CRACKER TRACKER PATCH Updated: 5-17-2007

[ZacFields]

This patch has been updated as of 4-22-2007. If you install this patch and still have cracker-tracker problems please post the specific problems here and I will work on adding to my patch.

Teelk has also been a large contributor to this patch as well, along with the help of all of you!

*INSTRUCTIONS*

1. Upload and override the file! (Yes, now there is only 1 file)

---------------------------------------------------------------------------------------

Let it be known that I operate a fully-functional forum that is running IntegraMod 1.4.1 with these files that have been patched. If anyone downloads this patch and is still getting errors doing something, please respond to this topic with EXACTLY what you were trying to do and I will try to update my patch.

[ZacFields]

For anyone with questions, again, this is just a SMALL patch of a few files so that you all can work on your forums.

I will add to this patch as I find more fixable issues with it. This is just a *make-shift* patch to buy the devs time to create their own official patch.

I will update the DATE on the topic everytime I update the patch, so come back periodically to re-download the patch.

IF YOU HAVE MODIFICATIONS INSTALLED ALREADY: Please make sure your modifications aren't affected by these files (they shouldnt' be for the most part)

Zac

[ZacFields]

Also for the admins on this site:

If you guys want to check these fixes, be my guest. Also inform me of anything I might have missed.

Zac

[Skywalker]

maybe you could make file edit instructions, for the modded boards...
not everyone can just overwrite files...

[ZacFields]

Skywalker,

None of the files in that edit should have been included in any of your modifications except maybe the profile.php file.

However, today I am working on a patch that will include all those fixes and they will all be in one file. Once I am done with this and done testing, I will update this patch and it will be as simple as just over-riding that one file (and it's a cracker-tracker file so you'll have no preexisting modifications to it).

I dont' know when it will be done... very soon <img>

Zac

[HoRuZ]

Hey, nice work on this patch.
Since I used it I can edit field defenitions and add fields into PCP.
Only thing is, that my forum management doesn't let me add, edit or delete forums.
And when I put back my backed up files, this problem doesn't solve.

[Imajica]

Zac,

excellent patch... got me working quick

thanks

Imajica

[ScottDaMan]

HoRuZ, that is very off because it includes the fix for adding, modifying, and deleting forums. Its posted elsewhere but the original admin/admin_forums_extend.php has

Code: Select all

$ct_ignorepvar = array('create','delete','name','icon');

and you need

Code: Select all

$ct_ignorepvar = array('create','delete','name','icon','desc');

Are you sure you replaced this file on your forum?

BTW Zac, thanks for this. I am a little frustrated with CrackerTracker not already being tested before the final release of IM141. These changes should have been made beforehand, however, I do appreciate the patched files. Huge help for all of us not wanting to find everything wrong first and debug CT

[ScottDaMan]

I just uploaded the patch and the forum add, modify, and delete functions work perfectly for me. If you did in fact upload the changed admin/admin_forums_extend.php, I'm not sure what to suggest.

[ZacFields]

Thanks for all the compliments guys. I had a feeling this patch might make a few people feel better.

IntegraMod has since made me a dev, so all the other devs and I are working very hard on our own live forums to collect all the errors that crackertracker is giving and create patches for them.

I have still had some reported crackertracker messages so we will be compiling those patches asap and trying to get them out soon.

Zac

[Skywalker]

Skywalker,

None of the files in that edit should have been included in any of your modifications except maybe the profile.php file.

However, today I am working on a patch that will include all those fixes and they will all be in one file. Once I am done with this and done testing, I will update this patch and it will be as simple as just over-riding that one file (and it's a cracker-tracker file so you'll have no preexisting modifications to it).

I dont' know when it will be done... very soon <img>

Zac

got some news about this already?

[ZacFields]

Well before we release a full patch, we want to get everything tested to make sure it truly is as "full" as we can get it.

We're adding new fixes to it everyday though, and over this weekend I'm going to try and get as many fixes in as I can find.

I don't really have a time-frame to give ya...but this is something that shouldn't take too long.

Zac

[krillmeed]

I have had to put quiet a few ones in for the Album; I will make a list and post it here <img>

[HoRuZ]

HoRuZ, that is very off because it includes the fix for adding, modifying, and deleting forums. Its posted elsewhere but the original admin/admin_forums_extend.php has

Code: Select all

$ct_ignorepvar = array('create','delete','name','icon');

and you need

Code: Select all

$ct_ignorepvar = array('create','delete','name','icon','desc');

Are you sure you replaced this file on your forum?

Yeah, but I have it solved now.
Somehow the CHmods on all needed files were put back to 664 and 774.
After re-CHmodding them it worked awesome again.
Here's a list I have collected in ct_security.php

// Some fields in $HTTP_POST_VARS don't get checked to prevent wrong detection
$unchecked_post_fields = array ('meta_de.scription','meta_keywords', 'meta_copyright', 'long_desc',
'board_disable_msg', 'site_desc', 'smtp_host', 'donate_de.scription',
'user_realname', 'avatarurl', 'style_user_icq', 'user_email',
'style_username','style_user_online','style_user_avatar',
'style_user_rank_title','style_user_from','style_user_gender',
'style_user_age','style_user_posts','style_user_cashtp',
'style_user_country', 'style_user_warnings', 'style_user_owntitle',
'forum_desc', 'field_det_explain', 'desc', 'create', 'delete', 'name',
'icon', 'cat_desc', 'icon_desc');

[AM]

I'll try this patch. Someone sent me over to this thread because I had posted about CrackerTracker taking over my site configuration.

I can't add or change de.scriptions to the forums and categories. I've been doing that through the database itself.

[tmotley]

This fixed my pcp problems... thank you.

[Omni-Lee]

I have to thank you. This helped me get through the PCP.

I had previously edited my admin_pcp_wizard.php, so the change you made to another file must have carried over.

[tekguru]

Cheers for those I'll try them myself now!

[Gattsu]

hm, i updated ..
and on one site it works update
but on another
i still get a pcp wizard fake exploti..
i patched 10 times atleast...
i dont get it why works on other etegra

[AM]

ZacFields, thanks for the patch. I'm finally able to edit my forums!

[thatjoeguy]

Thanks for the effort. I'm not getting any CTracker issues, but whenever I create a new Category, it places is at the top no matter what I do. The little move-up and move-down arrows have no effect, and no settings I use when I edit will change the category's position.

Any ideas?

[Wiked]

I did the update but PCP still won't work for me.

I just want to change the values list.

By the way what CHMOd should they all be as I have everything I can think of.

This is driving my nuts.

[Gattsu]

can you fix it for ranks ... ?


error is when i try to add a special rank

[ZacFields]

I have updated this patch as of 4-22-2007.

Zac

[CaNNon]

I just put the fix on a fresh install with no ct fix's I'll let you know how it goes <img>

[Wiked]

I tried the new patch and still get the errors when trying to go into PCP and try to adjust [tables linked, values list & Classes].

[geoff1]

Workes ace, gets rid of all those nasty

Sounds like you need to throw ctracker into debug, then do what you were trying to do again then use the suggested fix, it is worth it... honest <img>

[.QUACK.Major.Pain]

Done the update and asked all of my members to be on the look out for that nasty CT screen and let me know so I can pass on the info.

Great job gang!!!

[ZacFields]

I tried the new patch and still get the errors when trying to go into PCP and try to adjust [tables linked, values list & Classes].

We do not currently have a fix for that problem as of yet. For now, apply this:

Open
admin/admin_pcp_wizard.php

Find
define('IN_PHPBB', true);

After, Add
define('CT_SECLEVEL', 'LOW');

This should fix your problem for the time-being. I will probably add this into the "readme" file on the patch soon. I haven't decided since it's not really a patch but rather nearly disabling ctracker for pcp.

Zac

[Wiked]

I added that line and still have the same drama.

Can anybody else change settings in ADMIN/PCP.

[ZacFields]

can you post exactly what you're doing in PCP? Everything I've been doing in PCP seems to work fine.

Zac

[Whisky]

I've got problems with PCP myself, on about all fetures, linked tables, values lists, wizard etc...

the impcated files does contain the DEFINE CTLEVEL MEDIUM thing but it is not sufficient, I have to define level as "LOW" to make them working

[Wiked]

I am just going into PCP>>Values List and then choose ANY item and look at it and then either change some value or even just click SAVE with no change and then the screen of death will come up.

It does the same thing in all parts of PCP. But I am just trying to change a value in one of my lists.

I had to change it in the actual file itself which is quite a pain compared to the PCP feature in ADMIN.

[CaNNon]

Well after 4 or 5 days of working with the fix on a new install, CT has only gone off 4 times. On the other forum it went off like 30 times a day.

I would say you guys did a great job on the fix!

[ZacFields]

Wicked,

Here is a quick solution to your PCP problem until the dev team and myself can find the specific field that is triggering the crackertracker. It's the same instructions for the other pcp fix but this time it's with a different file.

Open
admin/admin_pcp_valueslist.php

Find
define('IN_PHPBB', true);

After, Add
define('CT_SECLEVEL', 'LOW');

This should fix your problem wicked and anyone else who is having problems with the pcp values list feature.

Let us know.

Zac

[ZacFields]

Cannon,

Thanks for your compliments. The E-Tegra dev team worked hard on this with me. Teelk provided at least half of the patches himself and also helped me to reformat my entire patch so that it now only includes one file instead of many files.

We will continue to make it better as we find more fixes for crackertracker.

Zac

[CaNNon]

Yea the 1 file bit, just makes it that much sweeter. <img>

[Wiked]

Zac,

Yes that worked.

Thanks a lot.

[DjPorkchop]

Now for the Million $$ question........ Will this patch help IM Portal users as well that have the same exact issues as Integramod with CTracker?

[ZacFields]

I have updated this as of 5-17-2007. This is a quick fix that just includes fixing the error received when trying to edit album categories.

Hopefully the next update will be coming soon and it will have a lot more fixes on it!

And for MWE: The answer to your question is "Yes." This patch should work equally well for IM portal users.

Zac

[Omni-Lee]

Thank you for developing this patch. I am unsure if it contains a fix for the Mass Email and PM Hacking Attempt error message.

I still recieve that error when trying to send Mass PM's.

Any word regarding this issue would be greatly appreciated.

[ZacFields]

I had been neglecting this project the last couple months. But I'm going to dig through the forums soon and find out what messages people are still receiving and I will add some more to the patch. Within hopefully a few days I will be able to release a patch that is near complete.

Zac

[.QUACK.Major.Pain]

The mass email and pm function that gives "hacking attempt" isn't a CT error is it?

[CaNNon]

BUMP!

[Waynder]

nevermind...

[e3jeremey]

Wanted to let you all know that every issue I was having setting up subforums or forum groups was fixed with your patch, so thank you! However I want you to know that even with your patch whenever I went into my configuration settings and attempted to set up my paypal donation information I would get the pink box of doom. Wasn't sure if anyone was aware of that or had some ideas.....

[Dick Dynamite]

Changing currency names for Cashmod gives the PBoD.

[gbrian]

I'm lost.
Where can I get the patch file?

Been reading this forum for the past 4 days...

Need help..

Thanks.

[.QUACK.Major.Pain]

LOL gbrian.

You spent 4 days.

Did you try looking at the first post in this topic? It's sitting right there.

[gbrian]

silly me...thanks man...

Must have been overlooked...

[hypertec]

i installed your patch, but i still seem to be having problems. my major issue is that i get the CT error when i try to mass delete users. also, i or any other member on my forum are unable to delete private messages in our inbox. how can i fix this?

[Helter]

the patch just adds many of the most common functions, for many functions you still need to resort to the manual debug process, which is annoying but fairly simple

[CaNNon]

the CRACKER TRACKER mod has also been updated, the link is here.

[url=http]http://www.integramod.com/forum/viewtopic.php?t=4134[/url]

As it too contains a lot of fixes you may find it more help full, in fact it overwrites the ct_security.php file that this patch was in.

[hypertec]

well, i was able to fix the private message problem with the suggestions form the debug information.

however, i tried to follow the instructions from the debug for the mass user delete and it didn't work.

is there anyways you can turn off the security for jsut one piece, like have it ignore the rules for that issue?

i tried setting the security level on low but that didn't work either. what is the correct way to use the delheuristic function?

im using 5.0.3, i don't feel like updating to 5.0.4, i'd rather just uninstall it altogether.

[CaNNon]

Post the suggested fix your seeing and i will check it to mine.

s there anyways you can turn off the security for jsut one piece, like have it ignore the rules for that issue?

This is what debug is doing for you telling the .script to not to bother with this one array in this file.

[hypertec]

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Script-Filename: /admin/admin_mass_delete_users.php
----------------

Request-Method: POST

Matching rule: delete
In variable: deleteusers

Possible solution:
------------------

#
#-----[ OPEN ]------------------------------------------
#
/admin/admin_mass_delete_users.php

#
#-----[ FIND ]------------------------------------------
#
require('./pagestart.' . $phpEx);

#
#-----[ AFTER, ADD ]------------------------------------------
#
define('CT_SECLEVEL', 'MEDIUM');
$ct_ignorepvar = array('deleteusers');

#
#-----[ SAVE/CLOSE ALL FILES ]------------------------------------------
#
# EoM

[Helter]

this file
admin/admin_mass_delete_users.php does not exist in IM 141

also remember that CTracker is case sensitive

Code: Select all

 define('CT_SECLEVEL', 'LOW');$ct_ignorepvar = array('deleteusers');

[CaNNon]

Your running a mod, I just googled it. Please provide a link to the one you used.

Mod Title: Admin Mass Delete Users

Included Files:

admin_mass_delete_users.php
lang_admin_mass_delete_users.php
admin_mass_delete_users.tpl


Thanks Helter, I spent a while trying to find where he was setting this off. <img>

[hypertec]

o man im sorry guys!

i got this mod from phpbbhacks.com

i don't use IntegraMOD yet

here is the link:
http://www.phpbbhacks.com/download/1692

[CaNNon]

Try this an see what error you get, I'm not sure but the var deleteusers is not used again and it seems to point to users? I'm guessing from line 41:

if( $HTTP_POST_VARS['deleteusers'] && $HTTP_POST_VARS['users'] )

Code: Select all

define('CT_SECLEVEL', 'LOW');$ct_ignoregvar = array('deleteusers','users');

I don't want to load the files as it isn't showing my php version in the list.

[hypertec]

nope, didn't work either, thanks for the suggestion though. i tried on LOW and MEDIUM and nothing worked

[DjPorkchop]

What do you do when there is no Debug info given in Cracker Tracker. Example....Im working on a guys arcade for him and CTracker is going screaming nuts on me. Go to Ctracker logs and no debug entries exist.

Now that being said, I have started rebuilding my 1.4.1 site as well and it is a FRESH install of the latest release and Ctracker is doing the smae thing to tme there. No debug info to fix anything with.

Im at a standstill now until I can figure this out. AM I correct in saying that the latest install has this particular patch installed as well and then some?

[CaNNon]

No this is not included in im141. This was released after it and it overwrites the additional patch you find in the forums. You have followed the debug info to start debug? give this a quick look should help.
[url=http]http://www.integramod.com/forum/kb.php?mode=article&k=22[/url]

[DjPorkchop]

Ok I thought they added all the updates to the newest release (1.4.1b) as we know this is the 2nd coming of 1.4.1

Its a brandnew install of IM 1.4.1b its been online idle for a month now looking for hackers and how they get in as you can tell by my posts the last couple of days.

This patch here was released WAY before 1.4.1b came out here recently. So in all fairness, this patch should have ,if it wasnt, been installed in this release. Thats why I didnt know if it would do me any good to install this patch or not.

[CaNNon]

I don't think were understanding each other.

This is not the patch, and yes the patch is probably in the im141.b version and can still be found around here. This is a new version of the full CrackerTracker program.
It also overwrites the patched file if you have applied the patch.

I sent you here to save you work, not make more for you.... <img>

[DjPorkchop]

oops ! My bad bro. <img> I cross threaded. I have been running myself ragged the past few days with my own websites and a few others too boot they are all running together now. lol Ill have to check that update of CTracker out tonight after I get off the radio. Sry for the misunderstanding

[CaNNon]

Don't feel bad we both are... I thought I linked you to this tread?
[url=http]http://www.integramod.com/forum/viewtopic.php?t=4134[/url]
<img>

[salmercker]

maybe i downloaded the wrong file but the onyl file that was in the download for hte patch was ct_security.php so is that the only file you got patched? i just downloaded and installed the newest version of integramod 1.4.1 and im having the darn ctracker errors on downloads, album, and a few other areas that i cant remember off hand and NONE of the debug info is helping me at all! i managed to get one test catagorey for my downloads and my albums before it started blocking them again!

[DjPorkchop]

I upgraded CTracker as well and alerts everywhere. I cant do anything hardly at all.

Followed debug down to the T for P.C.P for example and even ignored it and still it goes off.

The upgrade was of no help at all.

[CaNNon]

You mean in pcp wizard the 4th down alter display?
Thats a rough one but if thats it, i have already done it and will post it for you.

Just need you to give me the file name, as i delete the error logs asap.

[CaNNon]

This is the one I did all the work sorting out, sorry it's so long But i have cleaned out all the double entries. A couple of the edits still need the low setting so make sure you keep it.

/admin/admin_pcp_wizard.php

Code: Select all

define('CT_SECLEVEL', 'LOW');$ct_ignorepvar = array('style_username','style_user_online','style_user_avatar','style_user_from','style_user_regdate','style_user_gender','style_user_age','style_user_posts','style_user_cashpr','style_user_cashtp','style_user_holidays','style_user_country','style_user_warnings','style_user_sig','style_user_photo','style_user_birthday','style_user_pm','style_user_album','style_user_email','style_user_website','style_user_aim','style_user_yim','style_user_msnm','style_user_skype','style_user_icq','style_user_rank_title','style_user_session_time','style_user_session_page','style_user_my_friend','style_user_my_ignore','style_user_posts_stat');  

[Mr.Black]

Ok i'm trying to edit an acronym. Each time i do it still comes up with the error. Don't know what i'm doing wrong here.

[CaNNon]

Follow the directions to get the debug info and post it please.

[Helter]

if your not getting CTracker logs, check your ctracker chmods. If they are not correct, CTracker cannot write to them