Crackertrack issues

[BMD]

Your phpBB Version: 2.0.2
phpBB Type: phpBB / INTEGRAMOD 1.4.1
MODs: No
Your knowledge: Basic Knowledge
Board URL: http://www.balloontrader.com/lta_2

PHP Version:
MySQL Version:


What was done before the problem appeared?
Forum setup...

I was just adding forums to the site and when I clicked submit I got the following (I had set up 2 catagories and 3 sub-forum prior) ....

CBACK CrackerTracker has detected a potential attack on this site with a worm or exploit .script so the Security System stopped the .script.


If you can see this page after including a new MOD into your board or after clicking on a link please contact the Board Administrator with this error message and a de.scription what you have done before you could see this page, that the Admin has the possibility to fix the problem.


What was done to try to solve the problem?
I logged out, left the site... logged back in... went back to try again with the same results.....



De.scription and Message

I gang....

I just did a whole site install of 4.1.0 install went smooth... log in ok.... log into admin ok... general setttings ok....

Problems

1)
I went to ACP/Security/Special to set up for number of admins and mods .... made the required changes and clicked submit..... seemed ok... went back to check if it accepted the changes.... they had not been changed.

2)
While adding catagoried and forums after adding a few I had the following pop up

SECURITY ALERT ÂÂÂ » ÂÂÂ » ÂÂÂ » ÂÂÂ »
CBACK CrackerTracker has detected a potential attack on this site with a worm or exploit .script so the Security System stopped the .script.


If you can see this page after including a new MOD into your board or after clicking on a link please contact the Board Administrator with this error message and a de.scription what you have done before you could see this page, that the Admin has the possibility to fix the problem.

I plan on moving over my DB Manually and adding in a few mods after I get the initial bugs exterminated.

Thanks in advance for any help.

Cheers
Doug

[Teelk]

1) The field names are randomly generated for those phpBB Security fields. Can you do me a favor and search your database for sec_admin and tell me what the value is? It's in the config table.

2) Whenever you run into this problem you need to follow this KB Article. CT blocks certain words/phrases/code when it's entered into input fields unless those input fields are added to the ignore variable. It was impossible to predict all of the things that CrackerTracker would block, as each site is different and the information you input into your fields will be different from someone else's. But, the solution, thank goodness, is very simple.

http://www.integramod.com/forum/kb.php? ... ticle&k=22

[ZacFields]

I did this and performed the fix they gave me, but unfortunately the fix that ctracker gave me was not helpful. I will continue reading through the KB article and see if I can figure it out.

Zac

[BMD]

UPDATE:

I went back after a while to try again (adding Catagories and forums, and it worked for about 3 entrees... after that the Crackertracker kicked in again....

would it be ok to just duplicate the old tables and edit what is missing due to the difference between 4.0 and 4.1.0?

are the tables that different?

Cheers
Doug

[Amarth]

I'm having the same problem. That happened when I tried to create a forum named "General Lounge." for a general section to talk in.

I also got an alert when I tried to change the Site Admin name to "Sergeant Major of the Army"

[Teelk]

Until we can figure out what the problem is specifically with each of your forums, you can open admin/admin_board.php

FIND

Code: Select all

define('CT_SECLEVEL', 'MEDIUM');

REPLACE WITH

Code: Select all

define('CT_SECLEVEL', 'LOW');

[Teelk]

Even if you do the above edit, there may be other places that you get blocked. When that happens follow the KB Article.

When you get the code, you must check the file it tells you to edit for CrackerTracker code that may already be there. It'll be in the same spot it's telling you to put the code.

Say I was being blocked in admin_board.php and debug told me to do this.

Code: Select all

 ##-----[ OPEN ]------------------------------------------#/admin/admin_board.php  ##-----[ FIND ]------------------------------------------#require('./pagestart.' . $phpEx);  ##-----[ AFTER, ADD ]------------------------------------------#define('CT_SECLEVEL', 'MEDIUM');$ct_ignorepvar = array('board_email_sig','board_disable_msg');  ##-----[ SAVE/CLOSE ALL FILES ]------------------------------------------## EoM  

But, you already have code in admin_board.php which looks like this.

Code: Select all

define('IN_PHPBB', 1);define('CT_SECLEVEL', 'MEDIUM');$ct_ignorepvar = array('cookie_name');

This is what NOT to do...

Code: Select all

define('IN_PHPBB', 1);define('CT_SECLEVEL', 'MEDIUM');$ct_ignorepvar = array('cookie_name');define('CT_SECLEVEL', 'MEDIUM');$ct_ignorepvar = array('board_email_sig','board_disable_msg');

This is what you should do...

Code: Select all

define('IN_PHPBB', 1);define('CT_SECLEVEL', 'MEDIUM');$ct_ignorepvar = array('cookie_name','board_email_sig','board_disable_msg');

Notice that I've just added the field name to the $ct_ignorepvar array. If you add the code like in the first example, the second $ct_ignorepvar isn't recognized.

This is in the KB article on the second page I think it is.

[ZacFields]

I thought that might have been my problem. I think I just didn't understand that part of the instructions. you should replace that part of your instructions with the way you described it here. Easier to use an example I think.

Thanks for the fix teelk. I think this crackertracker thing is going to be hell to get through...however, on a lighter note I haven't had any spambots since I upgraded. Before upgrading I'd have around 5-10 per day. <img>

Zac

[found it]

Hi

I have it had installed on a board since it was updated to this version and still I get hit with the very annoying alert....

As do my members when they they make post or even change their profiles....I keep updating the files as the debug suggest as it is an excellent piece of software that I would want kept in my site no matter how annoying it is...

Just my thoughts...

[Teelk]

Yup, it does make security very tight. Makes the extra work a little easier to cope with.

I think I'll redo some parts of that KB, it just a copy from the original MOD site.

[Amarth]

I'm annoyed to the point where I want to disable it -_-

[Amarth]

So...if I upload a pic and try to name it Frankie and Raven, it will not take it. Now, if I name it Frankie Raven, it will. So, it's blocking and or something? Another example I just did was naming a pic Raven's. Now CBack blocks that. However, if I just put "Raven", then it lets it through.

So, it's okay so long as I never ever use 's?

<img>

[Teelk]

Read the KB article. It'll show you how to fix that problem.

[Amarth]

That helped, though I did encounter a problem the debugger didn't get right.

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Script-Filename: /secret/admin/admin_ranks.php
----------------

Request-Method: POST

Matching rule: or
In variable: title_default
In variable: title_female

Possible solution:
------------------

#
#-----[ OPEN ]------------------------------------------
#
/secret/admin/admin_ranks.php

#
#-----[ FIND ]------------------------------------------
#
define('IN_PHPBB', 1);

#
#-----[ AFTER, ADD ]------------------------------------------
#
define('CT_SECLEVEL', 'MEDIUM');
$ct_ignorepvar = array('title_default','title_female');

#
#-----[ SAVE/CLOSE ALL FILES ]------------------------------------------
#
# EoM

What the debugger didn't get right is that it should have changed

$ct_ignorepvar = array('title_default','title_female');
to
$ct_ignorepvar = array('title_default','title_female','title_male');

It didn't even put that in the fix.

[ZacFields]

Hey Teelk,

Do you think it would be possible to (over time, of course) just create a big cracker-tracker "common fix" list? Just a lot of the stuff that people commonly run into we could just have someone merge all those fixes into one big list of things someone could just go through and add after they upgrade.

Then, of course, with the next release of IM (1.4.2) it could be released with those fixes already set in place.

I think CrackerTracker is the best thing to ever happen to IM. Sure, it's going to be a pain in the neck, but I also think anyone who makes the choice to be a webmaster should be willing to do what it takes to make this program work, because from what I can tell this CrackerTracker .script will stop virtually all exploits on your website, thus your site should not only run faster, but you are also a lot more protected from hackers. There will always be holes but CrackerTracker is a giant leap in the right direction for security.

One upgrade I think the developers of CrackerTracker should make would be instead of this generic error message when cracker tracker blocks something, the message should include specifically what was done that caused it, something like "You are not allowed to input a comma in the name of an uploaded picture" or something along those lines. But we'll get it all worked out eventually

Zac

[ayasha]

where do you turn the debug mode off? i would rather do without it than to have all these problems.

i have been sitting here all day, doing the things suggested in this thread, and in the KB, but i cannot move the forums i have made around.

and will that message stay on my index page forever? like it says?

[ayasha]

i finally got it to work <img>

[Teelk]

Hey Teelk,

Do you think it would be possible to (over time, of course) just create a big cracker-tracker &quot;common fix&quot; list? Just a lot of the stuff that people commonly run into we could just have someone merge all those fixes into one big list of things someone could just go through and add after they upgrade.

Then, of course, with the next release of IM (1.4.2) it could be released with those fixes already set in place.

I think CrackerTracker is the best thing to ever happen to IM. Sure, it's going to be a pain in the neck, but I also think anyone who makes the choice to be a webmaster should be willing to do what it takes to make this program work, because from what I can tell this CrackerTracker ..script will stop virtually all exploits on your website, thus your site should not only run faster, but you are also a lot more protected from hackers. There will always be holes but CrackerTracker is a giant leap in the right direction for security.

One upgrade I think the developers of CrackerTracker should make would be instead of this generic error message when cracker tracker blocks something, the message should include specifically what was done that caused it, something like &quot;You are not allowed to input a comma in the name of an uploaded picture&quot; or something along those lines. But we'll get it all worked out eventually

Zac

I think that's a great idea. I'll start the thread and sticky it in this forum.

[tmotley]

1) The field names are randomly generated for those phpBB Security fields. Can you do me a favor and search your database for sec_admin and tell me what the value is? It's in the config table.

I have this issue on a test site. I have looked up the field name(s) suggested. My sec_admin is sxtmxzjqtmetsaeztbpbg Don't know if that's something that will help but my Security Special settings won't save.

[Teelk]

Open includes/phpbb_security.php.

FIND

Code: Select all

    function phpBBSecurity_AdminConfigName()     {         return 'phpBBSecurity_max_admins';     }             function phpBBSecurity_ModConfigName()     {         return 'phpBBSecurity_max_mods';     }             function phpBBSecurity_UseSpecial()     {         return 'phpBBSecurity_use_max';     }

phpBBSecurity_max_admins = sec_admin value
phpBBSecurity_max_mods = sec_mod value
phpBBSecurity_use_max = sec_name value

So if the value of your sec_admin is abcdefg, then replace phpBBSecurity_max_admins with abcdefg in the phpbb_security.php file. When you updated your phpbb_security.php file probably wasn't CHMOD'd to allow the update to write to it.

[tmotley]

That did the trick. Thanks!

[ayasha]

today, i feel much better about the ctracker, but i still have some problems, so i am going to post what i do step by step as i understand things, and if i am wrong in the way i am doing things, pleas let me know, if i am right in the way i am doing it, then maybe someone can help me, i would appreciate it.

i go to my forum management and click to create a new forum, and i get this

SECURITY ALERT ÂÂÂ » ÂÂÂ » ÂÂÂ » ÂÂÂ »
CBACK CrackerTracker has detected a potential attack on this site with a worm or exploit .script so the Security System stopped the .script.


If you can see this page after including a new MOD into your board or after clicking on a link please contact the Board Administrator with this error message and a de.scription what you have done before you could see this page, that the Admin has the possibility to fix the problem.

1. i got to ctracker/engines/ct_security.php and open it and do this edit

Code: Select all

find  define('CT_DEBUG_MODE', false);  and replace it with:  define('CT_DEBUG_MODE', true);

and upload the file to my server.

2.i go back to my forum management, try to create a forum and i get this

Warning: No ending delimiter '#' found in /home/httpd/vhosts/graphicsplayhouse.com/httpdocs/forum/ctracker/engines/ct_security.php on line 357

SECURITY ALERT ÂÂÂ » ÂÂÂ » ÂÂÂ » ÂÂÂ »
CBACK CrackerTracker has detected a potential attack on this site with a worm or exploit .script so the Security System stopped the .script.


If you can see this page after including a new MOD into your board or after clicking on a link please contact the Board Administrator with this error message and a de.scription what you have done before you could see this page, that the Admin has the possibility to fix the problem.

3. i go to my log file in ctracker and it tells me to do this

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Script-Filename: /forum/admin/admin_forums_extend.php
----------------

Request-Method: POST

Matching rule: and
In variable: desc

Possible solution:
------------------

#
#-----[ OPEN ]------------------------------------------
#
/forum/admin/admin_forums_extend.php

#
#-----[ FIND ]------------------------------------------
#
define('IN_PHPBB', 1);

#
#-----[ AFTER, ADD ]------------------------------------------
#
define('CT_SECLEVEL', 'MEDIUM');
$ct_ignorepvar = array('desc');

#
#-----[ SAVE/CLOSE ALL FILES ]------------------------------------------
#
# EoM

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Script-Filename: /forum/admin/admin_forums_extend.php
----------------

Request-Method: POST

Matching rule: and
In variable: desc

Possible solution:
------------------

#
#-----[ OPEN ]------------------------------------------
#
/forum/admin/admin_forums_extend.php

#
#-----[ FIND ]------------------------------------------
#
define('IN_PHPBB', 1);

#
#-----[ AFTER, ADD ]------------------------------------------
#
define('CT_SECLEVEL', 'MEDIUM');
$ct_ignorepvar = array('desc');

#
#-----[ SAVE/CLOSE ALL FILES ]------------------------------------------
#
# EoM

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Script-Filename: /forum/admin/admin_forums_extend.php
----------------

Request-Method: POST

Matching rule: and
In variable: desc

Possible solution:
------------------

#
#-----[ OPEN ]------------------------------------------
#
/forum/admin/admin_forums_extend.php

#
#-----[ FIND ]------------------------------------------
#
define('IN_PHPBB', 1);

#
#-----[ AFTER, ADD ]------------------------------------------
#
define('CT_SECLEVEL', 'MEDIUM');
$ct_ignorepvar = array('desc');

#
#-----[ SAVE/CLOSE ALL FILES ]------------------------------------------
#
# EoM

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Script-Filename: /forum/admin/admin_forums_extend.php
----------------

Request-Method: POST

Matching rule: and
In variable: desc

Possible solution:
------------------

#
#-----[ OPEN ]------------------------------------------
#
/forum/admin/admin_forums_extend.php

#
#-----[ FIND ]------------------------------------------
#
define('IN_PHPBB', 1);

#
#-----[ AFTER, ADD ]------------------------------------------
#
define('CT_SECLEVEL', 'MEDIUM');
$ct_ignorepvar = array('desc');

#
#-----[ SAVE/CLOSE ALL FILES ]------------------------------------------
#
# EoM

now correct me if i am wrong, but there are several edits there, and they all seem to be the same. i edit the file and uploand it. i upload it to both admin and admin/modules.

4. i then change the ctracker/engines/ct_security.php from true back to false. and upload it back to the server.

5. i then try to add a forum and get the same error i got in the beginning.

now i know the KB article says

If a php file requires "define('CT_SECLEVEL','MEDIUM');" code to be inserted in a file that has already been edited with CrackerTracker code, then you may need to edit the insert as follows:

This is how NOT to do it: (this is only an example)

define('CT_SECLEVEL','MEDIUM');
$ct_ignorepvar = array('message')
define('CT_SECLEVEL','MEDIUM');
$ct_ignorepvar = array('welcome_text')

This code would be correct:

define('CT_SECLEVEL','MEDIUM');
$ct_ignorepvar = array('message','welcome_text')

my question is, even though i understand the mechanics of what is going on when i do all of this, i am not a coder, so how do i decide what $ct_ignorepvar = array to put?


EDIT:

i just tried to delete the shadow attachments in the acp and got the same error about the ctracker/engines/ct_security.php on line 357

Warning: No ending delimiter '#' found in /home/httpd/vhosts/graphicsplayhouse.com/httpdocs/forum/ctracker/engines/ct_security.php on line 357

SECURITY ALERT ÂÂÂ » ÂÂÂ » ÂÂÂ » ÂÂÂ »
CBACK CrackerTracker has detected a potential attack on this site with a worm or exploit .script so the Security System stopped the .script.


If you can see this page after including a new MOD into your board or after clicking on a link please contact the Board Administrator with this error message and a de.scription what you have done before you could see this page, that the Admin has the possibility to fix the problem.

so i am guessing i am needing to edit that line with something?

[Drop-Forged]

Ive been banging my head trying to fix this for a half a day now, and no luck.

I moved my site, and need to update the meta info.

Ive tried different variables, setting them to LOW, and keep getting the same error over and over again.

Here is the error log:

Code: Select all

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++Script-Filename]------------------------------------------#/admin/admin_meta_tags.php  ##-----[ FIND ]------------------------------------------#require('./pagestart.' . $phpEx);  ##-----[ AFTER, ADD ]------------------------------------------#define('CT_SECLEVEL', 'MEDIUM');$ct_ignorepvar = array('meta_de.scription','meta_keywords','meta_copyright');  ##-----[ SAVE/CLOSE ALL FILES ]------------------------------------------## EoM  ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++Script-Filename: /admin/admin_board.php----------------  Request-Method: POST  Matching rule: _phpIn variable:   logo_image  Possible solution:------------------  ##-----[ OPEN ]------------------------------------------#/admin/admin_board.php  ##-----[ FIND ]------------------------------------------#require('./pagestart.' . $phpEx);  ##-----[ AFTER, ADD ]------------------------------------------#define('CT_SECLEVEL', 'MEDIUM');$ct_ignorepvar = array('logo_image');  ##-----[ SAVE/CLOSE ALL FILES ]------------------------------------------## EoM  ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++Script-Filename: /admin/admin_meta_tags.php----------------  Request-Method: POST  Matching rule: and In variable:   meta_de.scription  Matching rule:  chrIn variable:   meta_keywordsIn variable:   meta_copyright  Possible solution:------------------  ##-----[ OPEN ]------------------------------------------#/admin/admin_meta_tags.php  ##-----[ FIND ]------------------------------------------#require('./pagestart.' . $phpEx);  ##-----[ AFTER, ADD ]------------------------------------------#define('CT_SECLEVEL', 'MEDIUM');$ct_ignorepvar = array('meta_de.scription','meta_keywords','meta_copyright');  ##-----[ SAVE/CLOSE ALL FILES ]------------------------------------------## EoM  ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++Script-Filename: /admin/admin_meta_tags.php----------------  Request-Method: POST  Matching rule: and In variable:   meta_de.scription  Matching rule:  chrIn variable:   meta_keywordsIn variable:   meta_copyright  Possible solution:------------------  ##-----[ OPEN ]------------------------------------------#/admin/admin_meta_tags.php  ##-----[ FIND ]------------------------------------------#require('./pagestart.' . $phpEx);  ##-----[ AFTER, ADD ]------------------------------------------#define('CT_SECLEVEL', 'MEDIUM');$ct_ignorepvar = array('meta_de.scription','meta_keywords','meta_copyright');  ##-----[ SAVE/CLOSE ALL FILES ]------------------------------------------## EoM

Here is my admin_board.php:

Code: Select all

 <?php/***************************************************************************  *                              admin_board.php  *                            -------------------  *   begin                ]['Configuration'] = $file;     return;}  //// Let's set the root dir for phpBB//$phpbb_root_path = "./../";require($phpbb_root_path . 'extension.inc');require('./pagestart.' . $phpEx);define('CT_SECLEVEL', 'MEDIUM');$ct_ignorepvar = array('logo_image');include($phpbb_root_path.'language/lang_' . $board_config['default_lang'] . '/lang_admin_board.'.$phpEx);include($phpbb_root_path . 'includes/functions_selects.'.$phpEx);  // Start add - Signatures control MODif ( !file_exists(@phpbb_realpath($phpbb_root_path . 'language/lang_' . $board_config['default_lang'] . '/lang_sig_control.' . $phpEx)) ) {     include($phpbb_root_path . 'language/lang_english/lang_sig_control.' . $phpEx); } else {     include($phpbb_root_path . 'language/lang_' . $board_config['default_lang'] . '/lang_sig_control.' . $phpEx); } // End add - Signatures control MOD//// Pull all config data//$sql = "SELECT *     FROM " . CONFIG_TABLE;if(!$result = $db->sql_query($sql)){     message_die(CRITICAL_ERROR, "Could not query config information in admin_board", "", __LINE__, __FILE__, $sql);}else{     // CrackerTracker v5.x     if ( isset($HTTP_POST_VARS['submit']) && $ctracker_config->settings['detect_misconfiguration'] == 1 )     {         // Let's detect some things of misconfiguration         if ( $HTTP_POST_VARS['server_port'] == '21' )         {             // FTP Port Misstake             message_die(GENERAL_MESSAGE, $lang['ctracker_gmb_pu_1']);         }           if ( $HTTP_POST_VARS['session_length'] < '100' )         {             // Session Length Error             message_die(GENERAL_MESSAGE, $lang['ctracker_gmb_pu_2']);         }                 if ( !preg_match('/\A/$|\A/.*/$/', $HTTP_POST_VARS['.script_path']) )         {             // Skript Path Error             message_die(GENERAL_MESSAGE, $lang['ctracker_gmb_pu_3']);         }                 if ( preg_match('//$/', $HTTP_POST_VARS['server_name']) )         {             // Server Name Error             message_die(GENERAL_MESSAGE, $lang['ctracker_gmb_pu_4']);         }     }       if ( isset($HTTP_POST_VARS['submit']) && $ctracker_config->settings['auto_recovery'] == 1 )     {         define('CTRACKER_ACP', true);         include_once($phpbb_root_path . 'ctracker/classes/class_ct_adminfunctions.' . $phpEx);         $backup_system = new ct_adminfunctions();         $backup_system->recover_configuration();         unset($backup_system);     }     while( $row = $db->sql_fetchrow($result) )     {         $config_name = $row['config_name'];         $config_value = $row['config_value'];         $default_config[$config_name] = isset($HTTP_POST_VARS['submit']) ? str_replace("'", "'", $config_value) : $config_value;                 $new[$config_name] = ( isset($HTTP_POST_VARS[$config_name]) ) ? $HTTP_POST_VARS[$config_name] : $default_config[$config_name];           if ($config_name == 'cookie_name')         {             $new['cookie_name'] = str_replace('.', '_', $new['cookie_name']);         }           // Attempt to prevent a common mistake with this value,         // http:// is the protocol and not part of the server name         if ($config_name == 'server_name')         {             $new['server_name'] = str_replace('http://', '', $new['server_name']);         }           // Attempt to prevent a mistake with this value.         if ($config_name == 'avatar_path')         {             $new['avatar_path'] = trim($new['avatar_path']);             if (strstr($new['avatar_path'], "\0") || !is_dir($phpbb_root_path . $new['avatar_path']) || !is_writable($phpbb_root_path . $new['avatar_path']))             {                 $new['avatar_path'] = $default_config['avatar_path'];             }         }           if( isset($HTTP_POST_VARS['submit']) && ($config_name != 'default_style_over'))         {// Start add - Signatures control MOD$new['sig_allow_bold'] = ( htmlspecialchars($HTTP_POST_VARS['sig_allow_bold']) ) ? 1 : 0;$new['sig_allow_italic'] = ( htmlspecialchars($HTTP_POST_VARS['sig_allow_italic']) ) ? 1 : 0;$new['sig_allow_underline'] = ( htmlspecialchars($HTTP_POST_VARS['sig_allow_underline']) ) ? 1 : 0;$new['sig_allow_colors'] = ( htmlspecialchars($HTTP_POST_VARS['sig_allow_colors']) ) ? 1 : 0;$new['sig_allow_quote'] = ( htmlspecialchars($HTTP_POST_VARS['sig_allow_quote']) ) ? 1 : 0;$new['sig_allow_code'] = ( htmlspecialchars($HTTP_POST_VARS['sig_allow_code']) ) ? 1 : 0;$new['sig_allow_list'] = ( htmlspecialchars($HTTP_POST_VARS['sig_allow_list']) ) ? 1 : 0;$new['sig_allow_on_max_img_size_fail'] = ( htmlspecialchars($HTTP_POST_VARS['sig_allow_on_max_img_size_fail']) ) ? 1 : 0;  $sig_config_error_list .= ( eregi("[^0-9]", htmlspecialchars($HTTP_POST_VARS['max_sig_chars'])) ) ? '<br>' . $lang['Max_sig_length'] : '' ;$sig_config_error_list .= ( eregi("[^0-9]", htmlspecialchars($HTTP_POST_VARS['sig_max_lines'])) ) ? '<br>' . $lang['sig_max_lines'] : '' ;$sig_config_error_list .= ( eregi("[^0-9]", htmlspecialchars($HTTP_POST_VARS['sig_wordwrap'])) ) ? '<br>' . $lang['sig_wordwrap'] : '' ;$sig_config_error_list .= ( eregi("[^0-9]", htmlspecialchars($HTTP_POST_VARS['sig_min_font_size'])) || htmlspecialchars($HTTP_POST_VARS['sig_min_font_size'])>29 || eregi("[^0-9]", htmlspecialchars($HTTP_POST_VARS['sig_max_font_size'])) || htmlspecialchars($HTTP_POST_VARS['sig_max_font_size'])>29 ) ? '<br>' . $lang['sig_font_size_limit'] : '' ;$sig_config_error_list .= ( eregi("[^0-9]", htmlspecialchars($HTTP_POST_VARS['sig_max_images'])) ) ? '<br>' . $lang['sig_max_images'] : '' ;$sig_config_error_list .= ( eregi("[^0-9]", htmlspecialchars($HTTP_POST_VARS['sig_max_img_height'])) || eregi("[^0-9]", htmlspecialchars($HTTP_POST_VARS['sig_max_img_width'])) ) ? '<br>' . $lang['sig_max_img_size'] : '' ;$sig_config_error_list .= ( eregi("[^0-9]", htmlspecialchars($HTTP_POST_VARS['sig_max_img_files_size'])) ) ? '<br>' . $lang['sig_max_img_files_size'] : '' ;$sig_config_error_list .= ( eregi("[^0-9]", htmlspecialchars($HTTP_POST_VARS['sig_max_img_av_files_size'])) ) ? '<br>' . $lang['sig_max_img_av_files_size'] : '' ;  if ( $sig_config_error_list != '' ){     message_die(GENERAL_MESSAGE, $lang['sig_config_error'] . '<br><br>' . $lang['sig_config_error_int'] . $sig_config_error_list . "<br><br>" . sprintf($lang['Click_return_config'], "<a>", "</a>"));}  if ( htmlspecialchars($HTTP_POST_VARS['sig_min_font_size']) >= htmlspecialchars($HTTP_POST_VARS['sig_max_font_size']) && htmlspecialchars($HTTP_POST_VARS['sig_max_font_size']) != 0 ){     message_die(GENERAL_MESSAGE, $lang['sig_config_error'] . '<br><br>' . sprintf($lang['sig_config_error_min_max'], htmlspecialchars($HTTP_POST_VARS['sig_min_font_size']), htmlspecialchars($HTTP_POST_VARS['sig_max_font_size'])) . "<br><br>" . sprintf($lang['Click_return_config'], "<a>", "</a>"));}  if ( htmlspecialchars($HTTP_POST_VARS['sig_allow_font_sizes']) == 0 && htmlspecialchars($HTTP_POST_VARS['sig_max_font_size']) <7> 29 ){     message_die(GENERAL_MESSAGE, $lang['sig_config_error'] . '<br><br>' . sprintf($lang['sig_config_error_imposed'], htmlspecialchars($HTTP_POST_VARS['sig_max_font_size'])) . "<br><br>" . sprintf($lang['Click_return_config'], "<a>", "</a>"));}// End add - Signatures control MOD             $sql = "UPDATE " . CONFIG_TABLE . " SET                 config_value = '" . str_replace("'", "''", $new[$config_name]) . "'                 WHERE config_name = '$config_name'";             if( !$db->sql_query($sql) )             {                 message_die(GENERAL_ERROR, "Failed to update general configuration for $config_name", "", __LINE__, __FILE__, $sql);             }             if($config_name == 'override_user_style')             {                 $sql = "UPDATE " . CONFIG_TABLE . " SET                     config_value = '" . str_replace("'", "''", $new[$config_name]) . "'                     WHERE config_name = 'default_style_over'";                 if( !$db->sql_query($sql) )                 {                     message_die(GENERAL_ERROR, "Failed to update general configuration for $config_name", "", __LINE__, __FILE__, $sql);                 }             }         }     }       if( isset($HTTP_POST_VARS['submit']) )     {         $message = $lang['Config_updated'] . "<br><br>" . sprintf($lang['Click_return_config'], "<a>", "</a>") . "<br><br>" . sprintf($lang['Click_return_admin_index'], "<a>", "</a>");           message_die(GENERAL_MESSAGE, $message);     }}// Logo Selector MOD// Get all images in the logo directory$dir = @opendir($phpbb_root_path . $new['logo_image_path']);$count = 0;while( $file = @readdir($dir) ){     if( !@is_dir(phpbb_realpath($phpbb_root_path . $new['logo_image_path'] . '/' . $file)) )     {         if( preg_match('/(.gif$|.png$|.jpg|.jpeg)$/is', $file) )         {             $logo[$count] = $file;             $count++;         }     }}@closedir($dir);// Logo ListBox$logo_list = "";for( $i = 0; $i < count($logo); $i++ ){     if ($logo[$i] == $new['logo_image'])         $logo_list .= '<option>' . $logo[$i] . '</option>';     else         $logo_list .= '<option>' . $logo[$i] . '</option>';}  $logo_image = $new['logo_image'];$logo_width = $new['logo_image_w'];$logo_height = $new['logo_image_h'];$style_select = style_select($new['default_style'], 'default_style', "../templates");$lang_select = language_select($new['default_lang'], 'default_lang', "language");$timezone_select = tz_select($new['board_timezone'], 'board_timezone');  $disable_board_yes = ( $new['board_disable'] ) ? "checked="checked"" : "";$disable_board_no = ( !$new['board_disable'] ) ? "checked="checked"" : "";  $cookie_secure_yes = ( $new['cookie_secure'] ) ? "checked="checked"" : "";$cookie_secure_no = ( !$new['cookie_secure'] ) ? "checked="checked"" : "";  $html_tags = $new['allow_html_tags'];  $override_user_style_yes = ( $new['override_user_style'] ) ? "checked="checked"" : "";$override_user_style_no = ( !$new['override_user_style'] ) ? "checked="checked"" : "";  $html_yes = ( $new['allow_html'] ) ? "checked="checked"" : "";$html_no = ( !$new['allow_html'] ) ? "checked="checked"" : "";  $bbcode_yes = ( $new['allow_bbcode'] ) ? "checked="checked"" : "";$bbcode_no = ( !$new['allow_bbcode'] ) ? "checked="checked"" : "";  $activation_none = ( $new['require_activation'] == USER_ACTIVATION_NONE ) ? "checked="checked"" : "";$activation_user = ( $new['require_activation'] == USER_ACTIVATION_SELF ) ? "checked="checked"" : "";$activation_admin = ( $new['require_activation'] == USER_ACTIVATION_ADMIN ) ? "checked="checked"" : "";  $allow_autologin_yes = ( $new['allow_autologin']) ? "checked="checked"" : "";$allow_autologin_no = ( !$new['allow_autologin']) ? "checked="checked"" : "";  $board_email_form_yes = ( $new['board_email_form'] ) ? "checked="checked"" : "";$board_email_form_no = ( !$new['board_email_form'] ) ? "checked="checked"" : "";  $gzip_yes = ( $new['gzip_compress'] ) ? "checked="checked"" : "";$gzip_no = ( !$new['gzip_compress'] ) ? "checked="checked"" : "";  $privmsg_on = ( !$new['privmsg_disable'] ) ? "checked="checked"" : "";$privmsg_off = ( $new['privmsg_disable'] ) ? "checked="checked"" : "";  $prune_yes = ( $new['prune_enable'] ) ? "checked="checked"" : "";$prune_no = ( !$new['prune_enable'] ) ? "checked="checked"" : "";  $smile_yes = ( $new['allow_smilies'] ) ? "checked="checked"" : "";$smile_no = ( !$new['allow_smilies'] ) ? "checked="checked"" : "";  $sig_yes = ( $new['allow_sig'] ) ? "checked="checked"" : "";$sig_no = ( !$new['allow_sig'] ) ? "checked="checked"" : "";  // Start add - Signatures control MODswitch ( $new['sig_allow_font_sizes'] ){     case 1:         $sig_allow_font_sizes_yes="checked="checked"";         break;     case 2:         $sig_allow_font_sizes_max="checked="checked"";         break;     case 0:         $sig_allow_font_sizes_imposed="checked="checked"";         break; }  $sig_allow_bold_yes = ( $new['sig_allow_bold'] ) ? "checked="checked"" : "";$sig_allow_italic_yes = ( $new['sig_allow_italic'] ) ? "checked="checked"" : "";$sig_allow_underline_yes = ( $new['sig_allow_underline'] ) ? "checked="checked"" : "";$sig_allow_colors_yes = ( $new['sig_allow_colors'] ) ? "checked="checked"" : "";  $sig_allow_quote_yes = ( $new['sig_allow_quote'] ) ? "checked="checked"" : "";$sig_allow_code_yes = ( $new['sig_allow_code'] ) ? "checked="checked"" : "";$sig_allow_list_yes = ( $new['sig_allow_list'] ) ? "checked="checked"" : "";  $sig_allow_url_yes = ( $new['sig_allow_url'] ) ? "checked="checked"" : "";$sig_allow_url_no = ( !$new['sig_allow_url'] ) ? "checked="checked"" : "";  $sig_allow_smilies_yes = ( $new['sig_allow_smilies'] ) ? "checked="checked"" : "";$sig_allow_smilies_no = ( !$new['sig_allow_smilies'] ) ? "checked="checked"" : "";  $sig_allow_images_yes = ( $new['sig_allow_images'] ) ? "checked="checked"" : "";$sig_allow_images_no = ( !$new['sig_allow_images'] ) ? "checked="checked"" : "";  $sig_allow_on_max_img_size_fail_yes = ( $new['sig_allow_on_max_img_size_fail'] ) ? "checked="checked"" : "";  if( phpversion() </option>", "value="".$new['report_forum']."" SELECTED>*" ,$report_forum_select_list);  //// Escape any quotes in the site de.scription for proper display in the text// box on the admin page //$new['site_desc'] = str_replace('"', '&quot;', $new['site_desc']);$new['sitename'] = str_replace('"', '&quot;', strip_tags($new['sitename']));  $template->assign_vars(array(     "S_CONFIG_ACTION" => append_sid("admin_board.$phpEx"),       "L_YES" => $lang['Yes'],     "L_NO" => $lang['No'],     "L_CONFIGURATION_TITLE" => $lang['General_Config'],     "L_CONFIGURATION_EXPLAIN" => $lang['Config_explain'],     "L_GENERAL_SETTINGS" => $lang['General_settings'],     "L_SERVER_NAME" => $lang['Server_name'],     "L_SERVER_NAME_EXPLAIN" => $lang['Server_name_explain'],     "L_SERVER_PORT" => $lang['Server_port'],     "L_SERVER_PORT_EXPLAIN" => $lang['Server_port_explain'],     "L_SCRIPT_PATH" => $lang['Script_path'],     "L_SCRIPT_PATH_EXPLAIN" => $lang['Script_path_explain'],     "L_SITE_NAME" => $lang['Site_name'],     "L_SITE_DESCRIPTION" => $lang['Site_desc'],     "L_DISABLE_BOARD" => $lang['Board_disable'],     "L_DISABLE_BOARD_EXPLAIN" => $lang['Board_disable_explain'],     "L_DISABLE_BOARD_MSG" => $lang['Board_disable_msg'],     "L_DISABLE_BOARD_MSG_EXPLAIN" => $lang['Board_disable_msg_explain'],     "L_ACCT_ACTIVATION" => $lang['Acct_activation'],     "L_NONE" => $lang['Acc_None'],     "L_USER" => $lang['Acc_User'],     "L_ADMIN" => $lang['Acc_Admin'],     // Logo Selector MOD     "L_LOGO_SETTINGS" => $lang['Logo_settings'],     "L_LOGO_EXPLAIN" => $lang['Logo_explain'],     "L_LOGO_PATH" => $lang['Logo_path'],     "L_LOGO_PATH_EXPLAIN" => $lang['Logo_path_explain'],     "L_LOGO" => $lang['Logo'],     "L_LOGO_DIMENSIONS" => $lang['Logo_dimensions'],     "L_LOGO_DIMENSIONS_EXPLAIN" => $lang['Logo_dimensions_explain'],     // Logo Selector MOD     "L_ALLOW_AUTOLOGIN" => $lang['Allow_autologin'],     "L_ALLOW_AUTOLOGIN_EXPLAIN" => $lang['Allow_autologin_explain'],     "L_AUTOLOGIN_TIME" => $lang['Autologin_time'],     "L_AUTOLOGIN_TIME_EXPLAIN" => $lang['Autologin_time_explain'],     "L_COOKIE_SETTINGS" => $lang['Cookie_settings'],     "L_COOKIE_SETTINGS_EXPLAIN" => $lang['Cookie_settings_explain'],     "L_COOKIE_DOMAIN" => $lang['Cookie_domain'],     "L_COOKIE_NAME" => $lang['Cookie_name'],     "L_COOKIE_PATH" => $lang['Cookie_path'],     "L_COOKIE_SECURE" => $lang['Cookie_secure'],     "L_COOKIE_SECURE_EXPLAIN" => $lang['Cookie_secure_explain'],     "L_SESSION_LENGTH" => $lang['Session_length'],     "L_PRIVATE_MESSAGING" => $lang['Private_Messaging'],     "L_INBOX_LIMIT" => $lang['Inbox_limits'],     "L_SENTBOX_LIMIT" => $lang['Sentbox_limits'],     "L_SAVEBOX_LIMIT" => $lang['Savebox_limits'],     "L_DISABLE_PRIVATE_MESSAGING" => $lang['Disable_privmsg'],     "L_ENABLED" => $lang['Enabled'],     "L_DISABLED" => $lang['Disabled'],     "L_ABILITIES_SETTINGS" => $lang['Abilities_settings'],     "L_MAX_POLL_OPTIONS" => $lang['Max_poll_options'],     "L_FLOOD_INTERVAL" => $lang['Flood_Interval'],     "L_FLOOD_INTERVAL_EXPLAIN" => $lang['Flood_Interval_explain'],     "L_SEARCH_FLOOD_INTERVAL" => $lang['Search_Flood_Interval'],     "L_SEARCH_FLOOD_INTERVAL_EXPLAIN" => $lang['Search_Flood_Interval_explain'],             'L_MAX_LOGIN_ATTEMPTS'           => $lang['Max_login_attempts'],     'L_MAX_LOGIN_ATTEMPTS_EXPLAIN'   => $lang['Max_login_attempts_explain'],     'L_LOGIN_RESET_TIME'             => $lang['Login_reset_time'],     'L_LOGIN_RESET_TIME_EXPLAIN'     => $lang['Login_reset_time_explain'],     'MAX_LOGIN_ATTEMPTS'             => $new['max_login_attempts'],     'LOGIN_RESET_TIME'               => $new['login_reset_time'],     "L_BOARD_EMAIL_FORM" => $lang['Board_email_form'],     "L_BOARD_EMAIL_FORM_EXPLAIN" => $lang['Board_email_form_explain'],     "L_TOPICS_PER_PAGE" => $lang['Topics_per_page'],     "L_POSTS_PER_PAGE" => $lang['Posts_per_page'],     "L_HOT_THRESHOLD" => $lang['Hot_threshold'],     "L_DEFAULT_STYLE" => $lang['Default_style'],     "L_OVERRIDE_STYLE" => $lang['Override_style'],     "L_OVERRIDE_STYLE_EXPLAIN" => $lang['Override_style_explain'],     "L_DEFAULT_LANGUAGE" => $lang['Default_language'],     "L_DATE_FORMAT" => $lang['Date_format'],     "L_SYSTEM_TIMEZONE" => $lang['System_timezone'],     "L_ENABLE_GZIP" => $lang['Enable_gzip'],     "L_ENABLE_DEBUG" => $lang['Enable_debug'],     "L_ENABLE_PRUNE" => $lang['Enable_prune'],     'L_BLUECARD_LIMIT' => $lang['Bluecard_limit'],     'L_BLUECARD_LIMIT_EXPLAIN' => $lang['Bluecard_limit_explain'],     'L_BLUECARD_LIMIT_2' => $lang['Bluecard_limit_2'],     'L_BLUECARD_LIMIT_2_EXPLAIN' => $lang['Bluecard_limit_2_explain'],     'L_MAX_USER_BANCARD' => $lang['Max_user_bancard'],     'L_MAX_USER_BANCARD_EXPLAIN' => $lang['Max_user_bancard_explain'],     'L_REPORT_FORUM' => $lang['Report_forum'],     'L_REPORT_FORUM_EXPLAIN' => $lang['Report_forum_explain'],// Start add - Fully integrated shoutbox MOD     'L_PRUNE_SHOUTS' => $lang['Prune_shouts'],     'L_PRUNE_SHOUTS_EXPLAIN' => $lang['Prune_shouts_explain'], // End add - Fully integrated shoutbox MOD       "L_ALLOW_HTML" => $lang['Allow_HTML'],     "L_ALLOW_BBCODE" => $lang['Allow_BBCode'],     "L_ALLOWED_TAGS" => $lang['Allowed_tags'],     "L_ALLOWED_TAGS_EXPLAIN" => $lang['Allowed_tags_explain'],     "L_ALLOW_SMILIES" => $lang['Allow_smilies'],     "L_SMILIES_PATH" => $lang['Smilies_path'],     "L_SMILIES_PATH_EXPLAIN" => $lang['Smilies_path_explain'],     "L_ALLOW_SIG" => $lang['Allow_sig'],     "L_MAX_SIG_LENGTH" => $lang['Max_sig_length'],     "L_MAX_SIG_LENGTH_EXPLAIN" => $lang['Max_sig_length_explain'],// Start add - Signatures control MOD'L_SIG_SETTINGS' => $lang['sig_settings'],'L_SIG_SETTINGS_EXPLAIN' => $lang['sig_settings_explain'],  'L_SIG_MAX_LINES' => $lang['sig_max_lines'],'L_SIG_WORDWRAP' => $lang['sig_wordwrap'],'L_SIG_ALLOW_FONT_SIZES' => $lang['sig_allow_font_sizes'],'L_SIG_ALLOW_FONT_SIZES_YES' => $lang['sig_allow_font_sizes_yes'],'L_SIG_ALLOW_FONT_SIZES_MAX' => $lang['sig_allow_font_sizes_max'],'L_SIG_ALLOW_FONT_SIZES_IMPOSED' => $lang['sig_allow_font_sizes_imposed'],'L_SIG_FONT_SIZE_LIMIT' => $lang['sig_font_size_limit'],'L_SIG_FONT_SIZE_LIMIT_EXPLAIN' => $lang['sig_font_size_limit_explain'],'L_SIG_MIN_FONT_SIZE' => $lang['sig_min_font_size'],'L_SIG_MAX_FONT_SIZE' => $lang['sig_max_font_size'],'L_SIG_TEXT_ENHANCEMENT' => $lang['sig_text_enhancement'],'L_SIG_ALLOW_BOLD' => $lang['sig_allow_bold'],'L_SIG_ALLOW_ITALIC' => $lang['sig_allow_italic'],'L_SIG_ALLOW_UNDERLINE' => $lang['sig_allow_underline'],'L_SIG_ALLOW_COLORS' => $lang['sig_allow_colors'],'L_SIG_TEXT_PRESENTATION' => $lang['sig_text_presentation'],'L_SIG_ALLOW_QUOTE' => $lang['sig_allow_quote'],'L_SIG_ALLOW_CODE' => $lang['sig_allow_code'],'L_SIG_ALLOW_LIST' => $lang['sig_allow_list'],'L_SIG_ALLOW_URL' => $lang['sig_allow_url'],'L_SIG_ALLOW_IMAGES' => $lang['sig_allow_images'],'L_SIG_MAX_IMAGES' => $lang['sig_max_images'],'L_SIG_MAX_IMG_SIZE' => $lang['sig_max_img_size'],'L_SIG_MAX_IMG_SIZE_EXPLAIN' => $l_sig_max_img_size_explain,'L_SIG_IMG_SIZE_LEGEND' => $lang['sig_img_size_legend'],'L_SIG_ALLOW_ON_MAX_IMG_SIZE_FAIL' => $lang['sig_allow_on_max_img_size_fail'],'L_SIG_MAX_IMG_FILES_SIZE' => $lang['sig_max_img_files_size'],'L_SIG_MAX_IMG_AV_FILES_SIZE' => $lang['sig_max_img_av_files_size'],'L_SIG_MAX_IMG_AV_FILES_SIZE_EXPLAIN' => $lang['sig_max_img_av_files_size_explain'],'L_SIG_KBYTES' => $lang['sig_Kbytes'],'L_SIG_EXOTIC_BBCODES_DISALLOWED' => $lang['sig_exotic_bbcodes_disallowed'],'L_SIG_EXOTIC_BBCODES_DISALLOWED_EXPLAIN' => $lang['sig_exotic_bbcodes_disallowed_explain'],'L_SIG_ALLOW_SMILIES' => $lang['sig_allow_smilies'],'L_SIG_RESET' => $lang['sig_reset'],'L_SIG_RESET_EXPLAIN' => $lang['sig_reset_explain'],// End add - Signatures control MOD     "L_ALLOW_NAME_CHANGE" => $lang['Allow_name_change'],     "L_MAX_LINK_BOOKMARKS" => $lang['Max_bookmarks_links'],     "L_MAX_LINK_BOOKMARKS_EXPLAIN" => $lang['Max_bookmarks_links_explain'],     "L_AVATAR_SETTINGS" => $lang['Avatar_settings'],     "L_ALLOW_LOCAL" => $lang['Allow_local'],     "L_ALLOW_REMOTE" => $lang['Allow_remote'],     "L_ALLOW_REMOTE_EXPLAIN" => $lang['Allow_remote_explain'],     "L_ALLOW_UPLOAD" => $lang['Allow_upload'],     "L_MAX_FILESIZE" => $lang['Max_filesize'],     "L_MAX_FILESIZE_EXPLAIN" => $lang['Max_filesize_explain'],     "L_MAX_AVATAR_SIZE" => $lang['Max_avatar_size'],     "L_MAX_AVATAR_SIZE_EXPLAIN" => $lang['Max_avatar_size_explain'],     "L_AVATAR_STORAGE_PATH" => $lang['Avatar_storage_path'],     "L_AVATAR_STORAGE_PATH_EXPLAIN" => $lang['Avatar_storage_path_explain'],     "L_AVATAR_GALLERY_PATH" => $lang['Avatar_gallery_path'],     "L_AVATAR_GALLERY_PATH_EXPLAIN" => $lang['Avatar_gallery_path_explain'],     "L_ALLOW_LOCAL_PHOTO" => $lang['Allow_local_photo'],     "L_ALLOW_REMOTE_PHOTO" => $lang['Allow_remote_photo'],     "L_ALLOW_REMOTE_PHOTO_EXPLAIN" => $lang['Allow_remote_photo_explain'],     "L_ALLOW_UPLOAD_PHOTO" => $lang['Allow_upload_photo'],     "L_MAX_FILESIZE_PHOTO" => $lang['Max_filesize_photo'],     "L_MAX_FILESIZE_EXPLAIN_PHOTO" => $lang['Max_filesize_photo_explain'],     "L_PHOTO_SETTINGS" => $lang['Photo_settings'],     "L_MAX_PHOTO_SIZE" => $lang['Max_photo_size'],     "L_MAX_PHOTO_SIZE_EXPLAIN" => $lang['Max_photo_size_explain'],     "L_PHOTO_STORAGE_PATH" => $lang['Photo_storage_path'],     "L_PHOTO_STORAGE_PATH_EXPLAIN" => $lang['Photo_storage_path_explain'],     "L_PHOTO_GALLERY_PATH" => $lang['Photo_gallery_path'],     "L_PHOTO_GALLERY_PATH_EXPLAIN" => $lang['Photo_gallery_path_explain'],     "L_COPPA_SETTINGS" => $lang['COPPA_settings'],     "L_COPPA_FAX" => $lang['COPPA_fax'],     "L_COPPA_MAIL" => $lang['COPPA_mail'],     "L_COPPA_MAIL_EXPLAIN" => $lang['COPPA_mail_explain'],     "L_EMAIL_SETTINGS" => $lang['Email_settings'],     "L_ADMIN_EMAIL" => $lang['Admin_email'],     "L_EMAIL_SIG" => $lang['Email_sig'],     "L_EMAIL_SIG_EXPLAIN" => $lang['Email_sig_explain'],     "L_USE_SMTP" => $lang['Use_SMTP'],     "L_USE_SMTP_EXPLAIN" => $lang['Use_SMTP_explain'],     "L_SMTP_SERVER" => $lang['SMTP_server'],     "L_SMTP_USERNAME" => $lang['SMTP_username'],     "L_SMTP_USERNAME_EXPLAIN" => $lang['SMTP_username_explain'],     "L_SMTP_PASSWORD" => $lang['SMTP_password'],     "L_SMTP_PASSWORD_EXPLAIN" => $lang['SMTP_password_explain'],     "L_LW_PAYPAL_SETTINGS" => $lang['LW_PAYPAL_ACCT_SETTINGS_TITLE'],     "L_LW_OUR_PAYPAL_ACCT" => $lang['LW_OUR_PAYPAL_ACCT'],     "L_LW_PAYPAL_CURRENCY_CODE" => $lang['LW_OUR_PAYPAL_CURRENCY_CODE'],     "L_LW_TRIAL_PERIOD" => $lang['LW_TRIAL_PERIOD'],     "L_SUBMIT" => $lang['Submit'],     "L_RESET" => $lang['Reset'],     "L_DONATION_SETTINGS" => $lang['L_DONATION_SETTINGS'],     "L_LW_HEADER_REMINDER" => $lang['L_LW_HEADER_REMINDER'],     "L_LW_HEADER_REMINDER_EXPLAIN" => $lang['L_LW_HEADER_REMINDER_EXPLAIN'],     "L_LW_PERSONAL_PAYPAL_ACCT" => $lang['L_LW_PERSONAL_PAYPAL_ACCT'],     "L_LW_PERSONAL_PAYPAL_ACCT_EXPLAIN" => $lang['L_LW_PERSONAL_PAYPAL_ACCT_EXPLAIN'],     "L_LW_BUSINESS_PAYPAL_ACCT" => $lang['L_LW_BUSINESS_PAYPAL_ACCT'],     "L_LW_BUSINESS_PAYPAL_ACCT_EXPLAIN" => $lang['L_LW_BUSINESS_PAYPAL_ACCT_EXPLAIN'],     "L_LW_PAYPAL_CURRENCY_CODE" => $lang['L_LW_PAYPAL_CURRENCY_CODE'],     "L_LW_PAYPAL_CURRENCY_CODE_EXPLAIN" => $lang['L_LW_PAYPAL_CURRENCY_CODE_EXPLAIN'],     "L_LW_DISPLAY_X_DONORS" => $lang['L_LW_DISPLAY_X_DONORS'],     "L_LW_DISPLAY_X_DONORS_EXPLAIN" => $lang['L_LW_DISPLAY_X_DONORS_EXPLAIN'],     "L_LW_DONATION_DESCRIPTION" => $lang['L_LW_DONATION_DESCRIPTION'],     "L_LW_DONATION_DESCRIPTION_EXPLAIN" => $lang['L_LW_DONATION_DESCRIPTION_EXPLAIN'],     "L_LW_DONATION_GOAL" => $lang['L_LW_DONATION_GOAL'],     "L_LW_DONATION_GOAL_EXPLAIN" => $lang['L_LW_DONATION_GOAL_EXPLAIN'],     "L_LW_DONATION_START" => $lang['L_LW_DONATION_START'],     "L_LW_DONATION_START_EXPLAIN" => $lang['L_LW_DONATION_START_EXPLAIN'],     "L_LW_DONATION_END" => $lang['L_LW_DONATION_END'],     "L_LW_DONATION_END_EXPLAIN" => $lang['L_LW_DONATION_END_EXPLAIN'],     "L_LW_DONATION_POINTS" => $lang['L_LW_DONATION_POINTS'],     "L_LW_DONATION_POINTS_EXPLAIN" => $lang['L_LW_DONATION_POINTS_EXPLAIN'],     "LW_TOP_DONORS" => $new['list_top_donors'],     "L_LW_TOP_DONORS" => $lang['L_LW_TOP_DONORS'],     "L_LW_TOP_DONORS_EXPLAIN" => $lang['L_LW_TOP_DONORS_EXPLAIN'],     "L_LW_POSTS_COUNTS" => $lang['L_LW_POSTS_COUNTS'],     "L_LW_POSTS_COUNTS_EXPLAIN" => $lang['L_LW_POSTS_COUNTS_EXPLAIN'],     "LW_POSTS_COUNTS" => $new['donate_to_posts'],     "LW_HEADER_REMINDER" => $new['lw_header_reminder'],     "LW_HEADER_REMINDER_YES" => $lw_header_reminder_yes,     "LW_HEADER_REMINDER_NO" => $lw_header_reminder_no,     "LW_PERSONAL_PAYPAL_ACCT" => $new['paypal_p_acct'],     "LW_BUSINESS_PAYPAL_ACCT" => $new['paypal_b_acct'],     "LW_PAYPAL_CURRENCY_CODE" => $new['paypal_currency_code'],     "LW_DISPLAY_X_DONORS" => $new['dislay_x_donors'],     "LW_DONATION_DESCRIPTION" => $new['donate_de.scription'],     "LW_DONATION_GOAL" => $new['donate_cur_goal'],     "LW_DONATION_START" => $new['donate_start_time'],     "LW_DONATION_END" => $new['donate_end_time'],     "LW_DONATION_POINTS" => $new['donate_to_points'],     "L_LW_DONATE_TOGRP_ONE" => $lang['L_LW_DONATE_TOGRP_ONE'],     "L_LW_DONATE_TOGRP_ONE_EXPLAIN" => $lang['L_LW_DONATE_TOGRP_ONE_EXPLAIN'],     "L_LW_TOGRPONE_AMOUNT" => $lang['L_LW_TOGRPONE_AMOUNT'],     "L_LW_TOGRPONE_AMOUNT_EXPLAIN" => $lang['L_LW_TOGRPONE_AMOUNT_EXPLAIN'],     "L_LW_DONATE_TOGRP_TWO" => $lang['L_LW_DONATE_TOGRP_TWO'],     "L_LW_DONATE_TOGRP_TWO_EXPLAIN" => $lang['L_LW_DONATE_TOGRP_TWO_EXPLAIN'],     "L_LW_TOGRPTWO_AMOUNT" => $lang['L_LW_TOGRPTWO_AMOUNT'],     "L_LW_TOGRPTWO_AMOUNT_EXPLAIN" => $lang['L_LW_TOGRPTWO_AMOUNT_EXPLAIN'],     "L_LW_TORANK_ID" => $lang['L_LW_TORANK_ID'],     "L_LW_TORANK_ID_EXPLAIN" => $lang['L_LW_TORANK_ID_EXPLAIN'],       "LW_DONATE_TOGRP_ONE" => $new['donate_to_grp_one'],     "LW_TOGRPONE_AMOUNT" => $new['to_grp_one_amount'],     "LW_DONATE_TOGRP_TWO" => $new['donate_to_grp_two'],     "LW_TOGRPTWO_AMOUNT" => $new['to_grp_two_amount'],     "LW_TORANK_ID" => $new['donor_rank_id'],     "LW_PAYPAL_P_ACCT" => $new['paypal_p_acct'],     "LW_PAYPAL_CURRENCY_CODE" => $new['paypal_currency_code'],     "LW_TRIAL_PERIOD" => $new['lw_trial_period'],         "SERVER_NAME" => $new['server_name'],     "SCRIPT_PATH" => $new['.script_path'],     "SERVER_PORT" => $new['server_port'],     "SITENAME" => $new['sitename'],     "SITE_DESCRIPTION" => $new['site_desc'],     "S_DISABLE_BOARD_YES" => $disable_board_yes,     "S_DISABLE_BOARD_NO" => $disable_board_no,     "DISABLE_BOARD_MSG" => $new['board_disable_msg'],     "ACTIVATION_NONE" => USER_ACTIVATION_NONE,     "ACTIVATION_NONE_CHECKED" => $activation_none,     "ACTIVATION_USER" => USER_ACTIVATION_SELF,     "ACTIVATION_USER_CHECKED" => $activation_user,     "ACTIVATION_ADMIN" => USER_ACTIVATION_ADMIN,     "ACTIVATION_ADMIN_CHECKED" => $activation_admin,     "CONFIRM_ENABLE" => $confirm_yes,     "CONFIRM_DISABLE" => $confirm_no,     'ALLOW_AUTOLOGIN_YES' => $allow_autologin_yes,     'ALLOW_AUTOLOGIN_NO' => $allow_autologin_no,     'AUTOLOGIN_TIME' => (int) $new['max_autologin_time'],     "BOARD_EMAIL_FORM_ENABLE" => $board_email_form_yes,     "BOARD_EMAIL_FORM_DISABLE" => $board_email_form_no,     "MAX_POLL_OPTIONS" => $new['max_poll_options'],     "FLOOD_INTERVAL" => $new['flood_interval'],     "SEARCH_FLOOD_INTERVAL" => $new['search_flood_interval'],     "TOPICS_PER_PAGE" => $new['topics_per_page'],     "POSTS_PER_PAGE" => $new['posts_per_page'],     "HOT_TOPIC" => $new['hot_threshold'],     "STYLE_SELECT" => $style_select,     "OVERRIDE_STYLE_YES" => $override_user_style_yes,     "OVERRIDE_STYLE_NO" => $override_user_style_no,     "LANG_SELECT" => $lang_select,     "L_DATE_FORMAT_EXPLAIN" => $lang['Date_format_explain'],     "DEFAULT_DATEFORMAT" => $new['default_dateformat'],     "TIMEZONE_SELECT" => $timezone_select,     // Logo Selector MOD     "LOGO_PATH" => $new['logo_image_path'],     "LOGO_IMAGE_DIR" => $phpbb_root_path . $new['logo_image_path'],     "LOGO_LIST" => $logo_list,     "LOGO_IMAGE" => ($logo_image) ? $phpbb_root_path . $board_config['logo_image_path'] .'/' . $logo_image : '',     "LOGO_WIDTH" => $new['logo_image_w'],     "LOGO_HEIGHT" => $new['logo_image_h'],     // Logo Selector MOD     "S_PRIVMSG_ENABLED" => $privmsg_on,     "S_PRIVMSG_DISABLED" => $privmsg_off,     "INBOX_LIMIT" => $new['max_inbox_privmsgs'],     "SENTBOX_LIMIT" => $new['max_sentbox_privmsgs'],     "SAVEBOX_LIMIT" => $new['max_savebox_privmsgs'],     "COOKIE_DOMAIN" => $new['cookie_domain'],     "COOKIE_NAME" => $new['cookie_name'],     "COOKIE_PATH" => $new['cookie_path'],     "SESSION_LENGTH" => $new['session_length'],     "S_COOKIE_SECURE_ENABLED" => $cookie_secure_yes,     "S_COOKIE_SECURE_DISABLED" => $cookie_secure_no,     "GZIP_YES" => $gzip_yes,     "GZIP_NO" => $gzip_no,     "DEBUG_YES" => $debug_yes,     "DEBUG_NO" => $debug_no,     "PRUNE_YES" => $prune_yes,     "PRUNE_NO" => $prune_no,     'BLUECARD_LIMIT' => $new['bluecard_limit'],     'BLUECARD_LIMIT_2' => $new['bluecard_limit_2'],     'MAX_USER_BANCARD' => $new['max_user_bancard'],     'S_REPORT_FORUM' => $report_forum_select_list,// Start add - Fully integrated shoutbox MOD     "PRUNE_SHOUTS" => $new['prune_shouts'], // End add - Fully integrated shoutbox MOD         "HTML_TAGS" => $html_tags,     "HTML_YES" => $html_yes,     "HTML_NO" => $html_no,     "BBCODE_YES" => $bbcode_yes,     "BBCODE_NO" => $bbcode_no,     "SMILE_YES" => $smile_yes,     "SMILE_NO" => $smile_no,     "SIG_YES" => $sig_yes,     "SIG_NO" => $sig_no,     "SIG_SIZE" => $new['max_sig_chars'], // Start add - Signatures control MOD'SIG_MAX_LINES' => $new['sig_max_lines'],'SIG_WORDWRAP' => $new['sig_wordwrap'],'SIG_ALLOW_FONT_SIZES_YES' => $sig_allow_font_sizes_yes,'SIG_ALLOW_FONT_SIZES_MAX' => $sig_allow_font_sizes_max,'SIG_ALLOW_FONT_SIZES_IMPOSED' => $sig_allow_font_sizes_imposed,'SIG_MIN_FONT_SIZE' => $new['sig_min_font_size'],'SIG_MAX_FONT_SIZE' => $new['sig_max_font_size'],'SIG_ALLOW_BOLD_YES' => $sig_allow_bold_yes,'SIG_ALLOW_ITALIC_YES' => $sig_allow_italic_yes,'SIG_ALLOW_UNDERLINE_YES' => $sig_allow_underline_yes,'SIG_ALLOW_COLORS_YES' => $sig_allow_colors_yes,'SIG_ALLOW_QUOTE_YES' => $sig_allow_quote_yes,'SIG_ALLOW_CODE_YES' => $sig_allow_code_yes,'SIG_ALLOW_LIST_YES' => $sig_allow_list_yes,'SIG_ALLOW_URL_YES' => $sig_allow_url_yes,'SIG_ALLOW_URL_NO' => $sig_allow_url_no,'SIG_ALLOW_IMAGES_YES' => $sig_allow_images_yes,'SIG_ALLOW_IMAGES_NO' => $sig_allow_images_no,'SIG_MAX_IMAGES' => $new['sig_max_images'],'SIG_MAX_IMG_HEIGHT' => $new['sig_max_img_height'],'SIG_MAX_IMG_WIDTH' => $new['sig_max_img_width'],'SIG_ALLOW_ON_MAX_IMG_SIZE_FAIL_YES' => $sig_allow_on_max_img_size_fail_yes,'SIG_MAX_IMG_FILES_SIZE' => $new['sig_max_img_files_size'],'SIG_MAX_IMG_AV_FILES_SIZE' => $new['sig_max_img_av_files_size'],'SIG_EXOTIC_BBCODES_DISALLOWED' => $new['sig_exotic_bbcodes_disallowed'],'SIG_ALLOW_SMILIES_YES' => $sig_allow_smilies_yes,'SIG_ALLOW_SMILIES_NO' => $sig_allow_smilies_no,  'U_SIG_RESET' => append_sid("./sig_reset.$phpEx?mode=confirm_all"),// End add - Signatures control MOD     "NAMECHANGE_YES" => $namechange_yes,     "NAMECHANGE_NO" => $namechange_no,     "LINK_BOOKMARKS" => $new['max_link_bookmarks'],     "AVATARS_LOCAL_YES" => $avatars_local_yes,     "AVATARS_LOCAL_NO" => $avatars_local_no,     "AVATARS_REMOTE_YES" => $avatars_remote_yes,     "AVATARS_REMOTE_NO" => $avatars_remote_no,     "AVATARS_UPLOAD_YES" => $avatars_upload_yes,     "AVATARS_UPLOAD_NO" => $avatars_upload_no,     "AVATAR_FILESIZE" => $new['avatar_filesize'],     "AVATAR_MAX_HEIGHT" => $new['avatar_max_height'],     "AVATAR_MAX_WIDTH" => $new['avatar_max_width'],     "AVATAR_PATH" => $new['avatar_path'],     "AVATAR_GALLERY_PATH" => $new['avatar_gallery_path'],     "PHOTOS_LOCAL_YES" => $photos_local_yes,     "PHOTOS_LOCAL_NO" => $photos_local_no,     "PHOTOS_REMOTE_YES" => $photos_remote_yes,     "PHOTOS_REMOTE_NO" => $photos_remote_no,     "PHOTOS_UPLOAD_YES" => $photos_upload_yes,     "PHOTOS_UPLOAD_NO" => $photos_upload_no,     "PHOTO_FILESIZE" => $new['photo_filesize'],     "PHOTO_MAX_HEIGHT" => $new['photo_max_height'],     "PHOTO_MAX_WIDTH" => $new['photo_max_width'],     "PHOTO_PATH" => $new['photo_path'],     "PHOTO_GALLERY_PATH" => $new['photo_gallery_path'],     "SMILIES_PATH" => $new['smilies_path'],     "INBOX_PRIVMSGS" => $new['max_inbox_privmsgs'],     "SENTBOX_PRIVMSGS" => $new['max_sentbox_privmsgs'],     "SAVEBOX_PRIVMSGS" => $new['max_savebox_privmsgs'],     "EMAIL_FROM" => $new['board_email'],     "EMAIL_SIG" => $new['board_email_sig'],     "SMTP_YES" => $smtp_yes,     "SMTP_NO" => $smtp_no,     "SMTP_HOST" => $new['smtp_host'],     "SMTP_USERNAME" => $new['smtp_username'],     "SMTP_PASSWORD" => $new['smtp_password'],     "COPPA_MAIL" => $new['coppa_mail'],     "COPPA_FAX" => $new['coppa_fax']));  $template->pparse("body");  include('./page_footer_admin.'.$phpEx);  ?>

Here is my admin_meta_tags.php:

Code: Select all

<?php/***************************************************************************  *                              admin_meta_tags.php  *                            -------------------  *   begin                ]['Meta_tags_title'] = $file;     return;}  //// Let's set the root dir for phpBB//$phpbb_root_path = "./../";require($phpbb_root_path . 'extension.inc');require('./pagestart.' . $phpEx);define('CT_SECLEVEL', 'MEDIUM');$ct_ignorepvar = array('meta_de.scription','meta_keywords','meta_copyright');include($phpbb_root_path . 'includes/functions_selects.'.$phpEx);  //// Pull all config data//$sql = "SELECT *     FROM " . CONFIG_TABLE;if(!$result = $db->sql_query($sql)){     message_die(CRITICAL_ERROR, "Could not query config information in admin_meta_tags", "", __LINE__, __FILE__, $sql);}else{     while( $row = $db->sql_fetchrow($result) )     {         $config_name = $row['config_name'];         $config_value = $row['config_value'];         $default_config[$config_name] = isset($HTTP_POST_VARS['submit']) ? str_replace("'", "'", $config_value) : $config_value;                 $new[$config_name] = ( isset($HTTP_POST_VARS[$config_name]) ) ? $HTTP_POST_VARS[$config_name] : $default_config[$config_name];           if ($config_name == 'cookie_name')         {             $cookie_name = str_replace('.', '_', $new['cookie_name']);         }           if( isset($HTTP_POST_VARS['submit']) )         {             $sql = "UPDATE " . CONFIG_TABLE . " SET                 config_value = '" . str_replace("'", "''", $new[$config_name]) . "'                 WHERE config_name = '$config_name'";             if( !$db->sql_query($sql) )             {                 message_die(GENERAL_ERROR, "Failed to update general configuration for $config_name", "", __LINE__, __FILE__, $sql);             }         }     }       if( isset($HTTP_POST_VARS['submit']) )     {         $message = $lang['Config_updated'] . "<br><br>" . sprintf($lang['Click_return_admin_meta_tags'], "<a>", "</a>") . "<br><br>" . sprintf($lang['Click_return_admin_index'], "<a>", "</a>");           message_die(GENERAL_MESSAGE, $message);     }}  $template->set_filenames(array(     "body" => "admin/meta_tags_body.tpl"));  //// Escape any quotes in the site de.scription for proper display in the text// box on the admin page //$new['site_desc'] = str_replace('"', '&quot;', $new['site_desc']);$new['sitename'] = str_replace('"', '&quot;', strip_tags($new['sitename']));$template->assign_vars(array(     "L_META_TAGS_TITLE" => $lang['Meta_tags_title'],     "L_META_TAGS_TITLE_EXPLAIN" => $lang['Meta_tags_title_explain'],     "L_SUBMIT" => $lang['Submit'],     "L_RESET" => $lang['Reset'],     "L_META_PARAMETERS" => $lang['Meta_parameters'],     "L_META_PARAMETERS_EXPLAIN" => $lang['Meta_parameters_explain'],     "L_META_KEYWORDS" => $lang['Meta_keywords'],     "L_META_KEYWORDS_EXPLAIN" => $lang['Meta_keywords_explain'],     "L_META_DESCRIPTION" => $lang['Meta_de.scription'],     "L_META_DESCRIPTION_EXPLAIN" => $lang['Meta_de.scription_explain'],     "L_META_AUTHOR" => $lang['Meta_author'],     "L_META_AUTHOR_EXPLAIN" => $lang['Meta_author_explain'],     "L_META_IDENTIFIER_URL" => $lang['Meta_identifier_url'],     "L_META_IDENTIFIER_URL_EXPLAIN" => $lang['Meta_identifier_url_explain'],     "L_META_REPLY_TO" => $lang['Meta_reply_to'],     "L_META_REPLY_TO_EXPLAIN" => $lang['Meta_reply_to_explain'],     "L_META_REVISIT_AFTER" => $lang['Meta_revisit_after'],     "L_META_REVISIT_AFTER_EXPLAIN" => $lang['Meta_revisit_after_explain'],     "L_META_CATEGORY" => $lang['Meta_category'],     "L_META_CATEGORY_EXPLAIN" => $lang['Meta_category_explain'],     "L_META_GENERATOR" => $lang['Meta_generator'],     "L_META_GENERATOR_EXPLAIN" => $lang['Meta_generator_explain'],     "L_META_COPYRIGHT" => $lang['Meta_copyright'],     "L_META_COPYRIGHT_EXPLAIN" => $lang['Meta_copyright_explain'],     "L_META_ROBOTS" => $lang['Meta_robots'],     "L_META_ROBOTS_EXPLAIN" => $lang['Meta_robots_explain'],     "L_META_DISTRIBUTION" => $lang['Meta_distribution'],     "L_META_DISTRIBUTION_EXPLAIN" => $lang['Meta_distribution_explain'],     "L_META_DATE_CREATION" => $lang['Meta_date_creation'],     "L_META_DATE_CREATION_EXPLAIN" => $lang['Meta_date_creation_explain'],     "L_META_DATE_REVISION" => $lang['Meta_date_revision'],     "L_META_DATE_REVISION_EXPLAIN" => $lang['Meta_date_revision_explain'],     "L_META_DAY" => $lang['Meta_day'],     "L_META_MONTH" => $lang['Meta_month'],     "L_META_YEAR" => $lang['Meta_year'],     "L_META_HTTP_EQUIV_PARAMETERS" => $lang['Meta_http_equiv_parameters'],     "L_META_HTTP_EQUIV_PARAMETERS_EXPLAIN" => $lang['Meta_http_equiv_parameters_explain'],     "L_META_REFRESH" => $lang['Meta_refresh'],     "L_META_REFRESH_EXPLAIN" => $lang['Meta_refresh_explain'],     "L_META_REDIRECT_URL" => $lang['Meta_redirect_url'],     "L_META_REDIRECT_URL_EXPLAIN" => $lang['Meta_redirect_url_explain'],     "L_META_REDIRECT_URL_TIME" => $lang['Meta_redirect_url_time'],     "L_META_REDIRECT_URL_ADRESS" => $lang['Meta_redirect_url_adress'],     "L_META_PRAGMA" => $lang['Meta_pragma'],     "L_META_PRAGMA_EXPLAIN" => $lang['Meta_pragma_explain'],     "L_META_LANGUAGE" => $lang['Meta_language'],     "L_META_LANGUAGE_EXPLAIN" => $lang['Meta_language_explain'],         "META_KEYWORDS" => $new['meta_keywords'],     "META_DESCRIPTION" => $new['meta_de.scription'],     "META_AUTHOR" => $new['meta_author'],     "META_IDENTIFIER_URL" => $new['meta_identifier_url'],     "META_REPLY_TO" => $new['meta_reply_to'],     "META_REVISIT_AFTER" => $new['meta_revisit_after'],     "META_CATEGORY" => $new['meta_category'],     "META_GENERATOR" => $new['meta_generator'],     "META_COPYRIGHT" => $new['meta_copyright'],     "META_ROBOTS" => $new['meta_robots'],     "META_DISTRIBUTION" => $new['meta_distribution'],     "META_DATE_CREATION" => $new['meta_date_creation'],     "META_DATE_CREATION_DAY" => $new['meta_date_creation_day'],     "META_DATE_CREATION_MONTH" => $new['meta_date_creation_month'],     "META_DATE_CREATION_YEAR" => $new['meta_date_creation_year'],     "META_DATE_REVISION" => $new['meta_date_revision'],     "META_DATE_REVISION_DAY" => $new['meta_date_revision_day'],     "META_DATE_REVISION_MONTH" => $new['meta_date_revision_month'],     "META_DATE_REVISION_YEAR" => $new['meta_date_revision_year'],     "META_REFRESH" => $new['meta_refresh'],     "META_REDIRECT_URL_TIME" => $new['meta_redirect_url_time'],     "META_REDIRECT_URL_ADRESS" => $new['meta_redirect_url_adress'],     "META_PRAGMA" => $new['meta_pragma'],     "META_LANGUAGE" => $new['meta_language']));  $template->pparse("body");  include('./page_footer_admin.'.$phpEx);  ?>

What am I doing wrong???

[k4ranger]

I'm gonna suggest that you don't include CrackerTrack in the next release. All it's doing is being annoying.

I narrowed it down... I can create forums fine, as long as I don't specify a de.scription. As soon as I do, it starts giving me errors. I could use some help fixing it.

Oh yeah, question... how does something like this get past the testing team? Or even the developers?

[ZacFields]

Trust me, you want CrackerTracker. Just see how difficult it's being for you right now, and imagine how hard it would be for a hacker to exploit your boards because of this software.

CrackerTracker will get better over time. You just need to allow the devs to fix the necessary bugs, and with the next release of IM this won't be nearly as much of a problem.

Zac

[ayasha]

this may be a bit annoying when you first install, because you are having to fix the files that you are accessing on your particular board, but i for one am glad it is included.

it was discouraging awhile back, when i signed onto this forum everyday, and saw several post

"my forum got hacked" this was very discouraging. and i know of alot of basic phpbb boards that were hacked and cleaned out.

i think it was a wise decision on the part of the devs to include this mod.

i upgraded my board before i closed it to do a fresh install a couple of times. (i tend to do things like this for a learning experience for myself.)

the fresh install was a personal choice for what i want to accmplish on my board.

the fresh install has given me more problems with the crackertracker than the upgrades.

i did get very frustrated the other day, as some of you had seen my post wanting to know how to turn it off.

so i agree with Zac and wanted to post some words of encouragement. it will get better over time. i only wish i was a coder, and could help you guys more.

[Dankbutter]

this is a VERY annoy part of integraMOD. why on earth does it not have one of the following options?

• An option to turn the thing off until you have set up your boards. FOR EVERY LITTLE THING, i have to take 5 mins to edit the files... over and over and over and over!! I just want to turn it off until i am finished setting up, then i would turn it back on. It already takes forever to set up a fresh IM, this adds HOURS!
• Have an option to allow the board founder to do what ever the hell they want without any errors.
• An uninstall option. If i want to be vulnerable to attacks, that is my business.

This mod seriously kills my motivation to work on my boards, which is more negative than positive.

BTW, is there an option to disable *edit* the features that are giving us these errors while configuring the boards. I see there are other settings that can be disabled, but those are the ones I actually want to keep on. I JUST WANT TO SET UP MY BOARDS!! <img>

[Drop-Forged]

Ok, I pretty much couldnt do anything with my configuration in my ACP, I even had to re-enable my board manually because Ctracker was recognizing almost everything as an attack.


But I didnt seem to have any problems with a fresh install test board.

So I dropped my config tables, and replaced them with tables from a fresh install, and all seems to work fine nowà¢Ãƒ ¢Ã¢â‚¬Å¡Ã‚ ¬Ãƒâ€šÃ‚ ¦ <img>

I havent had sufficient time to test everything out as of yet, but I will post again if with my results later, be they good or bad.


I do have my old tables backed up, and would suggest anyone who tries this to do the same.


But (for me at least) the problem seems to have been in the db.

When I updated I had no errors, and I followed the instructions step by step, so it seems to be a db update bug, at least for me.



[Edit]

Ok, guess this didnt solve everything, for some reason it seems to be very fussy about what I put into all my Meta fields, I havent found a rhyme or reason on what sets it off yet, it is just a pain.


But I can now disable and enable my board, and before I couldnt even clear my meta fields, so I guess it has helped.

[Helter]

if it is being too finicky and blocking you after youve done the file edits, then alter the addon code
find

define('CT_SECLEVEL', 'MEDIUM');

change to

define('CT_SECLEVEL', 'LOW');

You are now more vulnerable, but you wont keep getting blocked after you add the edits

[Drop-Forged]

if it is being too finicky and blocking you after youve done the file edits, then alter the addon code
find

define('CT_SECLEVEL', 'MEDIUM');

change to

define('CT_SECLEVEL', 'LOW');

You are now more vulnerable, but you wont keep getting blocked after you add the edits

I had already tried that, it didnt help.


I could put some info in, but very limited, and as I said before it didnt make any sense, I could only put like 5 words in and have it work, but I could fill it up with letters and no spaces, and it wouldnt block that.


Basically it ignored the ignore command in my admin_meta_tags.php.


But I finally did get it to workà¢Ãƒ ¢Ã¢â‚¬Å¡Ã‚ ¬Ãƒâ€šÃ‚ ¦ [flash=,]http://www.integramod.com/forum/images/icon/icon14.gif[/flash:2kjmasgy]



In the ct_security.php where it says:

[code]à¢Ãƒ ¢Ã¢â‚¬Å¡Ã‚ ¬Ãƒâ€¦Ã¢â‚¬Å“// Some fields in $HTTP_POST_VARS don't get checked to prevent wrong detectionà¢Ãƒ ¢Ã¢â‚¬Å¡Ã‚ ¬Ãƒâ€š

[Dioncecht]

I SWEAR TO GOD I HATE CRACKER TRACKER!

It stopped logging stuff in debug mode now. I had an issue, so I switched into debug mode and it told me I was in debug mode, and it said I had 3 entries in my log file, but I only had the 5 previous enties from before. I tried clearing the logs, but the 5 entires from before were still there. All i tdid is clear the number.

Aby reason why it would just stop logging issues all of a sudden?



edit: Screw it. I'm sticking with 140. Cracker Tracker is basically preventing me from doing ANYTHING configuration wise on my site. It yells at me anytime I do ANYTHING and then it wont tell me what I did wrong since the stupid thing stopped logging the messages. Unless someone has an idea on how to disable it so I can at least finish configuring my site or has any idea why it wont log anymore errors, I'll continue using my dilapidated 1.4.0 site. I have no other choice.

I dont mean to sound like a jerk but I am so frustrated right now that I nearly broke my mouse from slamming in on the desk in a fit of frustration. I spent 2 whole days setting this up and now, just as I am doing the finishing config touches, it freaking breaks.

[Dankbutter]

Yes, I am about fed up with it too.

I was just wondering... you can set it to "MEDIUM" and "LOW"... can you set it to "OFF"?!?

*crosses fingers*

someone please say yes <img>

[Dioncecht]

I'm not trying to be a pain, but I REALLY want to use 1.4.1, but I can't get it configured at all since it wont tell me what files I need to add code to. My board is half in limbo

[Tw3nt]

Perhaps the text files aren't chmodded -
I had this problem one time when I was on godaddy (big mistake) my chmods somehow got reset.

Also manually clear your logs are start fresh.

[Ma®©uS]

CTracker is called in common.php - find:

Code: Select all

// CrackerTracker v5.xinclude($phpbb_root_path . 'ctracker/engines/ct_security.' . $phpEx);

Try commenting out the second line to see if CT then removes the checks that cause all the annoying "Security Alerts".

I've not tried it, so I cannot guarantee it'll work, and I don't advise it much either. It will vastly reduce the security CT adds to your forum, as it protects against many types of HTML/PHP/JavaScript injection in forms, SQL injection, and some common forms of local/remote file injection - the LOW/MEDIUM thing that you can add to files is a load of bollocks - its better IMO to slap everything in the main ctsecurity.php arrays, rather than mess about with adding extra code all over the place.

Chmodding makes no difference, ignore that suggestion, that would just prevent logs being written or updated but wouldn't actually stop the mod working. You might just get an error stating there is no permission to access the logs but it wouldn't mess up your site...

I bet ÂÂÂ £3k on it! <img>

[dan0042]

IS fix for this or what ?

[Ma®©uS]

There is no need for a "fix" because there is no "bug" - CT is just a pain in the ass until it fully recognises all forms, input, etc.

Try what I said, if you want to set CT "off".

[Teelk]

[quote=""Ma ®ÃƒÆ’‚ ©uS";p="20242""]
CTracker is called in common.php - find:

Code: Select all

// CrackerTracker v5.xinclude($phpbb_root_path . 'ctracker/engines/ct_security.' . $phpEx);

Try commenting out the second line to see if CT then removes the checks that cause all the annoying &quot;Security Alerts&quot;.

I've not tried it, so I cannot guarantee it'll work, and I don't advise it much either. It will vastly reduce the security CT adds to your forum, as it protects against many types of HTML/PHP/JavaScript injection in forms, SQL injection, and some common forms of local/remote file injection - the LOW/MEDIUM thing that you can add to files is a load of bollocks - its better IMO to slap everything in the main ctsecurity.php arrays, rather than mess about with adding extra code all over the place.

Chmodding makes no difference, ignore that suggestion, that would just prevent logs being written or updated but wouldn't actually stop the mod working. You might just get an error stating there is no permission to access the logs but it wouldn't mess up your site...

I bet ÂÂÂ £3k on it!

Yes, adding to the main arrays might be a simpler solution. It may also help us to eliminate this problem as I can provide an updated ct_security.php much more easily then giving instructions to add code all over the place. So, please, if anyone gets CT Debug logs please share them in [url=http]this thread[/url] so I can start provided these patches.

[dan0042]

Logfile Overview
Logname Number of entries Features
Worm & Exploit Protection 2 [ VIEW | DELETE ]
IP, Proxy & UserAgent Blocker 0 [ VIEW | DELETE ]
Incorrect Logins 0 [ VIEW | DELETE ]
Blocked Spammers 0 [ VIEW | DELETE ]
Debug Entries 0 [ VIEW | DELETE ]

debug entries 0 whys that then ?
Not leting me create new Forum ,
CBACK CrackerTracker has detected a potential attack on this site with a worm or exploit .script so the Security System stopped the .script.


If you can see this page after including a new MOD into your board or after clicking on a link please contact the Board Administrator with this error message and a de.scription what you have done before you could see this page, that the Admin has the possibility to fix the problem.


,,,,,,
How hell im goin fix this ,Like set my forums up

System Output
Filepath State
staff.php SAFE
fetchposts.php SAFE
delete_users.php Code in the file is possibly executable from beyond phpBB
ratings.php SAFE
album_thumbnail.php common.php / pagestart.php not included or included too late
reflog.php Code in the file is possibly executable from beyond phpBB
download.php Code in the file is possibly executable from beyond phpBB
viewtopic.php Code in the file is possibly executable from beyond phpBB
sitetosite.php Code in the file is possibly executable from beyond phpBB
attach_rules.php Code in the file is possibly executable from beyond phpBB
album.php common.php / pagestart.php not included or included too late
kb.php Code in the file is possibly executable from beyond phpBB
kb_search.php Code in the file is possibly executable from beyond phpBB
export.php SAFE
uacp.php SAFE
album_search.php common.php / pagestart.php not included or included too late
album_download.php common.php / pagestart.php not included or included too late
chatspot_front.php Code in the file is possibly executable from beyond phpBB
redirect.php common.php / pagestart.php not included or included too late
album_showpage.php Code in the file is possibly executable from beyond phpBB
cash.php Code in the file is possibly executable from beyond phpBB
admin/admin_attach_cp.php common.php / pagestart.php not included or included too late
admin/admin_pcp_classesfields.php SAFE
admin/admin_forums.php SAFE
admin/admin_blocks_pos.php SAFE
admin/download_lang.php common.php / pagestart.php not included or included too late
admin/admin_rebuild_search.php SAFE
admin/admin_words.php SAFE
admin/erc.php common.php / pagestart.php not included or included too late
admin/admin_album_config_extended.php Code in the file is possibly executable from beyond phpBB
admin/admin_hacks_list.php Code in the file is possibly executable from beyond phpBB
admin/pagestart.php SAFE
admin/admin_forum_prune.php SAFE
admin/xs_export_data.php SAFE
admin/xs_edit_data.php SAFE
admin/admin_group_extend.php SAFE
admin/admin_pcp_userfields.php SAFE
admin/admin_users_inactive.php SAFE
admin/admin_jr_admin.php Code in the file is possibly executable from beyond phpBB
admin/admin_album_config_thumb.php SAFE
admin/admin_kb_auth.php Code in the file is possibly executable from beyond phpBB
admin/admin_cracker_tracker.php SAFE
admin/admin_qbar.php Code in the file is possibly executable from beyond phpBB
admin/xs_frameset.php SAFE
admin/admin_im_log.php Code in the file is possibly executable from beyond phpBB
admin/admin_wpm.php Code in the file is possibly executable from beyond phpBB
admin/admin_links.php Code in the file is possibly executable from beyond phpBB
admin/admin_album_config_personal.php SAFE
admin/admin_banner.php Code in the file is possibly executable from beyond phpBB
admin/xs_edit.php SAFE
admin/admin_styles.php SAFE
admin/admin_disallow.php SAFE
admin/admin_links_cat.php Code in the file is possibly executable from beyond phpBB
admin/admin_clean.php SAFE
admin/admin_album_config_gd_info.php SAFE
admin/xs_frame_top.php SAFE
admin/admin_sub_settings.php SAFE
admin/admin_album_auth.php SAFE
admin/admin_clear_cache.php SAFE
admin/admin_referers.php Code in the file is possibly executable from beyond phpBB
admin/admin_ug_auth.php SAFE
admin/xs_chmod.php SAFE
admin/admin_pcp_usermaps.php SAFE
admin/cash_reset.php Code in the file is possibly executable from beyond phpBB
admin/admin_album_personal.php SAFE
admin/sig_reset.php SAFE
admin/admin_spellcheck.php Code in the file is possibly executable from beyond phpBB
admin/admin_forums_extend.php Code in the file is possibly executable from beyond phpBB
admin/xs_export.php SAFE
admin/admin_email_users.php Code in the file is possibly executable from beyond phpBB
admin/admin_forum_tour.php Code in the file is possibly executable from beyond phpBB
admin/admin_news.php SAFE
admin/admin_smilies_upload.php SAFE
admin/admin_approve.php Code in the file is possibly executable from beyond phpBB
admin/cash_currencies.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_attach_cp.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_pcp_classesfields.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_forums.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_blocks_pos.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_rebuild_search.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_words.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_album_config_extended.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_hacks_list.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_forum_prune.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_group_extend.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_pcp_userfields.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_users_inactive.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_jr_admin.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_kb_auth.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_cracker_tracker.php SAFE
admin/modules/admin_qbar.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_im_log.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_wpm.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_links.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_banner.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_styles.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_disallow.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_links_cat.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_clean.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_sub_settings.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_album_auth.php An undefined case occurred during scanning
admin/modules/admin_clear_cache.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_referers.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_ug_auth.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_pcp_usermaps.php Code in the file is possibly executable from beyond phpBB
admin/modules/cash_reset.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_album_personal.php An undefined case occurred during scanning
admin/modules/admin_spellcheck.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_forums_extend.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_email_users.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_forum_tour.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_news.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_smilies_upload.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_approve.php Code in the file is possibly executable from beyond phpBB
admin/modules/cash_currencies.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_ip_search.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_portal.php Code in the file is possibly executable from beyond phpBB
admin/modules/cash_events.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_smilies.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_pcp_tableslinked.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_board.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_pcp_wizard.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_lwacctrecords.php Code in the file is possibly executable from beyond phpBB
admin/modules/cash_help.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_pa_custom.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_forumauth.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_im_network.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_pa_fchecker.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_kb_cat.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_pa_file.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_stats_lang.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_cron.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_pa_catauth.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_pa_category.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_styles_select.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_kb_rebuild_search.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_edit_module.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_userlist.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_im_users.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_phpbbmyadmin.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_list.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_attachments.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_layout.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_users.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_prune_users.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_db_maintenance.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_acronyms.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_statistics.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_db_utilities.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_force_read.php Code in the file is possibly executable from beyond phpBB
admin/modules/cash_settings.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_donate_currency.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_groups.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_pa_settings.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_mass_email.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_pa_ug_auth.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_kb_art.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_xs.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_donors.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_subtemplates.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_mod_package.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_auto_lang.php Code in the file is possibly executable from beyond phpBB
admin/modules/cash_exchange.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_ranks.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_board_extend.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_album_cat.php An undefined case occurred during scanning
admin/modules/admin_user_exptime.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_extensions.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_news_cats.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_icons.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_forum_rules.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_user_ban.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_blocks_var.php Code in the file is possibly executable from beyond phpBB
admin/modules/cash_groups.php Code in the file is possibly executable from beyond phpBB
admin/modules/cash_forums.php Code in the file is possibly executable from beyond phpBB
admin/modules/cash_log.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_phpinfo.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_kb_custom.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_topic_shadow.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_cash.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_kb_types.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_rating.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_blocks.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_priv_msgs.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_faq_editor.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_pcp_valueslist.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_pa_license.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_meta_tags.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_bots.php Code in the file is possibly executable from beyond phpBB
admin/modules/admin_security.php An undefined case occurred during scanning
admin/admin_ip_search.php SAFE
admin/admin_portal.php SAFE
admin/cash_events.php Code in the file is possibly executable from beyond phpBB
admin/admin_smilies.php SAFE
admin/admin_pcp_tableslinked.php SAFE
admin/admin_board.php Code in the file is possibly executable from beyond phpBB
admin/xs_download.php SAFE
admin/xs_index.php SAFE
admin/admin_pcp_wizard.php Code in the file is possibly executable from beyond phpBB
admin/admin_lwacctrecords.php SAFE
admin/admin_album_config_index.php SAFE
admin/cash_help.php Code in the file is possibly executable from beyond phpBB
admin/xs_update.php SAFE
admin/admin_pa_custom.php Code in the file is possibly executable from beyond phpBB
admin/admin_forumauth.php SAFE
admin/admin_im_network.php Code in the file is possibly executable from beyond phpBB
admin/admin_pa_fchecker.php Code in the file is possibly executable from beyond phpBB
admin/admin_kb_cat.php Code in the file is possibly executable from beyond phpBB
admin/admin_pa_file.php Code in the file is possibly executable from beyond phpBB
admin/xs_include.php SAFE
admin/admin_stats_lang.php Code in the file is possibly executable from beyond phpBB
admin/admin_cron.php SAFE
admin/admin_pa_catauth.php SAFE
admin/cash_recount.php Code in the file is possibly executable from beyond phpBB
admin/admin_pa_category.php Code in the file is possibly executable from beyond phpBB
admin/admin_styles_select.php SAFE
admin/admin_kb_rebuild_search.php Code in the file is possibly executable from beyond phpBB
admin/admin_edit_module.php common.php / pagestart.php not included or included too late
admin/admin_userlist.php SAFE
admin/admin_im_users.php Code in the file is possibly executable from beyond phpBB
admin/admin_phpbbmyadmin.php SAFE
admin/admin_list.php SAFE
admin/admin_attachments.php Code in the file is possibly executable from beyond phpBB
admin/admin_layout.php SAFE
admin/admin_users.php Code in the file is possibly executable from beyond phpBB
admin/admin_prune_users.php common.php / pagestart.php not included or included too late
admin/import_lang.php common.php / pagestart.php not included or included too late
admin/admin_db_maintenance.php Code in the file is possibly executable from beyond phpBB
admin/admin_acronyms.php Code in the file is possibly executable from beyond phpBB
admin/admin_statistics.php common.php / pagestart.php not included or included too late
admin/admin_db_utilities.php SAFE
admin/admin_album_config_clown.php SAFE
admin/admin_force_read.php common.php / pagestart.php not included or included too late
admin/cash_settings.php Code in the file is possibly executable from beyond phpBB
admin/xs_uninstall.php SAFE
admin/admin_donate_currency.php SAFE
admin/admin_groups.php Code in the file is possibly executable from beyond phpBB
admin/admin_pa_settings.php Code in the file is possibly executable from beyond phpBB
admin/page_header_admin.php SAFE
admin/xs_include_import2.php SAFE
admin/admin_album_config_clearcache.php SAFE
admin/admin_mass_email.php SAFE
admin/vcache.php An undefined case occurred during scanning
admin/admin_pa_ug_auth.php SAFE
admin/admin_kb_art.php Code in the file is possibly executable from beyond phpBB
admin/xs_styles.php SAFE
admin/xs_clone.php SAFE
admin/admin_xs.php Code in the file is possibly executable from beyond phpBB
admin/admin_donors.php SAFE
admin/admin_subtemplates.php SAFE
admin/admin_mod_package.php common.php / pagestart.php not included or included too late
admin/admin_auto_lang.php Code in the file is possibly executable from beyond phpBB
admin/cash_exchange.php Code in the file is possibly executable from beyond phpBB
admin/page_footer_admin.php SAFE
admin/admin_ranks.php SAFE
admin/admin_board_extend.php SAFE
admin/admin_album_cat.php Code in the file is possibly executable from beyond phpBB
admin/admin_user_exptime.php SAFE
admin/admin_extensions.php common.php / pagestart.php not included or included too late
admin/admin_news_cats.php SAFE
admin/admin_icons.php SAFE
admin/admin_forum_rules.php Code in the file is possibly executable from beyond phpBB
admin/admin_user_ban.php SAFE
admin/forum_tour_links.php SAFE
admin/admin_album_config_upload.php SAFE
admin/admin_blocks_var.php SAFE
admin/cash_groups.php Code in the file is possibly executable from beyond phpBB
admin/cash_forums.php Code in the file is possibly executable from beyond phpBB
admin/cash_log.php Code in the file is possibly executable from beyond phpBB
admin/admin_phpinfo.php Code in the file is possibly executable from beyond phpBB
admin/xs_install.php SAFE
admin/admin_kb_custom.php Code in the file is possibly executable from beyond phpBB
admin/admin_topic_shadow.php Code in the file is possibly executable from beyond phpBB
admin/admin_cash.php Code in the file is possibly executable from beyond phpBB
admin/admin_kb_types.php Code in the file is possibly executable from beyond phpBB
admin/admin_rating.php Code in the file is possibly executable from beyond phpBB
admin/admin_blocks.php Code in the file is possibly executable from beyond phpBB
admin/admin_priv_msgs.php Code in the file is possibly executable from beyond phpBB
admin/xs_import.php SAFE
admin/admin_faq_editor.php Code in the file is possibly executable from beyond phpBB
admin/admin_pcp_valueslist.php SAFE
admin/admin_pa_license.php Code in the file is possibly executable from beyond phpBB
admin/admin_meta_tags.php SAFE
admin/xs_include_import.php SAFE
admin/admin_album_config_settings.php SAFE
admin/index.php SAFE
admin/admin_bots.php SAFE
admin/admin_security.php Code in the file is possibly executable from beyond phpBB
admin/xs_cache.php SAFE
album_mod/album_acp_functions.php SAFE
album_mod/album_nuffimage_box.php SAFE
album_mod/album_nuffimage.php SAFE
album_mod/archive.php Code in the file is possibly executable from beyond phpBB
album_mod/album_hierarchy_sql.php SAFE
album_mod/album_watermark.php SAFE
album_mod/album_constants.php SAFE
album_mod/album_memberlist.php SAFE
album_mod/album_exif_info.php common.php / pagestart.php not included or included too late
album_mod/album_hierarchy_functions.php SAFE
album_mod/clown_album_functions.php SAFE
album_mod/album_hierarchy_auth.php SAFE
album_mod/album_functions.php SAFE
album_mod/album_hierarchy_debug.php SAFE
album_mod/album_personal.php SAFE
album_mod/album_bbcode.php Code in the file is possibly executable from beyond phpBB
contact.php Code in the file is possibly executable from beyond phpBB
album_edit.php common.php / pagestart.php not included or included too late
imclient.php common.php / pagestart.php not included or included too late
tour.php SAFE
calendar.php Code in the file is possibly executable from beyond phpBB
profile_photo.php SAFE
archive.php Code in the file is possibly executable from beyond phpBB
lwdonateconfirm.php SAFE
album_upload.php common.php / pagestart.php not included or included too late
mail_digests.php Code in the file is possibly executable from beyond phpBB
ranks.php Code in the file is possibly executable from beyond phpBB
album_modcp.php common.php / pagestart.php not included or included too late
attach_mod/pm_attachments.php SAFE
attach_mod/displaying.php SAFE
attach_mod/attachment_mod.php SAFE
attach_mod/includes/functions_filetypes.php Code in the file is possibly executable from beyond phpBB
attach_mod/includes/functions_selects.php SAFE
attach_mod/includes/constants.php SAFE
attach_mod/includes/functions_delete.php SAFE
attach_mod/includes/functions_attach.php SAFE
attach_mod/includes/functions_thumbs.php SAFE
attach_mod/includes/functions_admin.php SAFE
attach_mod/includes/functions_includes.php SAFE
attach_mod/posting_attachments.php SAFE
blocks/blocks_imp_random_attach.php SAFE
blocks/blocks_imp_statistics.php SAFE
blocks/blocks_imp_poll.php SAFE
blocks/blocks_imp_newest_pic.php SAFE
blocks/blocks_imp_news.php SAFE
blocks/blocks_imp_sec_menu.php SAFE
blocks/blocks_imp_chat.php SAFE
blocks/blocks_imp_recent_topics.php SAFE
blocks/blocks_imp_center_downloads.php SAFE
blocks/blocks_imp_search.php SAFE
blocks/blocks_imp_topics_since.php SAFE
blocks/blocks_imp_calendar.php SAFE
blocks/blocks_imp_online_users2.php SAFE
blocks/blocks_imp_users_visited.php SAFE
blocks/blocks_imp_clock.php SAFE
blocks/blocks_imp_visit_counter.php SAFE
blocks/blocks_imp_online_users.php SAFE
blocks/blocks_imp_user_block.php SAFE
blocks/blocks_imp_donate.php SAFE
blocks/blocks_imp_album2.php SAFE
blocks/blocks_imp_security.php SAFE
blocks/blocks_imp_album.php SAFE
blocks/blocks_imp_links.php SAFE
blocks/blocks_imp_style_select.php SAFE
blocks/blocks_imp_shoutbox.php SAFE
blocks/blocks_imp_announcements.php SAFE
blocks/blocks_imp_menu.php SAFE
blocks/blocks_imp_referers.php SAFE
merge.php SAFE
lwdonateresult.php SAFE
lwtopup.php SAFE
album_pic.php common.php / pagestart.php not included or included too late
album_picm.php common.php / pagestart.php not included or included too late
shoutbox.php SAFE
modules/admin_statistics/module.php SAFE
modules/top_posters_month/module.php SAFE
modules/topics_by_month/module.php SAFE
modules/most_viewed_topics/module.php SAFE
modules/top_posters/module.php SAFE
modules/users_by_month/module.php SAFE
modules/top_smilies/module.php SAFE
modules/top_attachments/module.php SAFE
modules/stats_overview/module.php SAFE
modules/most_active_topics/module.php SAFE
modules/posts_by_month/module.php SAFE
modules/top_posters_week/module.php SAFE
modules/most_active_topicstarter/module.php SAFE
album_personal_cat_admin.php common.php / pagestart.php not included or included too late
album_delete.php common.php / pagestart.php not included or included too late
includes/phpbb_security.php SAFE
includes/mods_settings/mod_last_topics_from.php SAFE
includes/mods_settings/mod_categories_hierarchy.php SAFE
includes/mods_settings/mod_announces.php SAFE
includes/mods_settings/mod_calendar.php SAFE
includes/mods_settings/mod_profile_control_panel.php SAFE
includes/mods_settings/mod_split_topic_type.php SAFE
includes/news_data.php Code in the file is possibly executable from beyond phpBB
includes/topic_review.php SAFE
includes/news.php SAFE
includes/kb_cat.php SAFE
includes/def_words.php SAFE
includes/def_icons.php SAFE
includes/functions_admin_qbar.php SAFE
includes/functions_digests.php Code in the file is possibly executable from beyond phpBB
includes/functions_mods_settings.php SAFE
includes/smtp.php SAFE
includes/functions_kb_auth.php Code in the file is possibly executable from beyond phpBB
includes/optimize_database_cron.php SAFE
includes/group_extend_auth.php SAFE
includes/def_themes.php SAFE
includes/page_header_printer.php SAFE
includes/kb_stats.php SAFE
includes/kb_moderator.php SAFE
includes/functions_portal.php Code in the file is possibly executable from beyond phpBB
includes/lite.php SAFE
includes/constants_prillian.php SAFE
includes/functions_last_topics_from.php SAFE
includes/functions_announces.php SAFE
includes/functions_post.php SAFE
includes/constants_contact.php SAFE
includes/functions_search.php SAFE
includes/kb_header.php SAFE
includes/kb_post.php SAFE
includes/functions_selects.php SAFE
includes/constants.php Code in the file is possibly executable from beyond phpBB
includes/functions_kb_field.php SAFE
includes/pseudocron.php SAFE
includes/page_tail.php SAFE
includes/functions_kb.php SAFE
includes/auth.php SAFE
includes/functions_dbmtnc.php SAFE
includes/functions_topics_list.php SAFE
includes/def_auth.php SAFE
includes/functions_qbar.php SAFE
includes/functions_kb_mx.php SAFE
includes/emailer.php Code in the file is possibly executable from beyond phpBB
includes/functions_categories_hierarchy.php SAFE
includes/template.php Code in the file is possibly executable from beyond phpBB
includes/def_tree.php SAFE
includes/bbcode.php SAFE
includes/prune.php SAFE
includes/sql_parse.php SAFE
includes/kb_rate.php SAFE
includes/usercp_profile.php SAFE
includes/classes_cash.php SAFE
includes/sessions.php SAFE
includes/functions_ftr.php SAFE
includes/def_qbar.php SAFE
includes/usercp_confirm_gd.php SAFE
includes/kb_footer.php SAFE
includes/functions_calendar.php SAFE
includes/kb_constants.php SAFE
includes/page_header.php SAFE
includes/kb_article.php SAFE
includes/usercp_confirm.php SAFE
includes/functions_admin.php SAFE
includes/functions.php Code in the file is possibly executable from beyond phpBB
includes/functions_jr_admin.php Code in the file is possibly executable from beyond phpBB
includes/lw_ipn_grp_functions.php SAFE
includes/functions_cash.php SAFE
includes/db.php SAFE
includes/functions_bookmark.php SAFE
includes/functions_validate.php SAFE
includes/functions_admin_pcp.php SAFE
includes/functions_hacks_list.php SAFE
profile_birthday.php SAFE
sync_postcount.php SAFE
statistics.php SAFE
spell_phpbb.php Code in the file is possibly executable from beyond phpBB
link_register.php Code in the file is possibly executable from beyond phpBB
rating.php SAFE
spelling/spell_English.php Code in the file is possibly executable from beyond phpBB
spelling/spell_MySQL.php Code in the file is possibly executable from beyond phpBB
spelling/spell_langtemplate.php Code in the file is possibly executable from beyond phpBB
spelling/spellcheck.php Code in the file is possibly executable from beyond phpBB
spelling/spell_diags.php Code in the file is possibly executable from beyond phpBB
spelling/spell_Deutsch.php Code in the file is possibly executable from beyond phpBB
spelling/spell_Francais.php Code in the file is possibly executable from beyond phpBB
spelling/spell_admin.php Code in the file is possibly executable from beyond phpBB
spelling/spell_Nederlands.php Code in the file is possibly executable from beyond phpBB
album_pic_nuffed.php common.php / pagestart.php not included or included too late
album_cat.php common.php / pagestart.php not included or included too late
album_comment_edit.php common.php / pagestart.php not included or included too late
memberlist.php SAFE
links.js.php common.php / pagestart.php not included or included too late
ctracker/admin/acp_module_filescanner.php SAFE
ctracker/admin/acp_module_maintenance.php SAFE
ctracker/admin/acp_module_footer.php SAFE
ctracker/admin/acp_module_settings.php SAFE
ctracker/admin/acp_module_credits.php SAFE
ctracker/admin/acp_header.php SAFE
ctracker/admin/acp_module_globalmessage.php SAFE
ctracker/admin/acp_module_changedfiles.php SAFE
ctracker/admin/acp_module_logmanager.php SAFE
ctracker/admin/acp_footer.php SAFE
ctracker/admin/acp_module_ipblocker.php SAFE
ctracker/admin/acp_module_miserableuser.php SAFE
ctracker/admin/acp_module_systemrestore.php SAFE
ctracker/emergency.php SAFE
ctracker/constants.php SAFE
ctracker/engines/ct_visual_confirm.php SAFE
ctracker/engines/ct_security.php SAFE
ctracker/engines/ct_ipblocker.php SAFE
ctracker/engines/ct_varsetter.php SAFE
ctracker/engines/ct_footer.php SAFE
ctracker/classes/class_log_manager.php SAFE
ctracker/classes/class_ct_database.php SAFE
ctracker/classes/class_ct_userfunctions.php SAFE
ctracker/classes/class_ct_adminfunctions.php SAFE
album_hotornot.php common.php / pagestart.php not included or included too late
dload.php Code in the file is possibly executable from beyond phpBB
viewforum.php SAFE
album_nuffload.php SAFE
links.php common.php / pagestart.php not included or included too late
lwdonateshowresult.php SAFE
rating_bias.php SAFE
modcp.php SAFE
profilcp/profilcp_home_privmsgs.php SAFE
profilcp/profilcp_email.php Code in the file is possibly executable from beyond phpBB
profilcp/profilcp_profil_avatar.php SAFE
profilcp/profilcp_home_buddy.php SAFE
profilcp/profilcp_privmsg.php SAFE
profilcp/profilcp_profil_signature.php SAFE
profilcp/profilcp_uacp.php SAFE
profilcp/profilcp_home_wtopics.php SAFE
profilcp/profilcp_public_groups.php SAFE
profilcp/profilcp_profil_photo.php SAFE
profilcp/profilcp_public_base.php SAFE
profilcp/profilcp_profil_digests.php SAFE
profilcp/def/def_userfields_phpbb.php SAFE
profilcp/def/def_userfuncs_cash.php SAFE
profilcp/def/def_userfuncs.php SAFE
profilcp/def/def_usermaps.php SAFE
profilcp/def/def_userfuncs_custom.php SAFE
profilcp/def/def_userfuncs_album.php SAFE
profilcp/def/def_userfuncs_viewonline.php SAFE
profilcp/def/def_userfuncs_warning.php SAFE
profilcp/def/def_userfields.php SAFE
profilcp/def/def_userfuncs_std.php SAFE
profilcp/def/def_userfuncs_bhere.php An undefined case occurred during scanning
profilcp/def/def_userfuncs_vlist.php SAFE
profilcp/def/def_userfuncs_skype.php SAFE
profilcp/profilcp_home.php SAFE
profilcp/profilcp_public_last_topics.php SAFE
profilcp/profilcp_privmsg_popup.php Code in the file is possibly executable from beyond phpBB
profilcp/functions_profile.php SAFE
profilcp/profilcp_activate.php Code in the file is possibly executable from beyond phpBB
profilcp/profilcp_sendpassword.php Code in the file is possibly executable from beyond phpBB
profilcp/profilcp_buddy.php SAFE
profilcp/profilcp_home_last_topics.php SAFE
album_pclzip_lib.php Code in the file is possibly executable from beyond phpBB
mycookies.php SAFE
groupcp.php SAFE
shoutbox_view.php common.php / pagestart.php not included or included too late
acronyms.php common.php / pagestart.php not included or included too late
album_comment_delete.php common.php / pagestart.php not included or included too late
shoutbox_max.php Code in the file is possibly executable from beyond phpBB
lwdonate.php SAFE
portal.php common.php / pagestart.php not included or included too late
chatspot/chatspot_db.php Code in the file is possibly executable from beyond phpBB
chatspot/java.script.php Code in the file is possibly executable from beyond phpBB
chatspot/chatspot_title.php Code in the file is possibly executable from beyond phpBB
chatspot/message_send.php Code in the file is possibly executable from beyond phpBB
chatspot/chatspot_drop.php Code in the file is possibly executable from beyond phpBB
chatspot/chatspot.php Code in the file is possibly executable from beyond phpBB
chatspot/message_interpreter.php Code in the file is possibly executable from beyond phpBB
chatspot/user_invite.php Code in the file is possibly executable from beyond phpBB
chatspot/chatspot_help.php Code in the file is possibly executable from beyond phpBB
chatspot/chatspot_rooms.php Code in the file is possibly executable from beyond phpBB
chatspot/chatspot_about.php Code in the file is possibly executable from beyond phpBB
chatspot/chatspot_functions.php Code in the file is possibly executable from beyond phpBB
chatspot/clear_window.php Code in the file is possibly executable from beyond phpBB
chatspot/message_control.php Code in the file is possibly executable from beyond phpBB
chatspot/room_manager.php Code in the file is possibly executable from beyond phpBB
hacks_list.php SAFE
card.php SAFE
postings_popup.php SAFE
desktop.php Code in the file is possibly executable from beyond phpBB
album_avatar.php common.php / pagestart.php not included or included too late
album_nuffload_pbar.php common.php / pagestart.php not included or included too late
files/index.php Code in the file is possibly executable from beyond phpBB
login.php SAFE
album_personal_index.php common.php / pagestart.php not included or included too late
posting.php Code in the file is possibly executable from beyond phpBB
lwdonors.php SAFE
profile_avatar.php SAFE
lwtopupshowresult.php SAFE
viewonline.php SAFE
login_security.php common.php / pagestart.php not included or included too late
album_allpics.php common.php / pagestart.php not included or included too late
calendar_scheduler.php SAFE
stats_mod/content/bars.php SAFE
stats_mod/content/statistical.php SAFE
stats_mod/content/values.php SAFE
stats_mod/core.php Code in the file is possibly executable from beyond phpBB
stats_mod/includes/admin_functions.php SAFE
stats_mod/includes/constants.php SAFE
stats_mod/includes/stat_functions.php SAFE
stats_mod/includes/template.php Code in the file is possibly executable from beyond phpBB
stats_mod/functions.php SAFE
stats_mod/db_cache.php SAFE
lwtopupresult.php SAFE
album_personal.php SAFE
lwupdateusersub.php SAFE
search.php Code in the file is possibly executable from beyond phpBB
faq.php SAFE
chatbox_front.php SAFE
show_post.php SAFE
errors.php common.php / pagestart.php not included or included too late
tellafriend.php Code in the file is possibly executable from beyond phpBB
rules.php SAFE
profile.php Code in the file is possibly executable from beyond phpBB
privmsg.php Code in the file is possibly executable from beyond phpBB
signature.php SAFE
index.php SAFE
ct_login_history.php SAFE
ctracker_login.php SAFE
mods/rating/functions_rating.php SAFE
mods/rating/functions_rating_2.php SAFE
mods/netclectic/mini_cal/calendarSuite.php Code in the file is possibly executable from beyond phpBB
mods/netclectic/mini_cal/mini_cal2.php SAFE
mods/netclectic/mini_cal/mini_cal.php SAFE
mods/netclectic/mini_cal/mini_cal_TOPIC.php Code in the file is possibly executable from beyond phpBB
mods/contact/functions_contact.php SAFE
mods/contact/contactcp_edit.php SAFE
mods/contact/class_contact.php Code in the file is possibly executable from beyond phpBB
mods/contact/contactcp_listbox.php SAFE
mods/contact/contactcp_show.php SAFE
mods/prillian/network_parseusers.php SAFE
mods/prillian/usercp_imprefs.php SAFE
mods/prillian/prill_header.php SAFE
mods/prillian/prill_footer.php SAFE
mods/prillian/functions_im.php SAFE
mods/prillian/im_main.php SAFE
mods/prillian/im_send.php SAFE
mods/prillian/network_users.php SAFE
mods/prillian/network_receive.php SAFE
mods/prillian/im_log.php SAFE
mods/prillian/im_read.php SAFE
lwacctrecords.php SAFE
profile_pic.php SAFE
news_rss.php common.php / pagestart.php not included or included too late

[Teelk]

Are you turning debug mode on to get the debug logs?

[sanji]

Trust me, you want CrackerTracker.

Trust me, I do NOT.

My first interest on maintaining a forum is to be able to share some knowledge on the subject I am interested in - in my case, discovery of Japan off the beaten tracks. It is not to spend tens of hours to update (which I did because it was important) and then debug all files (thanks to CTracker).

After all, guys, we have public forums, not boards for secret organizations that are under attack every 10 minutes <img>

For example now, when I upload a picture, eveything is working fine. When I upload a second one, I get blocked by CTracker. But I did the same yesterday! Why is it behaving differently? And anyway, why should CTracker block a picture upload???

I feel I am really losing too much time with that.

sanji

[Imajica]

well here is what i am doing for now...

Code: Select all

// CrackerTracker v5.x// include($phpbb_root_path . 'ctracker/engines/ct_security.' . $phpEx);

does work... so I'm using that to setup all the things I need to setup then turning it back on
I'll do this as needed I think until there is a better fix available

I do like having crackertracker around... just don't want it to interfere with normal operations

[ZacFields]

Trust me, you want CrackerTracker.

Trust me, I do NOT.

My first interest on maintaining a forum is to be able to share some knowledge on the subject I am interested in - in my case, discovery of Japan off the beaten tracks. It is not to spend tens of hours to update (which I did because it was important) and then debug all files (thanks to CTracker).

After all, guys, we have public forums, not boards for secret organizations that are under attack every 10 minutes <img>

For example now, when I upload a picture, eveything is working fine. When I upload a second one, I get blocked by CTracker. But I did the same yesterday! Why is it behaving differently? And anyway, why should CTracker block a picture upload???

I feel I am really losing too much time with that.

sanji

Hackers can compromise your boards in many different ways. If you do a google search you can find all the different exploits hackers have discovered to compromise all sorts of different software.

Do you not remember maybe 6 months ago the mass-hacking of integramod forums? We had people in here by the dozen telling us that an exploit was found and that their boards were getting compromised.

On that same note, have you ever been hacked before? Take it from somebody who has been hacked before, I will easily take the difficulty of working the bugs out of Cracker-Tracker than be hacked again. When I was hacked, the hacker got into my admin account and deleted everything from my database. Every single post, and every single user. I had to put up a database backup that was about a month old because I was too naive to keep backups, and my boards were down for an entire day, because this happened in the morning, so I worked on getting everything restored (first I had to take up the "YOU HAVE OFFICIALLY BEEN PWNED!!!!!" messages that replaced my homepage) and then I had to go to work.

I understand that you guys are frusterated with this. And again, we are working on a solution to fix the problem. Be patient, and try out the fixes that have already been posted to see if they affect you.

If you cannot find a fix, post somewhere exactly what you did to cause the message. This means *everything*. If you were posting a picture, tell us what the filename was of the picture, and tell us what you put in the subject line and de.scription of the picture. This is all information that we can use to get past this, so that we can finish this patch.

Zac

[Imajica]

and that is exactly why I am only killing cracker tracker to do something.. then right back on it goes.

[Skywalker]

i get "CBACK CrackerTracker couldn't run the database operation correctly." when i try to update my board configuration... i have tried to place a backup, or even the original admin_board.php file but this error remains.... where can i delete this message and let it show me the real error code so ik can fix the error... this is even the most stuupid error message i've ever seen... i'm losing a lot off time i don't know where i need to search for the error causing this...
i want to see the sql error instead of "CBACK CrackerTracker couldn't run the database operation correctly." i like the cracker tracker but this message is ridiculous... i want to see whats wrong not a message telling me there is something wrong somewhere but is not showing what...

[Skywalker]

found the error causing this, it was a value in the database but still a more detailed error in such cases is a must