Error trying to delete a DL category (seen as worm/exploit)

[meijin]

Your phpBB Version: 2.0.
phpBB Type: Integramod 141
MODs: No
Your knowledge: Beginner
Board URL: http://www.watchgeeks.net

PHP Version:
MySQL Version:


What was done before the problem appeared?
Nothing


What was done to try to solve the problem?
I checked the logs thinking that this was another error as described in the KB, but this shows in the exploit/worm area with no recommendation of how to fix it.



De.scription and Message

So...when I attempt to delete a download category, I get a CrackerTracker error. I thought it would be like with the other errors where you can follow the directions in the KB article and correct it. Unfortunately, this shows up in the worm/exploit area. All I get is:

Appeal:
/im4/admin/admin_pa_category.php?mode=delete&cat_id=2&sid=3ffac9bb5cbae0687c9eac4817937ff4

Referer:
//www.watchgeeks.net/im4/admin/admin_pa_category.php?mode=delete&cat_id=2&sid=3ffac9bb5cbae0687c9eac4817937ff4

UserAgent:
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.12) Gecko/20080201 Firefox/2.0.0.12

So, at this point, I have absolutely zero ideas as to how to correct this....can anyone help?

Thanks!

[Helter]

which category are you trying to delete?

[meijin]

It is a category I created for downloading a PDF catalog of watches...do you need the exact name?

[meijin]

I am not also getting a worm/exploit error when I try to create a new KB category to populate as well as when I try to use the "email post" option. It seems like everything now that would normally be one of the false positive errors addressed in the KB are showing up as a worm/exploit error. Strange...other than some look and feel changes, nothing has changed on the forum that I think may have caused this.

Thoughts?

Thanks for the help!

[CaNNon]

Go into the CrackerTracker special page look for the switch about protecting your site from misconfiguration, shut that of and give it a try.

(you should turn that back on when your done)

[meijin]

Go into the CrackerTracker special page look for the switch about protecting your site from misconfiguration, shut that of and give it a try.

(you should turn that back on when your done)

Nope...I found what you are talking about and made the change, but got exactly the same results.

Grrrr....this is very frustrating as I am really stuck on several things now.

Thanks for the help!

[meijin]

I also get this error when I try to add a KB article. I can create the category and all of the rest of the steps, but when I submit an article it gives me the worm/exploit error.

This is not good as it is blocking pretty much all of my configuration attempts for my forum/portal.

[CaNNon]

For that one, rename the CTracker folder you'll get a few errors at the top of your site but everything else will work. Make the fix and then name the folder back.

[meijin]

For that one, rename the CTracker folder you'll get a few errors at the top of your site but everything else will work. Make the fix and then name the folder back.

It should work just for the KB article issue or for everything?

Thanks!

[CaNNon]

You can use it anytime your stuck but it's better to have the debugs done as it automates things. <img>

[Fallen]

You get this error when doing many other things. Editing a forum in the admin panel. Creating one is fine, but try to edit it. I have also seen the problem on another forum. Different portal. I think the error lies in the tracker.

[meijin]

Well, this error is absolutely killing me!

Trying to rename the directory for CTracker is not an option. Some of the functionality that I am trying to get to work flat out don't work when this is done. Plus, at least the "email post" option gets the same worm/exploit error...so a fix is needed so that user functionality is what it is supposed to be.

Plus, major functionality for the KB, the photo album and the downloads just don't work with CTracker the way it is configured. I have looked for ways to deactivate the worm/exploit section and can't. I can find how to deactivate just about everything else...but not the worm exploit section.

So, I am really stuck here and would VERY much appreciate any help that anyone can provide. I understand the protection that CTracker provides for me and the forum. However, CTracker is pretty much worthless to me when it will not allow me use whole sections of the portal and forum. Very frustrating.

One thing I did notice...the version of CTracker installed is 5.0.3 and the current release is 5.0.6. I went to their website and the lack of English there makes me really wonder how easy it would be to upgrade...or is that even possible?

My forum is about watch collecting and one of my "partners" on the website hosts a watch show on TV. We are trying to get the forum to the point where we can open it up to the public. He has tens of thousands of people watching his shows, so I think lots of folks will be visiting the site. But until we can get this error figured out, we are stuck. So, therefore, I would really, really appreciate any and all help on this.

Thanks in advance!

[CaNNon]

update notes on 5.05
http://www.integramod.com/forum/viewtopic.php?t=4665

update notes on 5.06
http://www.integramod.com/forum/viewtopic.php?t=4687

They have quite a few fix's in them. Then when you use debug, if it dosn't fix it,
copy the debug info and go here
http://www.integramod.com/forum/viewtopic.php?t=2689

look it over and if we have not posted the fix for that file, post your debug message.

[meijin]

They have quite a few fix's in them. Then when you use debug, if it dosn't fix it,
copy the debug info and go here
http://www.integramod.com/forum/viewtopic.php?t=2689

look it over and if we have not posted the fix for that file, post your debug message.

Hopefully I am not misunderstanding you...but as per my first post in the thread, I am not getting errors as described in the KB article that you reference. I have fixed several of those. These errors (KB, photo album, downloads, email post to friend, etc) are all showing up in the worm/exploit area of the logs. So, I cannot correct them as the KB indicates...this seems to be a totally different kind of error.

Am I misunderstanding you?

Thanks!

[CaNNon]

Turn on crackertrackers debug, then go back and do what ever caused the exploit message and post the debug info here.

[meijin]

OK...I am sorry, I must be some sort of complete moron! I could have sworn I had the debugging turned on...

Here is one I cannot fix...

CTracker says to modify admin_kb_cat.php to include:

define('IN_PHPBB', 1);
define('CT_SECLEVEL', 'MEDIUM');
$ct_ignorepvar = array('catname');

However, I have already had to modify this file to get another function to work...so when I open it, this is what is already there:

define( 'IN_PHPBB', 1 );
define('CT_SECLEVEL', 'MEDIUM');
$ct_ignorepvar = array('submit');

No matter where I try to add what it recommends for this function, it does not work. I did not see this in any of the other threads...any ideas?

Thanks!

Again, sorry I am an idiot and completely missed what you were trying to say and also in doing it correctly. Your help and that of everyone else is much appreciated.

[meijin]

Nevermind...figured out that this is an array and can hold multiple items...got it working.

Man, I can be so dense some times! LOL!

[CaNNon]

Got to have the debug on, but hey we've all made our share... <img>

With the file name, it can be checked to the files others have done or have running.
Most times though the debug has what you need in it.