],                     'L_DELETE_LEVEL' => $lang['Delete_level'],                     'L_APPROVAL_LEVEL' => $lang['Approval_level'],                     'L_APPROVAL_EDIT_LEVEL' => $lang['Approval_edit_level'],                     'L_GUEST' => $lang['Forum_ALL'],                     'L_REG' => $lang['Forum_REG'],                     'L_PRIVATE' => $lang['Forum_PRIVATE'],                     'L_MOD' => $lang['Forum_MOD'],                     'L_ADMIN' => $lang['Forum_ADMIN'],                                         'L_DISABLED' => $lang['Disabled'],                                         'VIEW_GUEST' => ( $kb_cat['auth_view'] == AUTH_ALL ) ? 'selected="selected"' : '',                     'VIEW_REG' => ( $kb_cat['auth_view'] == AUTH_REG ) ? 'selected="selected"' : '',                     'VIEW_PRIVATE' => ( $kb_cat['auth_view'] == AUTH_ACL ) ? 'selected="selected"' : '',                     'VIEW_MOD' => ( $kb_cat['auth_view'] == AUTH_MOD ) ? 'selected="selected"' : '',                     'VIEW_ADMIN' => ( $kb_cat['auth_view'] == AUTH_ADMIN ) ? 'selected="selected"' : '',                       'UPLOAD_GUEST' => ( $kb_cat['auth_post'] == AUTH_ALL ) ? 'selected="selected"' : '',                     'UPLOAD_REG' => ( $kb_cat['auth_post'] == AUTH_REG ) ? 'selected="selected"' : '',                     'UPLOAD_PRIVATE' => ( $kb_cat['auth_post'] == AUTH_ACL ) ? 'selected="selected"' : '',                     'UPLOAD_MOD' => ( $kb_cat['auth_post'] == AUTH_MOD ) ? 'selected="selected"' : '',                     'UPLOAD_ADMIN' => ( $kb_cat['auth_post'] == AUTH_ADMIN ) ? 'selected="selected"' : '',                       'RATE_GUEST' => ( $kb_cat['auth_rate'] == AUTH_ALL ) ? 'selected="selected"' : '',                     'RATE_REG' => ( $kb_cat['auth_rate'] == AUTH_REG ) ? 'selected="selected"' : '',                     'RATE_PRIVATE' => ( $kb_cat['auth_rate'] == AUTH_ACL ) ? 'selected="selected"' : '',                     'RATE_MOD' => ( $kb_cat['auth_rate'] == AUTH_MOD ) ? 'selected="selected"' : '',                     'RATE_ADMIN' => ( $kb_cat['auth_rate'] == AUTH_ADMIN ) ? 'selected="selected"' : '',                       'COMMENT_GUEST' => ( $kb_cat['auth_comment'] == AUTH_ALL ) ? 'selected="selected"' : '',                     'COMMENT_REG' => ( $kb_cat['auth_comment'] == AUTH_REG ) ? 'selected="selected"' : '',                     'COMMENT_PRIVATE' => ( $kb_cat['auth_comment'] == AUTH_ACL ) ? 'selected="selected"' : '',                     'COMMENT_MOD' => ( $kb_cat['auth_comment'] == AUTH_MOD ) ? 'selected="selected"' : '',                     'COMMENT_ADMIN' => ( $kb_cat['auth_comment'] == AUTH_ADMIN ) ? 'selected="selected"' : '',                       'EDIT_REG' => ( $kb_cat['auth_edit'] == AUTH_REG ) ? 'selected="selected"' : '',                     'EDIT_PRIVATE' => ( $kb_cat['auth_edit'] == AUTH_ACL ) ? 'selected="selected"' : '',                     'EDIT_MOD' => ( $kb_cat['auth_edit'] == AUTH_MOD ) ? 'selected="selected"' : '',                     'EDIT_ADMIN' => ( $kb_cat['auth_edit'] == AUTH_ADMIN ) ? 'selected="selected"' : '',                       'DELETE_REG' => ( $kb_cat['auth_delete'] == AUTH_REG ) ? 'selected="selected"' : '',                     'DELETE_PRIVATE' => ( $kb_cat['auth_delete'] == AUTH_ACL ) ? 'selected="selected"' : '',                     'DELETE_MOD' => ( $kb_cat['auth_delete'] == AUTH_MOD ) ? 'selected="selected"' : '',                     'DELETE_ADMIN' => ( $kb_cat['auth_delete'] == AUTH_ADMIN ) ? 'selected="selected"' : '',                       'APPROVAL_DISABLED' => ( $kb_cat['auth_approval'] == AUTH_ALL ) ? 'selected="selected"' : '',                     'APPROVAL_MOD' => ( $kb_cat['auth_approval'] == AUTH_MOD ) ? 'selected="selected"' : '',                     'APPROVAL_ADMIN' => ( $kb_cat['auth_approval'] == AUTH_ADMIN ) ? 'selected="selected"' : '',                                             'APPROVAL_EDIT_DISABLED' => ( $kb_cat['auth_approval_edit'] == AUTH_ALL ) ? 'selected="selected"' : '',                     'APPROVAL_EDIT_MOD' => ( $kb_cat['auth_approval_edit'] == AUTH_MOD ) ? 'selected="selected"' : '',                     'APPROVAL_EDIT_ADMIN' => ( $kb_cat['auth_approval_edit'] == AUTH_ADMIN ) ? 'selected="selected"' : '',                                     'S_GUEST' => AUTH_ALL,                     'S_USER' => AUTH_REG,                     'S_PRIVATE' => AUTH_ACL,                     'S_MOD' => AUTH_MOD,                     'S_ADMIN' => AUTH_ADMIN,                         'S_HIDDEN' => '<input>' )                 );         }         else if ( $HTTP_POST_VARS['submit'] )         {             $cat_id = intval( $HTTP_POST_VARS['catid'] );             $cat_name = trim( $HTTP_POST_VARS['catname'] );             $cat_desc = $HTTP_POST_VARS['catdesc'];             $number_articles = intval( $HTTP_POST_VARS['number_articles'] );             $parent = intval( $HTTP_POST_VARS['parent'] );             $comments_forum_id = intval( $HTTP_POST_VARS['forum_id'] );                         $view_level = intval( $HTTP_POST_VARS['auth_view'] );             $post_level = intval( $HTTP_POST_VARS['auth_post'] );             $rate_level = intval( $HTTP_POST_VARS['auth_rate'] );             $comment_level = intval( $HTTP_POST_VARS['auth_comment'] );             $edit_level = intval( $HTTP_POST_VARS['auth_edit'] );             $delete_level = intval( $HTTP_POST_VARS['auth_delete'] );             $approval_level = intval( $HTTP_POST_VARS['auth_approval'] );             $approval_edit_level = intval( $HTTP_POST_VARS['auth_approval_edit'] );                 if ( !$cat_name )             {                 echo "Please put a category name in!";             }               $sql = "UPDATE " . KB_CATEGORIES_TABLE . " SET category_name = '" . $cat_name . "', category_details = '" . $cat_desc . "', number_articles = '" . $number_articles . "', parent = '" . $parent . "', auth_view = '" . $view_level . "', auth_post = '" . $post_level . "', auth_rate = '" . $rate_level . "', auth_comment = '" . $comment_level . "', auth_edit = '" . $edit_level . "', auth_delete = '" . $delete_level . "', auth_approval = '" . $approval_level . "', auth_approval_edit = '" . $approval_edit_level . "', comments_forum_id = '" . $comments_forum_id . "' WHERE category_id = " . $cat_id;               if ( !( $results = $db->sql_query( $sql ) ) )             {                 mx_message_die( GENERAL_ERROR, "Could not update category", '', __LINE__, __FILE__, $sql );             }               $message = $lang['Cat_edited'] . '<br><br>' . sprintf( $lang['Click_return_cat_manager'], '<a>', '</a>' ) . '<br><br>' . sprintf( $lang['Click_return_admin_index'], '<a>', '</a>' );               mx_message_die( GENERAL_MESSAGE, $message );         }         break;       case ( 'delete' ):           if ( !$HTTP_POST_VARS['submit'] )         {             $cat_id = $HTTP_GET_VARS['cat'];               $sql = "SELECT *                 FROM " . KB_CATEGORIES_TABLE . " WHERE category_id = '" . $cat_id . "'";               if ( !( $cat_result = $db->sql_query( $sql ) ) )             {                 mx_message_die( GENERAL_ERROR, "Could not obtain category information", '', __LINE__, __FILE__, $sql );             }               if ( $category = $db->sql_fetchrow( $cat_result ) )             {                 $cat_name = $category['category_name'];             }                         // Generate page                         $template->set_filenames( array( 'body' => 'admin/kb_cat_del_body.tpl' )                 );               $template->assign_vars( array( 'L_DELETE_TITLE' => $lang['Cat_delete_title'],                     'L_DELETE_DESCRIPTION' => $lang['Cat_delete_desc'],                     'L_CAT_DELETE' => $lang['Cat_delete_title'],                     'L_DELETE_ARTICLES' => $lang['Delete_all_articles'],                       'L_CAT_NAME' => $lang['Article_category'],                     'L_MOVE_CONTENTS' => $lang['Move_contents'],                     'L_DELETE' => $lang['Move_and_Delete'],                       'S_HIDDEN_FIELDS' => '<input>',                     'S_SELECT_TO' => get_kb_cat_list( '', $cat_id, 0, true, 0, true ),                     'S_ACTION' => append_sid( $module_root_path . "admin/admin_kb_cat.$phpEx?mode=delete" ),                       'CAT_NAME' => $cat_name )                 );         }         else if ( $HTTP_POST_VARS['submit'] )         {             $new_category = $HTTP_POST_VARS['move_id'];             $old_category = $HTTP_POST_VARS['catid'];               if ( $new_category != '0' )             {                 $sql = "UPDATE " . KB_ARTICLES_TABLE . " SET article_category_id = '$new_category'                WHERE article_category_id = '$old_category'";                   if ( !( $move_result = $db->sql_query( $sql ) ) )                 {                     mx_message_die( GENERAL_ERROR, "Could not move articles", '', __LINE__, __FILE__, $sql );                 }                   $sql = "SELECT *                    FROM " . KB_CATEGORIES_TABLE . " WHERE category_id = '$new_category'";                   if ( !( $cat_result = $db->sql_query( $sql ) ) )                 {                     mx_message_die( GENERAL_ERROR, "Could not get category data", '', __LINE__, __FILE__, $sql );                 }                   if ( $new_cat = $db->sql_fetchrow( $cat_result ) )                 {                     $new_articles = $new_cat['number_articles'];                 }                   $sql = "SELECT *                    FROM " . KB_CATEGORIES_TABLE . " WHERE category_id = '$old_category'";                   if ( !( $oldcat_result = $db->sql_query( $sql ) ) )                 {                     mx_message_die( GENERAL_ERROR, "Could not get category data", '', __LINE__, __FILE__, $sql );                 }                   if ( $old_cat = $db->sql_fetchrow( $oldcat_result ) )                 {                     $old_articles = $old_cat['number_articles'];                 }                   $number_articles = $new_articles + $old_articles;                   $sql = "UPDATE " . KB_CATEGORIES_TABLE . " SET number_articles = '" . $number_articles . "' WHERE category_id = " . $new_category;                   if ( !( $number_result = $db->sql_query( $sql ) ) )                 {                     mx_message_die( GENERAL_ERROR, "Could not update articles number", '', __LINE__, __FILE__, $sql );                 }             }             else             {                 $sql = "DELETE FROM " . KB_ARTICLES_TABLE . "                         WHERE article_category_id = " . $old_category;                 if ( !( $delete__articles = $db->sql_query( $sql ) ) )                 {                     mx_message_die( GENERAL_ERROR, "Could not delete articles", '', __LINE__, __FILE__, $sql );                 }             }               $sql = "DELETE FROM " . KB_CATEGORIES_TABLE . " WHERE category_id = $old_category";               if ( !( $delete_result = $db->sql_query( $sql ) ) )             {                 mx_message_die( GENERAL_ERROR, "Could not delete category", '', __LINE__, __FILE__, $sql );             }               $message = $lang['Cat_deleted'] . '<br><br>' . sprintf( $lang['Click_return_cat_manager'], '<a>', '</a>' ) . '<br><br>' . sprintf( $lang['Click_return_admin_index'], '<a>', '</a>' );               mx_message_die( GENERAL_MESSAGE, $message );         }         break;       default:           if ( $mode == "up" )         {             $cat_id = $HTTP_GET_VARS['cat'];               $sql = "SELECT *              FROM " . KB_CATEGORIES_TABLE . "            WHERE category_id = $cat_id";               if ( !( $result = $db->sql_query( $sql ) ) )             {                 mx_message_die( GENERAL_ERROR, "Could not get category data", '', __LINE__, __FILE__, $sql );             }               if ( $category = $db->sql_fetchrow( $result ) )             {                 $parent = $category['parent'];                 $old_pos = $category['cat_order'];                 $new_pos = $old_pos-10;             }               $sql = "UPDATE " . KB_CATEGORIES_TABLE . " SET            cat_order = '" . $old_pos . "'            WHERE parent = " . $parent . " AND cat_order = " . $new_pos;               if ( !( $result = $db->sql_query( $sql ) ) )             {                 mx_message_die( GENERAL_ERROR, "Could not update order", '', __LINE__, __FILE__, $sql );             }               $sql = "UPDATE " . KB_CATEGORIES_TABLE . " SET            cat_order = '" . $new_pos . "'            WHERE category_id = " . $cat_id;               if ( !( $result = $db->sql_query( $sql ) ) )             {                 mx_message_die( GENERAL_ERROR, "Could not update order", '', __LINE__, __FILE__, $sql );             }         }           if ( $mode == "down" )         {             $cat_id = $HTTP_GET_VARS['cat'];               $sql = "SELECT *              FROM " . KB_CATEGORIES_TABLE . "            WHERE category_id = $cat_id";               if ( !( $result = $db->sql_query( $sql ) ) )             {                 mx_message_die( GENERAL_ERROR, "Could not get category data", '', __LINE__, __FILE__, $sql );             }               if ( $category = $db->sql_fetchrow( $result ) )             {                 $parent = $category['parent'];                 $old_pos = $category['cat_order'];                 $new_pos = $old_pos + 10;             }               $sql = "UPDATE " . KB_CATEGORIES_TABLE . " SET            cat_order = '" . $old_pos . "'            WHERE parent = " . $parent . " AND cat_order = " . $new_pos;               if ( !( $result = $db->sql_query( $sql ) ) )             {                 mx_message_die( GENERAL_ERROR, "Could not update order", '', __LINE__, __FILE__, $sql );             }               $sql = "UPDATE " . KB_CATEGORIES_TABLE . " SET            cat_order = '" . $new_pos . "'            WHERE category_id = " . $cat_id;               if ( !( $result = $db->sql_query( $sql ) ) )             {                 mx_message_die( GENERAL_ERROR, "Could not update order", '', __LINE__, __FILE__, $sql );             }         }                 // Generate page                 $template->set_filenames( array( 'body' => 'admin/kb_cat_admin_body.tpl' )             );           $template->assign_vars( array( 'L_KB_CAT_TITLE' => $lang['Cat_man'],                 'L_KB_CAT_DESCRIPTION' => $lang['KB_cat_de.scription'],                   'L_CREATE_CAT' => $lang['Create_cat'],                 'L_CREATE' => $lang['Create'],                 'L_CATEGORY' => $lang['Article_category'],                 'L_ACTION' => $lang['Art_action'],                 'L_ARTICLES' => $lang['Articles'],                 'L_ORDER' => $lang['Update_order'],                   'S_ACTION' => append_sid( $module_root_path . "admin/admin_kb_cat.$phpEx?mode=create" ) )             );         // get categories         $sql = "SELECT *                 FROM " . KB_CATEGORIES_TABLE . "             WHERE parent = 0 ORDER BY cat_order ASC";           if ( !( $cat_result = $db->sql_query( $sql ) ) )         {             mx_message_die( GENERAL_ERROR, "Could not obtain category information", '', __LINE__, __FILE__, $sql );         }           $ss = 0;         while ( $category = $db->sql_fetchrow( $cat_result ) )         {             $category_details = $category['category_details'];             $category_articles = $category['number_articles'];               $category_id = $category['category_id'];             $category_name = $category['category_name'];             $temp_url = append_sid( $module_root_path . "kb.$phpEx?mode=cat&cat=$category_id" );             $category_link = '<a>' . $category_name . '</a>';               $temp_url = append_sid( $module_root_path . "admin/admin_kb_cat.$phpEx?mode=edit&cat=$category_id" );             $edit = '<a><img></a>';               $temp_url = append_sid( $module_root_path . "admin/admin_kb_cat.$phpEx?mode=delete&cat=$category_id" );             $delete = '<a><img></a>';               $temp_url = append_sid( $module_root_path . "admin/admin_kb_cat.$phpEx?mode=up&cat=$category_id" );             $up = '<a>' . $lang['Move_up'] . '</a>';               $temp_url = append_sid( $module_root_path . "admin/admin_kb_cat.$phpEx?mode=down&cat=$category_id" );             $down = '<a>' . $lang['Move_down'] . '</a>';               $row_color = ( !( $ss % 2 ) ) ? $theme['td_color1'] : $theme['td_color2'];             $row_class = ( !( $ss % 2 ) ) ? $theme['td_class1'] : $theme['td_class2'];               $template->assign_block_vars( 'catrow', array( 'CATEGORY' => $category_link,                     'CAT_DESCRIPTION' => $category_details,                     'CAT_ARTICLES' => $category_articles,                       'U_EDIT' => $edit,                     'U_DELETE' => $delete,                     'U_UP' => $up,                     'U_DOWN' => $down,                       'ROW_COLOR' => '#' . $row_color,                     'ROW_CLASS' => $row_class )                 );               $i++;             $ss++;             $ss = get_kb_cat_subs_admin( $category_id, '1', '    ', $ss );         }         break;}  $template->pparse( 'body' );include_once( $mx_root_path . 'admin/page_footer_admin.' . $phpEx );  ?>
Last edited by Juppertje on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

Juppertje
Integra Member
Integra Member
 
Posts: 113
Likes: 0 post
Liked in: 0 post
Joined: Sat May 20, 2006 12:12 pm
Cash on hand: 0.00

PostAuthor: Master Dwarf » Sat Aug 18, 2007 6:38 am

For Merging Topics

#
#-----[ OPEN ]------------------------------------------
#
/yourportalroot/merge.php

#
#-----[ FIND ]------------------------------------------
#
define('IN_PHPBB', True);

#
#-----[ AFTER, ADD ]------------------------------------------
#
define('CT_SECLEVEL', 'MEDIUM');
$ct_ignorepvar = array('topic_title');
Last edited by Master Dwarf on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
Sean Kelley
http://www.GrumblingDwarf.com
Wisconsin Region Game Site
User avatar
Master Dwarf
Integra Supporter
Integra Supporter
 
Posts: 102
Likes: 0 post
Liked in: 0 post
Joined: Sun Apr 09, 2006 8:26 am
Cash on hand: 0.00
Location: Madison, WI

Re: CrackerTracker Exploit False Positives

PostAuthor: jomasaco » Mon Oct 01, 2007 2:33 am

And for the global news on Crack Tracker.
when i try to put a msg always gives me that stupid error, and i canÂÂ ´t pass this out.
what is the fix?
Last edited by jomasaco on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

jomasaco
Members
Members
 
Posts: 31
Likes: 0 post
Liked in: 0 post
Joined: Wed Jun 20, 2007 1:16 am
Cash on hand: 0.00

Re: CrackerTracker Exploit False Positives

PostAuthor: salmercker » Tue Nov 06, 2007 1:24 pm

ok deos anyone have the fix for the album_cat ? i did what ctracker told me and im still getting that error. everytime i try to create a new catagory. im about to just say screw it and do a work around by renaming the folder lol

also not sure if this is conserning ctracker or not but also get this error after i try to view a photo uploaded.

Fatal error: Cannot redeclare acronym_pass() (previously declared in /home/dragosia/public_html/album_mod/album_bbcode.php:3597) in /home/dragosia/public_html/includes/bbcode.php on line 1422
Last edited by salmercker on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

salmercker
Members
Members
 
Posts: 42
Likes: 0 post
Liked in: 0 post
Joined: Sat Sep 01, 2007 8:42 pm
Cash on hand: 0.00

Re: CrackerTracker Exploit False Positives

PostAuthor: CaNNon » Tue Nov 06, 2007 5:07 pm

I didn't need any for that file, could you post your debug info?
Last edited by CaNNon on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
Image
Image
User avatar
CaNNon
Sr Integra Member
Sr Integra Member
 
Posts: 750
Likes: 0 post
Liked in: 0 post
Joined: Thu Apr 19, 2007 11:15 am
Cash on hand: 0.00

Re: CrackerTracker Exploit False Positives

PostAuthor: ThePlague » Sat Nov 10, 2007 9:32 am

Trying to set avtars to display as always because non members cannot see them.
PCP Wizzard >> Alter Page Display >> user_avatar


Debug Info:

Code: Select all
   ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++Script-Filename]------------------------------------------#/admin/admin_pcp_wizard.php  ##-----[ FIND ]------------------------------------------#require('./pagestart.' . $phpEx);  ##-----[ AFTER, ADD ]------------------------------------------#define('CT_SECLEVEL', 'MEDIUM');$ct_ignorepvar = array('style_user_rank_title','style_user_warnings');  ##-----[ SAVE/CLOSE ALL FILES ]------------------------------------------## EoM    



Debug Does Not Work. Anyone Have A Fix?
Last edited by ThePlague on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

ThePlague
Newbie
Newbie
 
Posts: 15
Likes: 0 post
Liked in: 0 post
Joined: Sat Nov 10, 2007 4:25 am
Cash on hand: 0.00

Re: CrackerTracker Exploit False Positives

PostAuthor: CaNNon » Sat Nov 10, 2007 4:19 pm

try this one.

Code: Select all
define('CT_SECLEVEL', 'LOW');$ct_ignorepvar = array('style_username','style_user_online','style_user_avatar','style_user_from','style_user_regdate','style_user_gender','style_user_age','style_user_posts','style_user_cashpr','style_user_cashtp','style_user_holidays','style_user_country','style_user_warnings','style_user_sig','style_user_photo','style_user_birthday','style_user_pm','style_user_album','style_user_email','style_user_website','style_user_aim','style_user_yim','style_user_msnm','style_user_skype','style_user_icq','style_user_rank_title','style_user_session_time','style_user_session_page','style_user_my_friend','style_user_my_ignore','style_user_posts_stat');
Last edited by CaNNon on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
Image
Image
User avatar
CaNNon
Sr Integra Member
Sr Integra Member
 
Posts: 750
Likes: 0 post
Liked in: 0 post
Joined: Thu Apr 19, 2007 11:15 am
Cash on hand: 0.00

Re: CrackerTracker Exploit False Positives

PostAuthor: ThePlague » Sun Nov 11, 2007 9:16 am

Thanks CaNNon

I Tried it but it's still refusing to let me change the display avatar option.

Think I might do what others have done.. Remove CT.
Not much point using it when all I have seen and read that it does is block out legitmate changes.

I am aware that its buggy, but for all the hasle it causes to admins it defeats the object of running it. Will wait for the bugs to be patched once and for all I think.

I have lots of CT messages appearing when I am trying to perform legal opporations within my ACP too many to sit and debug everytime lol.

Integramod itself works great, just what I needed for my clan site but CT is making setting it up a nightmare.

No offence to CT but its not for me yet.

Reminds me of the gaming anti cheat software punkbuster. We run it on our call of duty 2 multiplayer gaming server and all I have seen it remove is legitmate players including me lol
Last edited by ThePlague on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

ThePlague
Newbie
Newbie
 
Posts: 15
Likes: 0 post
Liked in: 0 post
Joined: Sat Nov 10, 2007 4:25 am
Cash on hand: 0.00

Re: CrackerTracker Exploit False Positives

PostAuthor: CaNNon » Sun Nov 11, 2007 10:12 am

ROFLMFAO!
Yea good pick on that one, I know punkbuster all to well!
errrr.... do we know each other?

Try this first some others have used it to work around CT and well it worked for them. Rename the CT folder now your going to see a lot of errors at the top of each page but it's going to run make your fix's and then restore the folder name.

That ct progie is a lot of troubles to get running with all the things in this mod but trust me when your looking over the hack attempts in the log you'll be glad you have it. <img>
Last edited by CaNNon on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
Image
Image
User avatar
CaNNon
Sr Integra Member
Sr Integra Member
 
Posts: 750
Likes: 0 post
Liked in: 0 post
Joined: Thu Apr 19, 2007 11:15 am
Cash on hand: 0.00

Re: CrackerTracker Exploit False Positives

PostAuthor: ThePlague » Sun Nov 11, 2007 10:24 am

Hehehehe..

Funny but your name does look familiar :)

1.4.1 has proved really usefull... I spent 2 hours when I first installed it looking for a package manager to install mods with, then I realised that was the SMF forum system with a package manager ROFL!

Cheers CaNNon!
Last edited by ThePlague on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

ThePlague
Newbie
Newbie
 
Posts: 15
Likes: 0 post
Liked in: 0 post
Joined: Sat Nov 10, 2007 4:25 am
Cash on hand: 0.00

Re: CrackerTracker Exploit False Positives

PostAuthor: CaNNon » Sun Nov 11, 2007 10:29 am

Happy hunting m8!
Last edited by CaNNon on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
Image
Image
User avatar
CaNNon
Sr Integra Member
Sr Integra Member
 
Posts: 750
Likes: 0 post
Liked in: 0 post
Joined: Thu Apr 19, 2007 11:15 am
Cash on hand: 0.00

PreviousNext

Return to IntegraMOD 141

Who is online

Registered users: Bing [Bot], Google [Bot], Vendethiel