Page 1 of 1
CrackerTracker took over my site

Posted:
Sun Jan 21, 2007 9:03 am
Author: AM
Is there any way to turn off CrackerTracker? It won't allow me to configure the site, set up forums or do anything in the admin center.
No matter what I do, it thinks it's a worm attack, and I get a forum set up just the way I want it, and a security alert stops me from saving my configurations. Then I have to start all over again.
Is this security alert going to keep happening when people try to post to the forum, and they will lose their entire post?
Re: CrackerTracker took over my site

Posted:
Sun Jan 21, 2007 9:36 am
Author: Drop-Forged
I dont think we can just turn CrackerTracker, but Im not sure.
Have you tried following the instructions in the KB article???
http://www.integramod.com/forum/kb.php? ... ticle&k=22If that doesnt help, it should at least give you some info that you can post to help figure out where the problem is.
Im afraid these problems come along with the territory of adding a security mod like CT to IM, hopefully the bugs will be worked out soon.

Posted:
Mon Jan 22, 2007 4:31 pm
Author: AM
DF, I did everything that article said to do, and I still can't configure the site.
It doesn't allow me to add de.scriptions to anything. I can add forums and categories, but not de.scriptions.
I can't make changes to the welcome message either. It views that as a "worm" attack.
Re: CrackerTracker took over my site

Posted:
Mon Jan 22, 2007 5:48 pm
Author: fish222222
I am having a bunch of issues too. I get this debug info, but I am not fluent enough with PHP to know what I need to edit...
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Script-Filename: /forums/admin/admin_forums_extend.php
----------------
Request-Method: POST
Matching rule: and
In variable: desc
Possible solution:
------------------
#
#-----[ OPEN ]------------------------------------------
#
/forums/admin/admin_forums_extend.php
#
#-----[ FIND ]------------------------------------------
#
define('IN_PHPBB', 1);
#
#-----[ AFTER, ADD ]------------------------------------------
#
define('CT_SECLEVEL', 'MEDIUM');
$ct_ignorepvar = array('desc');
#
#-----[ SAVE/CLOSE ALL FILES ]------------------------------------------
#
# EoM
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Script-Filename: /forums/admin/admin_forums_extend.php
----------------
Request-Method: POST
Matching rule: and
In variable: desc
Possible solution:
------------------
#
#-----[ OPEN ]------------------------------------------
#
/forums/admin/admin_forums_extend.php
#
#-----[ FIND ]------------------------------------------
#
define('IN_PHPBB', 1);
#
#-----[ AFTER, ADD ]------------------------------------------
#
define('CT_SECLEVEL', 'MEDIUM');
$ct_ignorepvar = array('desc');
#
#-----[ SAVE/CLOSE ALL FILES ]------------------------------------------
#
# EoM
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Script-Filename: /forums/admin/admin_forums_extend.php
----------------
Request-Method: POST
Matching rule: and
In variable: desc
Possible solution:
------------------
#
#-----[ OPEN ]------------------------------------------
#
/forums/admin/admin_forums_extend.php
#
#-----[ FIND ]------------------------------------------
#
define('IN_PHPBB', 1);
#
#-----[ AFTER, ADD ]------------------------------------------
#
define('CT_SECLEVEL', 'MEDIUM');
$ct_ignorepvar = array('desc');
#
#-----[ SAVE/CLOSE ALL FILES ]------------------------------------------
#
# EoM

Posted:
Mon Jan 22, 2007 6:19 pm
Author: AM
That's very similar to what I'm getting too, only with admin/meta_tags even though that's not what I'm working on. Though it won't let me update that page either.
There must be a way to turn that cracker thing off so the forum can be configured. I have my site shut off right now because I can't configure with those security messages making me lose all my changes.

Posted:
Mon Jan 22, 2007 6:21 pm
Author: Drop-Forged
"AM";p="20127" wrote:DF, I did everything that article said to do, and I still can't configure the site.
It doesn't allow me to add de.scriptions to anything. I can add forums and categories, but not de.scriptions.
I can't make changes to the welcome message either. It views that as a "worm" attack.
Yeah the KB article didnt work for me either, but it is from an Admin, so I figured people should try that first.
I have found a way that does work for my board and posted it here:
http://www.integramod.com/forum/viewtop ... 0125#20125Im waiting for one of the pros to give some feedback, I would hate to have people following my advice if it is bad.
I also couldnt do anything when I upgraded my board until I replaced the xxx_config table in my db with a fresh one from a fresh 141 install.
But I would definitely recommend backing up your old one before trying that.

Posted:
Mon Jan 22, 2007 7:13 pm
Author: AM
I read your solution and that's all Greek to me. This is very frustrating to say the least. The old version never had this problem and I don't remember a cracker being in it.
Can't I just turn it off for now?

Posted:
Mon Jan 22, 2007 7:14 pm
Author: AM
Perhaps someone can create a "Parrot Mod" so it can eat the cracker. That should turn it off.

Posted:
Mon Jan 22, 2007 7:27 pm
Author: AM
Oh I get it now! Cha ching... thanks DF. I'll try that.

Posted:
Mon Jan 22, 2007 8:04 pm
Author: AM
Your solution works. I can't thank you enough!

Posted:
Mon Jan 22, 2007 8:23 pm
Author: AM
Well darn. That didn't solve all of it. Even though the words are in the list, it still won't let me add de.scriptions to the forums and forum categories. I'm just going to add that directly in the database. Tired of messing with the cracker.

Posted:
Sat Feb 03, 2007 11:16 am
Author: AM
I'm having to configure IntegraMod directly from the phpMyAdmin database interface.
Does anyone have a fix for CrackerTracker not allowing changes through the admin control center of IM?
I've gone through all the steps in the debug mode and put the phrases in the security file, but it still won't let me configure the forums.
Re: CrackerTracker took over my site

Posted:
Sat Feb 03, 2007 12:08 pm
Author: Drop-Forged
There is a patch that they somewhat released, but it doesn't work on my board but it might help you, it is posted here:
http://www.integramod.com/forum/viewtopic.php?t=2830I have a post here with more info that may help if the patch doesn't.
http://www.integramod.com/forum/viewtopic.php?t=2776I hope this helps... <img>

Posted:
Sat Feb 03, 2007 1:56 pm
Author: AM
Thanks DF. I downloaded the patch and will post back if it works (or doesn't <img>)

Posted:
Sun Feb 11, 2007 9:44 am
Author: AM
The patch worked for me. Now I can manage the forums and add de.scriptions. Thanks for the link.
Re: CrackerTracker took over my site

Posted:
Wed Feb 21, 2007 11:31 pm
Author: eivind
I also have problems with CrackerTracker, when i want to delete file categories. I am normaly using Firefox, but when i use IE all my problems was gone....
Strange........

<img>
Re: CrackerTracker took over my site

Posted:
Mon Feb 26, 2007 4:44 am
Author: Anies
Hi,
No one can register on my forum
CBACK CrackerTracker has detected a potential attack on this site with a worm or exploit .script so the Security System stopped the .script.
If you can see this page after including a new MOD into your board or after clicking on a link please contact the Board Administrator with this error message and a de.scription what you have done before you could see this page, that the Admin has the possibility to fix the problem.
How can I solve this problem?