Sub Menu
Links Menu
Online Users

In total there are 318 users online :: 3 registered, 0 hidden and 315 guests

Most users ever online was 1091 on Wed Aug 16, 2023 5:27 pm

Registered users: Bing [Bot], Google [Bot], Majestic-12 [Bot] based on users active over the past 60 minutes

CrackerTracker took over my site

This is where youll find security related information.
Discuss Integramod/phpbb security issues here.

Moderator: Integra Moderator

CrackerTracker took over my site

PostAuthor: AM » Sun Jan 21, 2007 8:03 am

Is there any way to turn off CrackerTracker? It won't allow me to configure the site, set up forums or do anything in the admin center.

No matter what I do, it thinks it's a worm attack, and I get a forum set up just the way I want it, and a security alert stops me from saving my configurations. Then I have to start all over again.

Is this security alert going to keep happening when people try to post to the forum, and they will lose their entire post?
Last edited by AM on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

AM
Members
Members
 
Posts: 33
Likes: 0 post
Liked in: 0 post
Joined: Thu May 18, 2006 10:34 am
Cash on hand: 0.00

Re: CrackerTracker took over my site

PostAuthor: Drop-Forged » Sun Jan 21, 2007 8:36 am

I dont think we can just turn CrackerTracker, but Im not sure.


Have you tried following the instructions in the KB article???


http://www.integramod.com/forum/kb.php? ... ticle&k=22


If that doesnt help, it should at least give you some info that you can post to help figure out where the problem is.

Im afraid these problems come along with the territory of adding a security mod like CT to IM, hopefully the bugs will be worked out soon.
Last edited by Drop-Forged on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
[url=http][img=left]http://www.christiansoldiers.com/Sig/sig.png[/img][/url]
[url=http]Free IntegraMod 141 Themes at webhutch.net[/url]

Drop-Forged
Integra Member
Integra Member
 
Posts: 167
Likes: 0 post
Liked in: 0 post
Joined: Sat Apr 08, 2006 7:07 pm
Cash on hand: 0.00

PostAuthor: AM » Mon Jan 22, 2007 3:31 pm

DF, I did everything that article said to do, and I still can't configure the site.

It doesn't allow me to add de.scriptions to anything. I can add forums and categories, but not de.scriptions.

I can't make changes to the welcome message either. It views that as a "worm" attack.
Last edited by AM on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

AM
Members
Members
 
Posts: 33
Likes: 0 post
Liked in: 0 post
Joined: Thu May 18, 2006 10:34 am
Cash on hand: 0.00

Re: CrackerTracker took over my site

PostAuthor: fish222222 » Mon Jan 22, 2007 4:48 pm

I am having a bunch of issues too. I get this debug info, but I am not fluent enough with PHP to know what I need to edit...

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Script-Filename: /forums/admin/admin_forums_extend.php
----------------

Request-Method: POST

Matching rule: and
In variable: desc

Possible solution:
------------------

#
#-----[ OPEN ]------------------------------------------
#
/forums/admin/admin_forums_extend.php

#
#-----[ FIND ]------------------------------------------
#
define('IN_PHPBB', 1);

#
#-----[ AFTER, ADD ]------------------------------------------
#
define('CT_SECLEVEL', 'MEDIUM');
$ct_ignorepvar = array('desc');

#
#-----[ SAVE/CLOSE ALL FILES ]------------------------------------------
#
# EoM

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Script-Filename: /forums/admin/admin_forums_extend.php
----------------

Request-Method: POST

Matching rule: and
In variable: desc

Possible solution:
------------------

#
#-----[ OPEN ]------------------------------------------
#
/forums/admin/admin_forums_extend.php

#
#-----[ FIND ]------------------------------------------
#
define('IN_PHPBB', 1);

#
#-----[ AFTER, ADD ]------------------------------------------
#
define('CT_SECLEVEL', 'MEDIUM');
$ct_ignorepvar = array('desc');

#
#-----[ SAVE/CLOSE ALL FILES ]------------------------------------------
#
# EoM

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Script-Filename: /forums/admin/admin_forums_extend.php
----------------

Request-Method: POST

Matching rule: and
In variable: desc

Possible solution:
------------------

#
#-----[ OPEN ]------------------------------------------
#
/forums/admin/admin_forums_extend.php

#
#-----[ FIND ]------------------------------------------
#
define('IN_PHPBB', 1);

#
#-----[ AFTER, ADD ]------------------------------------------
#
define('CT_SECLEVEL', 'MEDIUM');
$ct_ignorepvar = array('desc');

#
#-----[ SAVE/CLOSE ALL FILES ]------------------------------------------
#
# EoM
Last edited by fish222222 on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

fish222222
Newbie
Newbie
 
Posts: 17
Likes: 0 post
Liked in: 0 post
Joined: Mon Jan 22, 2007 4:37 pm
Cash on hand: 0.00

PostAuthor: AM » Mon Jan 22, 2007 5:19 pm

That's very similar to what I'm getting too, only with admin/meta_tags even though that's not what I'm working on. Though it won't let me update that page either.

There must be a way to turn that cracker thing off so the forum can be configured. I have my site shut off right now because I can't configure with those security messages making me lose all my changes.
Last edited by AM on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

AM
Members
Members
 
Posts: 33
Likes: 0 post
Liked in: 0 post
Joined: Thu May 18, 2006 10:34 am
Cash on hand: 0.00

PostAuthor: Drop-Forged » Mon Jan 22, 2007 5:21 pm

"AM";p="20127" wrote:DF, I did everything that article said to do, and I still can't configure the site.

It doesn't allow me to add de.scriptions to anything. I can add forums and categories, but not de.scriptions.

I can't make changes to the welcome message either. It views that as a "worm" attack.



Yeah the KB article didnt work for me either, but it is from an Admin, so I figured people should try that first.

I have found a way that does work for my board and posted it here:



http://www.integramod.com/forum/viewtop ... 0125#20125


Im waiting for one of the pros to give some feedback, I would hate to have people following my advice if it is bad.

I also couldnt do anything when I upgraded my board until I replaced the xxx_config table in my db with a fresh one from a fresh 141 install.

But I would definitely recommend backing up your old one before trying that.
Last edited by Drop-Forged on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
[url=http][img=left]http://www.christiansoldiers.com/Sig/sig.png[/img][/url]
[url=http]Free IntegraMod 141 Themes at webhutch.net[/url]

Drop-Forged
Integra Member
Integra Member
 
Posts: 167
Likes: 0 post
Liked in: 0 post
Joined: Sat Apr 08, 2006 7:07 pm
Cash on hand: 0.00

PostAuthor: AM » Mon Jan 22, 2007 6:13 pm

I read your solution and that's all Greek to me. This is very frustrating to say the least. The old version never had this problem and I don't remember a cracker being in it.

Can't I just turn it off for now?
Last edited by AM on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

AM
Members
Members
 
Posts: 33
Likes: 0 post
Liked in: 0 post
Joined: Thu May 18, 2006 10:34 am
Cash on hand: 0.00

PostAuthor: AM » Mon Jan 22, 2007 6:14 pm

Perhaps someone can create a "Parrot Mod" so it can eat the cracker. That should turn it off.
Last edited by AM on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

AM
Members
Members
 
Posts: 33
Likes: 0 post
Liked in: 0 post
Joined: Thu May 18, 2006 10:34 am
Cash on hand: 0.00

PostAuthor: AM » Mon Jan 22, 2007 6:27 pm

Oh I get it now! Cha ching... thanks DF. I'll try that.
Last edited by AM on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

AM
Members
Members
 
Posts: 33
Likes: 0 post
Liked in: 0 post
Joined: Thu May 18, 2006 10:34 am
Cash on hand: 0.00

PostAuthor: AM » Mon Jan 22, 2007 7:04 pm

Your solution works. I can't thank you enough!
Last edited by AM on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

AM
Members
Members
 
Posts: 33
Likes: 0 post
Liked in: 0 post
Joined: Thu May 18, 2006 10:34 am
Cash on hand: 0.00

PostAuthor: AM » Mon Jan 22, 2007 7:23 pm

Well darn. That didn't solve all of it. Even though the words are in the list, it still won't let me add de.scriptions to the forums and forum categories. I'm just going to add that directly in the database. Tired of messing with the cracker.
Last edited by AM on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

AM
Members
Members
 
Posts: 33
Likes: 0 post
Liked in: 0 post
Joined: Thu May 18, 2006 10:34 am
Cash on hand: 0.00

PostAuthor: AM » Sat Feb 03, 2007 10:16 am

I'm having to configure IntegraMod directly from the phpMyAdmin database interface.

Does anyone have a fix for CrackerTracker not allowing changes through the admin control center of IM?

I've gone through all the steps in the debug mode and put the phrases in the security file, but it still won't let me configure the forums.
Last edited by AM on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

AM
Members
Members
 
Posts: 33
Likes: 0 post
Liked in: 0 post
Joined: Thu May 18, 2006 10:34 am
Cash on hand: 0.00

Re: CrackerTracker took over my site

PostAuthor: Drop-Forged » Sat Feb 03, 2007 11:08 am

There is a patch that they somewhat released, but it doesn't work on my board but it might help you, it is posted here:

http://www.integramod.com/forum/viewtopic.php?t=2830


I have a post here with more info that may help if the patch doesn't.


http://www.integramod.com/forum/viewtopic.php?t=2776




I hope this helps... <img>
Last edited by Drop-Forged on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
[url=http][img=left]http://www.christiansoldiers.com/Sig/sig.png[/img][/url]
[url=http]Free IntegraMod 141 Themes at webhutch.net[/url]

Drop-Forged
Integra Member
Integra Member
 
Posts: 167
Likes: 0 post
Liked in: 0 post
Joined: Sat Apr 08, 2006 7:07 pm
Cash on hand: 0.00

PostAuthor: AM » Sat Feb 03, 2007 12:56 pm

Thanks DF. I downloaded the patch and will post back if it works (or doesn't <img>)
Last edited by AM on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

AM
Members
Members
 
Posts: 33
Likes: 0 post
Liked in: 0 post
Joined: Thu May 18, 2006 10:34 am
Cash on hand: 0.00

PostAuthor: AM » Sun Feb 11, 2007 8:44 am

The patch worked for me. Now I can manage the forums and add de.scriptions. Thanks for the link.
Last edited by AM on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

AM
Members
Members
 
Posts: 33
Likes: 0 post
Liked in: 0 post
Joined: Thu May 18, 2006 10:34 am
Cash on hand: 0.00

Next

Return to Forum Security

Who is online

Registered users: Bing [Bot], Google [Bot], Majestic-12 [Bot]

cron