Pagina 1 din 13

CrackerTracker Professional

Scris: 16-Feb-2007, 22:48:58
de flowers
Probleme CrackerTracker Professional.
Daca va apar avertismente de genul
CBACK CrackerTracker has detected a potential attack on this site with a worm or exploit script so the Security System stopped the script.


If you can see this page after including a new MOD into your board or after clicking on a link please contact the Board Administrator with this error message and a description what you have done before you could see this page, that the Admin has the possibility to fix the problem.
porniti debugul, daca nu e deja pornit, prin schimbarea in /ctracker/engines/ct_security.php a lui CT_DEBUG_MODE de pe "false" pe "true".

Cod: Selectaţi tot

/*
 * Change the following to define('CT_DEBUG_MODE', true);
 * if you want to activate the debug mode of CrackerTracker
 * but don't forget to deactivate it again as soon as possible
 */
define('CT_DEBUG_MODE', true);
Intrati in ACP->CrackerTracker->Logmanager si apasati pe "VIEW" la "Debug Entries". Aici va apare un cod de genul:

Cod: Selectaţi tot

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Script-Filename: /extra/admin/admin_forums.php
----------------

Request-Method: POST

Matching rule: create 
In variable:   addforum

Possible solution:
------------------

#
#-----[ OPEN ]------------------------------------------
#
/extra/admin/admin_forums.php

#
#-----[ FIND ]------------------------------------------
#
include($phpbb_root_path . 'common.'.$phpEx);

#
#-----[ BEFORE, ADD ]------------------------------------------
#
define('CT_SECLEVEL', 'MEDIUM');
$ct_ignorepvar = array('addforum');

#
#-----[ SAVE/CLOSE ALL FILES ]------------------------------------------
#
# EoM
Asta inseamna ca trebuie sa deschideti /ctracker/engines/ct_security.php si sa adaugati in lista

Cod: Selectaţi tot

// Some fields in $HTTP_POST_VARS don't get checked to prevent wrong detection
$unchecked_post_fields   = array('username', 'submit', 'post', 'password', 'subject', 'message',
								'poll_title', 'poll_option', 'poll_delete',
								'email', 'confirm_code', 'aim', 'msn', 'yim',
								'interests', 'occupation', 'signature', 'website',
								'location', 'search', 'sitename', 'word',
								'replacement', 'help', 'last_msg', 'quote', 'dl',
								'preview', 'post', 'mode', 'content', 'server_name',
								'script_path', 'sitename', 'site_desc', 'disable_reg_msg',
								'disable_msg', 'cookie', 'avatar', 'file', 'picture',
								'filter', 'xs', 'edit', 'content', 'fileupload', 'filecomment',
								'comment', 'rate', 'pic', 'search_author', 'add_poll_option_text');
variabila 'addforum'.
Variabilele adaugate pana acum sunt: 'addcat', 'addcategory', 'addforum', 'addmedal', 'c', 'cat_desc', 'closeforums', 'export_pack', 'fc', 'forum_is_link', 'forum_link_icon', 'forum_weblink', 'forumdesc', 'forumicon', 'forumorder', 'forumstatus', 'forumthank', 'global_message', 'helpbox', 'message', 'new', 'new_group_name', 'openforums', 'prune_freq', 'post_icon', 'prune_days', 'prune_enable', 'smile_pak', 'submit', 'submitavatar', 'topicdesc'.

Scris: 17-Feb-2007, 23:59:03
de octaviansan
Bug-uri:

1. La statistics cand vreau sa bag un modul zice la fiecare "Could not connect to the database"

2. La groups cand vreau sa adaug un nou grup zice "CBACK CrackerTracker has detected a potential attack on this site with a worm or exploit script so the Security System stopped the script.


If you can see this page after including a new MOD into your board or after clicking on a link please contact the Board Administrator with this error message and a description what you have done before you could see this page, that the Admin has the possibility to fix the problem."

Scris: 18-Feb-2007, 00:02:01
de Aliniuz
Ok primul intr-adevar e bug insa al doilea nu mai e .

Deschide un topic separat .

Scris: 18-Feb-2007, 00:09:16
de flowers
2. Deschizi /ctracker/engines/ct_security.php, cauti

Cod: Selectaţi tot

// Some fields in $HTTP_POST_VARS don't get checked to prevent wrong detection
$unchecked_post_fields   = array('username',...
si adaugi in lista 'new'

Scris: 18-Feb-2007, 00:13:31
de octaviansan
Mersi mult , chiar ca te pricepi :D

EDIT: Si cand dau submit iara zice asa .
EDIT2: Am mai adaugat 'submit' si mere ( hai ca m-am prins )

Scris: 18-Feb-2007, 10:23:42
de CaTaNhA
Incerc sa fac un subforum iar dupa aceea apare

Cod: Selectaţi tot

CBACK CrackerTracker has detected a potential attack on this site with a worm or exploit script so the Security System stopped the script.


If you can see this page after including a new MOD into your board or after clicking on a link please contact the Board Administrator with this error message and a description what you have done before you could see this page, that the Admin has the possibility to fix the problem.
:roll:

Scris: 18-Feb-2007, 10:36:10
de Aliniuz
In ctracker/engines/ct_security.php inlocuieste

Cod: Selectaţi tot

// Some fields in $HTTP_POST_VARS don't get checked to prevent wrong detection
$unchecked_post_fields   = array('username',
cu

Cod: Selectaţi tot

// Some fields in $HTTP_POST_VARS don't get checked to prevent wrong detection
$unchecked_post_fields   = array('username', 'submit',

Problema Creare Categorie

Scris: 18-Feb-2007, 11:53:10
de octaviansan
Salut :lol:

Am si eu o problema . Cand ma duc in Medal Admin , si vreau sa creez o noua categorie zice

Cod: Selectaţi tot

CBACK CrackerTracker has detected a potential attack on this site with a worm or exploit script so the Security System stopped the script.


If you can see this page after including a new MOD into your board or after clicking on a link please contact the Board Administrator with this error message and a description what you have done before you could see this page, that the Admin has the possibility to fix the problem.
Am adaugat in ct_security.php mai multe lini ( addcategory , post , create , ) si tot asa zice .

Scris: 18-Feb-2007, 12:07:09
de Aliniuz
In ct_security.php in linia cu

Cod: Selectaţi tot

// Some fields in $HTTP_POST_VARS don't get checked to prevent wrong detection
$unchecked_post_fields   = array('username'
adauga

Cod: Selectaţi tot

'addcat'

Scris: 18-Feb-2007, 12:10:11
de octaviansan
Ok , acum mere dat nu mere sa adaug o medalie ! Ma poti rezolva ?

A , da si daca ma poti rezolva la tot , sa nu imi mai apara de loc :D