IntegraMOD

Home of phpBB Integrated Modifications
https://www.integramod.com/forum/

[Solved]phpBB Security :: Special Fields Help

https://www.integramod.com/forum/viewtopic.php?f=18&t=3390

Page 1 of 1

[Solved]phpBB Security :: Special Fields Help

PostPosted: Sun Apr 08, 2007 4:23 am
Author: dan0042
Your phpBB Version: 2.0.
phpBB Type: Standard phpBB
MODs: No
Your knowledge: Beginner
Board URL: [url]http://[/url]

PHP Version:
MySQL Version:


What was done before the problem appeared?



What was done to try to solve the problem?




De.scription and Message

Amount of allowed admins
This number will set how many admins are allowed to be on your site. So no one can inject an admin account to gain access.
You currently have 1 real users set to 'Admin' status in the users table. It appears you have more admins in the users table than allowed!
Amount of allowed mods
This number will set how many moderators are allowed to be on your site. So no one can inject a moderator account to gain access.
You currently have 0 real users set to 'Moderator' status in the users table. It appears you have more mods in the users table than allowed!
[hr:2t9hhkc4]
New Instill...Now this comeing up

Re: phpBB Security :: Special Fields Help

PostPosted: Sun Apr 08, 2007 2:15 pm
Author: Helter
go to
acp/security/special
and set the amount of allowed mods and admins

Re: phpBB Security :: Special Fields Help

PostPosted: Sun Apr 08, 2007 3:55 pm
Author: dan0042
"HelterSkelter";p="23836" wrote:go to
acp/security/special
and set the amount of allowed mods and admins

Did that still same

You currently have 1 real users set to 'Admin' status in the users table. It appears you have more admins in the users table than allowed!
You currently have 5 real users set to 'Moderator' status in the users table. It appears you have more mods in the users table than allowed!

Re: phpBB Security :: Special Fields Help

PostPosted: Sun Apr 08, 2007 6:12 pm
Author: Helter
chmod includes/phpbb_security to 666

Re: phpBB Security :: Special Fields Help

PostPosted: Sun Apr 08, 2007 7:29 pm
Author: dan0042
"HelterSkelter";p="23844" wrote:chmod includes/phpbb_security to 666

It was Chmod 666......Still the same mate

Re: phpBB Security :: Special Fields Help

PostPosted: Sun Apr 08, 2007 8:17 pm
Author: Helter
it wasnt 666 at the time of installation

http://www.integramod.com/forum/viewtopic.php?t=3012

Re: phpBB Security :: Special Fields Help

PostPosted: Mon Apr 09, 2007 4:59 am
Author: .QUACK.Major.Pain
Mine has never worked from day 1 and I did the chmod right away too.

Change to enable and change the values, but always returns back to disabled and blank values.

Re: phpBB Security :: Special Fields Help

PostPosted: Mon Apr 09, 2007 5:48 am
Author: dan0042
function phpBBSecurity_AdminConfigName()
{
return 'phpBBSecurity_max_admins';
}

function phpBBSecurity_ModConfigName()
{
return 'phpBBSecurity_max_mods';
}

function phpBBSecurity_UseSpecial()
{
return 'phpBBSecurity_use_max';
[hr:2zomzfey]
TBA mate iam lost with this

Open includes/phpbb_security.php.

FINDPHP: à¢Ãƒ ¢Ã¢â‚¬Å¡Ã‚ ¬Ãƒâ€šÃ‚ º à¢Ãƒ ¢Ã¢â‚¬Å¡Ã‚ ¬Ãƒâ€šÃ‚ ¹ Select à¢Ãƒ ¢Ã¢â‚¬Å¡Ã‚ ¬Ãƒâ€šÃ‚ ºÃƒÆ’ ¢Ãƒ ¢Ã¢â‚¬Å¡Ã‚ ¬Ãƒâ€šÃ‚ ¹ Contract à¢Ãƒ ¢Ã¢â‚¬Å¡Ã‚ ¬Ãƒâ€šÃ‚ º
function phpBBSecurity_AdminConfigName()
{
return 'phpBBSecurity_max_admins';
}

function phpBBSecurity_ModConfigName()
{
return 'phpBBSecurity_max_mods';
}

function phpBBSecurity_UseSpecial()
{
return 'phpBBSecurity_use_max';
}


phpBBSecurity_max_admins = sec_admin value
phpBBSecurity_max_mods = sec_mod value
phpBBSecurity_use_max = sec_name value

So if the value of your sec_admin is abcdefg, then replace phpBBSecurity_max_admins with abcdefg in the phpbb_security.php file. When you updated your phpbb_security.php file probably wasn't CHMOD'd to allow the update to write to it.

Re: phpBB Security :: Special Fields Help

PostPosted: Mon Apr 09, 2007 11:08 am
Author: .QUACK.Major.Pain
Open includes/phpbb_security.php.

FINDPHP: à¢Ãƒ ¢Ã¢â‚¬Å¡Ã‚ ¬Ãƒâ€šÃ‚ º à¢Ãƒ ¢Ã¢â‚¬Å¡Ã‚ ¬Ãƒâ€šÃ‚ ¹ Select à¢Ãƒ ¢Ã¢â‚¬Å¡Ã‚ ¬Ãƒâ€šÃ‚ ºÃƒÆ’ ¢Ãƒ ¢Ã¢â‚¬Å¡Ã‚ ¬Ãƒâ€šÃ‚ ¹ Contract à¢Ãƒ ¢Ã¢â‚¬Å¡Ã‚ ¬Ãƒâ€šÃ‚ º
function phpBBSecurity_AdminConfigName()
{
return 'phpBBSecurity_max_admins';
}

function phpBBSecurity_ModConfigName()
{
return 'phpBBSecurity_max_mods';
}

function phpBBSecurity_UseSpecial()
{
return 'phpBBSecurity_use_max';
}


phpBBSecurity_max_admins = sec_admin value
phpBBSecurity_max_mods = sec_mod value
phpBBSecurity_use_max = sec_name value

So if the value of your sec_admin is abcdefg, then replace phpBBSecurity_max_admins with abcdefg in the phpbb_security.php file. When you updated your phpbb_security.php file probably wasn't CHMOD'd to allow the update to write to it.


Not sure but I think he means manually edit the file.
If you have 3 admins and 7 mods, then it would look like this:

Open includes/phpbb_security.php.

FINDPHP: à¢Ãƒ ¢Ã¢â‚¬Å¡Ã‚ ¬Ãƒâ€šÃ‚ º à¢Ãƒ ¢Ã¢â‚¬Å¡Ã‚ ¬Ãƒâ€šÃ‚ ¹ Select à¢Ãƒ ¢Ã¢â‚¬Å¡Ã‚ ¬Ãƒâ€šÃ‚ ºÃƒÆ’ ¢Ãƒ ¢Ã¢â‚¬Å¡Ã‚ ¬Ãƒâ€šÃ‚ ¹ Contract à¢Ãƒ ¢Ã¢â‚¬Å¡Ã‚ ¬Ãƒâ€šÃ‚ º
function phpBBSecurity_AdminConfigName()
{
return '3';
}

function phpBBSecurity_ModConfigName()
{
return '7';
}

function phpBBSecurity_UseSpecial()
{
return 'phpBBSecurity_use_max';
}


phpBBSecurity_max_admins = sec_admin value
phpBBSecurity_max_mods = sec_mod value
phpBBSecurity_use_max = sec_name value

So if the value of your sec_admin is abcdefg, then replace phpBBSecurity_max_admins with abcdefg in the phpbb_security.php file. When you updated your phpbb_security.php file probably wasn't CHMOD'd to allow the update to write to it.


I tried it but nothing looks like it has changed.

Re: phpBB Security :: Special Fields Help

PostPosted: Mon Apr 09, 2007 3:47 pm
Author: Helter
open
includes/phpbb_security
Find
Code: Select all
 //*** The return valuse in the next 3 functions MUST be changed to the default values prior to installing.See Michales_notes.txt in install directory before running an install ***//         function phpBBSecurity_AdminConfigName()     {         return 'phpBBSecurity_max_admins';     }             function phpBBSecurity_ModConfigName()     {         return 'phpBBSecurity_max_mods';     }             function phpBBSecurity_UseSpecial()     {         return 'phpBBSecurity_use_max';     }          


replace with

Code: Select all
 //*** The return valuse in the next 3 functions MUST be changed to the default values prior to installing.See Michales_notes.txt in install directory before running an install ***//         function phpBBSecurity_AdminConfigName()     {         return 'admins_allowed';     }             function phpBBSecurity_ModConfigName()     {         return 'mods_allowed';     }             function phpBBSecurity_UseSpecial()     {         return 'block_unwanted';     }      


using phpmyadmin, run this querry

Code: Select all
 INSERT INTO `phpbb_config` VALUES ('admins_allowed', '10');INSERT INTO `phpbb_config` VALUES ('mods_allowed', '10');INSERT INTO `phpbb_config` VALUES ('block_unwanted', '1');INSERT INTO `phpbb_config` VALUES ('sec_admin', 'admins_allowed');INSERT INTO `phpbb_config` VALUES ('sec_mods', 'mods_allowed');INSERT INTO `phpbb_config` VALUES ('sec_name', 'block_unwanted');  


be sure phpbb_security is chmodded to 666 (many times your ftp client will say it is 666, but it is not. You then have to set it from your web host control panel)
Now go to acp/security/special and set the number to what they should be


if the querry fails due to fields already exist use this


Code: Select all
 REPLACE INTO `phpbb_config` VALUES ('admins_allowed', '10');REPLACE INTO `phpbb_config` VALUES ('mods_allowed', '10');REPLACE INTO `phpbb_config` VALUES ('block_unwanted', '1');REPLACE INTO `phpbb_config` VALUES ('sec_admin', 'admins_allowed');REPLACE INTO `phpbb_config` VALUES ('sec_mods', 'mods_allowed');REPLACE INTO `phpbb_config` VALUES ('sec_name', 'block_unwanted');  

Re: phpBB Security :: Special Fields Help

PostPosted: Mon Apr 09, 2007 3:53 pm
Author: .QUACK.Major.Pain
Just to let you know, I tried the above and got the following CT debug error:

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Script-Filename: /forum/admin/admin_phpbbmyadmin.php
----------------

Request-Method: POST

Matching rule: insert
In variable: this_query

Matching rule: into
In variable: this_query

Matching rule: '
In variable: this_query

Possible solution:
------------------

#
#-----[ OPEN ]------------------------------------------
#
/forum/admin/admin_phpbbmyadmin.php

#
#-----[ FIND ]------------------------------------------
#
define('IN_PHPBB', 1);

#
#-----[ AFTER, ADD ]------------------------------------------
#
define('CT_SECLEVEL', 'MEDIUM');
$ct_ignorepvar = array('this_query');

#
#-----[ SAVE/CLOSE ALL FILES ]------------------------------------------
#
# EoM




After I did the debug, I got this:

Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in /home/k1jon/public_html/forum/db/mysql4.php on line 254

Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in /home/k1jon/public_html/forum/db/mysql4.php on line 254

Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in /home/k1jon/public_html/forum/db/mysql4.php on line 254


General Error
Error in SQL query INSERT INTO `phpbb_config` VALUES ('sec_admin', 'admins_allowed');
Click here to return to phpBBMyAdmin board.
Click here to return to Admin Control Panel board.

DEBUG MODE

SQL Error : 1062 Duplicate entry 'sec_admin' for key 1


Just to make sure, The phpbbmyadmin in ACP is ok to use?

I did check the ACP>Security>Special screen and changed values. It works now.

Re: phpBB Security :: Special Fields Help

PostPosted: Mon Apr 09, 2007 4:04 pm
Author: Helter
I always use phpmyadmin from my webhost

if your having trouble, try this syntax
Code: Select all
 INSERT INTO phpbb_config VALUES ('admins_allowed', '9');INSERT INTO phpbb_config VALUES ('mods_allowed', '9');INSERT INTO phpbb_config VALUES ('block_unwanted', '1');INSERT INTO phpbb_config VALUES ('sec_admin', 'admins_allowed');INSERT INTO phpbb_config VALUES ('sec_mods', 'mods_allowed');INSERT INTO phpbb_config VALUES ('sec_name', 'block_unwanted');  

PostPosted: Tue Apr 10, 2007 3:36 pm
Author: dan0042
its working thanks
All times are UTC - 8 hours [ DST ]
Page 1 of 1
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/