Page 1 of 1

[SOLVED] Shoutbox - Refresh Hacking attempt !

PostPosted: Wed May 16, 2007 6:48 am
Author: hakmak222
Your phpBB Version: 2.0.22
phpBB Type: Integramod 141
MODs: Yes
Your knowledge: Advanced Knowledge
Board URL: http://www.valcynasylum.com

PHP Version:
MySQL Version:


What was done before the problem appeared?
Nothing, this is a fresh install


What was done to try to solve the problem?
I put in the bug fix listed above for shoutbox and period



De.scription and Message

When the shoutbox autorefreshes on its own it throws up a Hacker Attack message in the shoutbox space. When you click the refresh button it refreshes fine. This happens to all users.

Re: Shoutbox - Refresh Hacker Attack

PostPosted: Wed May 16, 2007 7:32 am
Author: Frost
Hello,

Please visit this link: [url=http]Exploit False Positives[/url]

Re: Shoutbox - Refresh Hacker Attack

PostPosted: Wed May 16, 2007 7:39 am
Author: hakmak222
Just before I go reading all 6 pages of posts, it isn't a ctracker message, is there more than ctracker in that post as well?

Re: Shoutbox - Refresh Hacker Attack

PostPosted: Wed May 16, 2007 7:46 am
Author: Frost
no, can you show a screenshot?

Re: Shoutbox - Refresh Hacker Attack

PostPosted: Wed May 16, 2007 8:16 am
Author: hakmak222
Before
[flash=,:2kk8aasw]http://www.valcynasylum.com/images/Before.jpg[/flash:2kk8aasw]
After Auto Refresh
[flash=,:2kk8aasw]http://www.valcynasylum.com/images/After.jpg[/flash:2kk8aasw]

Re: Shoutbox - Refresh Hacker Attack

PostPosted: Wed May 16, 2007 8:54 am
Author: Helter
can you post a link to the fix you added. It appears that you are losing your session. Since shoutbox thinks you are not logged in, you get the message, die hacking attempt

Re: Shoutbox - Refresh Hacker Attack

PostPosted: Wed May 16, 2007 8:57 am
Author: hakmak222
[url=http]Link to Fix Installed[/url]

Re: Shoutbox - Refresh Hacker Attack

PostPosted: Wed May 16, 2007 9:13 am
Author: hakmak222
So would it be in the shoutbox refresh that its not passing the session id along? Similar to the style select box?

Re: Shoutbox - Refresh Hacker Attack

PostPosted: Wed May 16, 2007 9:26 am
Author: Helter
double check where you applied the edits. Ive added them here and cannot reproduce your error

Re: Shoutbox - Refresh Hacker Attack

PostPosted: Wed May 16, 2007 10:35 am
Author: hakmak222
I removed them, this was happening BEFORE the fix, I tried to apply the fix after I saw the message, since the fix said something about shoutbox. So with or without the fix it is happening.

Re: Shoutbox - Refresh Hacker Attack

PostPosted: Wed May 16, 2007 10:47 am
Author: Helter
do you get this error using the default Integra2 template?
have you added any mods?

Re: Shoutbox - Refresh Hacker Attack

PostPosted: Wed May 16, 2007 10:58 am
Author: hakmak222
No mods, I just changed to the integra2 style and it still happens

Re: Shoutbox - Refresh Hacker Attack

PostPosted: Wed May 16, 2007 5:35 pm
Author: Frost
out of curiosity what are your cookie settings?

Re: Shoutbox - Refresh Hacker Attack

PostPosted: Fri May 25, 2007 8:20 pm
Author: hakmak222
"Frost";p="25450" wrote:out of curiosity what are your cookie settings?


Actually turns out cookies were the culprit...where I had thought I had done different cookie settings on the site, I actually choose the previous cookie naming convention used for an really old install, changed everything and it worked!