Getting Hacking Attempt Message

[.QUACK.Major.Pain]

Your phpBB Version: 2.0.
phpBB Type: Integramod 141
MODs: No
Your knowledge: Beginner
Board URL: http://aaquacks.com/forum

PHP Version:
MySQL Version:


What was done before the problem appeared?
define('CT_SECLEVEL', 'MEDIUM');
$ct_ignorepvar = array('send');

in admin/admin_email_users.php


What was done to try to solve the problem?
none



De.scription and Message

I went into General Admin/Mass Email & PM section, click on a box next to a name and then clciked on Send A Email Or PM at the top of the page. I then got the cracker tracker error. I did the suggested debug listed above. Then I tried to do same sequence again, and now I don't get the cracker tracker error, I get a little message in top left of the screen stating 'Hacking Attempt'.

What's the fix now?

[Helter]

try changing
define('CT_SECLEVEL', 'MEDIUM');
to
define('CT_SECLEVEL', 'LOW');

[.QUACK.Major.Pain]

already tried that and still get same message

[Teelk]

Try moving...

Code: Select all

define('IN_PHPBB', true);

... above this code...

Code: Select all

if( !empty($setmodules) ){     $file = basename(__FILE__);     $module['General']['Mass_Email_Users'] = $file;     return;}  

[.QUACK.Major.Pain]

Did that change and still get: 'Hacking attempt!' message

[Teelk]

Wow, this is the second post today that I've found that I gave a really bad answer to. I was so tired yesterday lol.

Ok, the admin/ folder files aren't used to generate the modules anymore, the admin/modules folder is. You're getting a hacking attempt because the file admin/modules/admin_email_users.php isn't defined as a viewable file.

So, open admin/modules/admin_email_users.php

FIND

Code: Select all

if( !empty($setmodules) ){     $file = basename(__FILE__);     $module['General']['Mass_Email_Users'] = $file;     return;}

BEFORE ADD

Code: Select all

define('IN_PHPBB', true);

Congrats, you found an actual bug. <img>

[.QUACK.Major.Pain]

OK tried that too - same result - same message

I tried clicking box next to name and then clicking Send An Email Or A PM = hacking attempt!

I tried clicking box next to name and then clicking Add The Selected Users = hacking attempt!

Am I doing it right?

Must be having fun sorting out all the bugs. Guess ya take em 1 at a time. LOL

[Omni-Lee]

Has a fix been found for this? The ones supplied within this thread do correct the Hacking Attempt! error.

[.QUACK.Major.Pain]

define('IN_PHPBB', 1); define('IN_PHPBB', true);

Are the above 2 the same? The left is used in debug, the right is in the actual file.

The above fix doesn't work. I still get the "Hacking Attempt!!!" message.

The original files trigger CT error.
When you do the debug that is suggestted, that's when you get the hacking attempt error.

[Frost]

I tried doing the suggestions mentioned above and like them found it doesn't work.

So here's what I've seen if it helps.

When using debug mode, the ctracker warning is not logged as a debug, but as a "Worm & Exploit Protection"

Inside the logs it reads...

Appeal - /forum/admin/admin_email_users.php?

Referer - http://www.black-fusion.com/forum/admin ... 6798fba1d2

I tried...

Editing both admin_email_users.php in admin/ and admin/modules/
Changing around.. etc

[.QUACK.Major.Pain]

Bump - Is anyone still looking at this??? <img>

[Ezra]

I wanted to give this topic a bump, because this problem isn't solved yet. I also tried the options given, but with no result.

Does anyone have any idea how to fix this error? Thanks.

Greetings,
Ezra

[Ezra]

I hope I don't sound impatient. But, I was really hoping that you guys can look into this. Unfortunately I can't do it myself, so I need your help on this.

I have to send a large group of users an email, so I would really like this function to work. I'm a n00b on programming, so I don't know if I aks a simple or difficult question.

Maybe you can at least let me know if you're working on it or not, if not, I have to find another easy way to email a selection of my users.

Thanks!
Ezra

[Helter]

I cannot reproduce the problem. On this site, I opened

/forum/admin/admin_email_users.php

found

define('IN_PHPBB', true);

after that, I added

define('CT_SECLEVEL', 'LOW');
$ct_ignorepvar = array('send');

problem solved.

here is the begining of the file

Code: Select all

 <?php/***************************************************************************  *                                      admin_email_users.php  *                                   ------------------  *  *   begin                             ]['Mass_Email_Users'] = $file;     return;}  define('IN_PHPBB', true);  define('CT_SECLEVEL', 'LOW');$ct_ignorepvar = array('send');  $phpbb_root_path = '../';require($phpbb_root_path . 'extension.inc');require("pagestart.$phpEx");include($phpbb_root_path.'language/lang_' . $board_config['default_lang'] . '/lang_admin_mail_users.'.$phpEx);include($phpbb_root_path . 'includes/functions_post.'.$phpEx);include($phpbb_root_path . 'includes/bbcode.'.$phpEx);  

[.QUACK.Major.Pain]

Had that change but set to medium - I changed it to low and tried.
Still same result - I select a box and then click on Send email or PM

Result: Hacking attempt!

Gotta be something wrong with the coding.

Have to find the file that puts up the message "hacking attempt'