Page 1 of 1

Trouble creating forum categories

PostPosted: Sat Jan 27, 2007 12:11 pm
Author: .QUACK.Major.Pain
I can create categories but when installing a new forum in a category, I keep getting this error.

SECURITY ALERT ÂÂÂ » ÂÂÂ » ÂÂÂ » ÂÂÂ »
CBACK CrackerTracker has detected a potential attack on this site with a worm or exploit .script so the Security System stopped the .script.


If you can see this page after including a new MOD into your board or after clicking on a link please contact the Board Administrator with this error message and a de.scription what you have done before you could see this page, that the Admin has the possibility to fix the problem.

Unsure why???

PostPosted: Sat Jan 27, 2007 12:45 pm
Author: r1Pped
Check the KB on this site

PostPosted: Sat Jan 27, 2007 1:30 pm
Author: ZacFields
Quack, I will find the solution to this in just a moment and help you out. I'm in the process of writing up a tutorial for a similar problem, so I will investigate this.

Give me about an hour and I will give you some information that will help you.

Zac

Re: Trouble creating forum categories

PostPosted: Sat Jan 27, 2007 6:48 pm
Author: .QUACK.Major.Pain
Tried re-installing everything and creating forum again. Can create category and sometimes 1 sub-forum. When creating a 2nd sub fourum, I get the error. I checked Maintenance & Troubleshooting Page and I have 3 cautions.

Security Test
Checkpoint Version / Status Reference Status

PHP Version (Visit Website) 4.4.2 4.4.4 CAUTION
ÂÂÂ » PHP SAFE MODE OFF ON CAUTION
ÂÂÂ » PHP GLOBALS ON OFF CAUTION
phpBB Version (Visit Website) 2.0.22 2.0.22 SAFE
ÂÂÂ » Account Activation ON ON SAFE
CBACK CrackerTracker (Visit Website) 5.0.3 5.0.3 SAFE

I think that shows version low, safe off, and globals on.

PostPosted: Sat Jan 27, 2007 7:15 pm
Author: ZacFields
Quack,

Try downloading the patch I made in this topic:

http://www.integramod.com/forum/viewtopic.php?t=2830

Just take those files and upload them (and over-write the existing ones) to your forum in their respective folders and this should fix your problem.

If it does not, let me know.

Zac

Re: Trouble creating forum categories

PostPosted: Sat Jan 27, 2007 8:21 pm
Author: Helter
unrelated... unless your running something critical that requires globals to be on, turn this off! It is a huge security risk and just about any program that requires it to be on can be edited so as not to require it

Re: Trouble creating forum categories

PostPosted: Sat Jan 27, 2007 8:38 pm
Author: .QUACK.Major.Pain
Actually I was able to make an adjustment and get it to work.

Set ct security from medium to low and it allowed me to create categories and all sub-forums with no alert.

PostPosted: Sat Jan 27, 2007 9:29 pm
Author: ZacFields
Quack,

What you did works also. That is what Helter and Teelk have been suggesting to people who don't want to manually add the codes.

I beleive they are working on a real patch for cracker-tracker that will resolve all these problems. The problem with setting those security settings to low is that you're leaving your forum more vulnerable to hackers by disabling cracker-tracker as a whole rather than patching it to work correctly.

Zac

PostPosted: Fri Feb 02, 2007 6:13 am
Author: Omni-Lee
I must say being new to editing Interamod files, I found the CrackTracker knowledge base article very easy to understand.

In just a few minutes I was easily able to correct the issues I was having with forum creation. Which seem to stem from the word 'and' in anything related to category or forum creation. That means Titles and De.scription, as those are the two main sources where the admin can enter text.

This same error is caused by 'and' in any de.scription text box used within the admin section of the website. Specifically the PayPal Donation de.scription text box located in Configuration.

The method I used to 'fix' the errors aside from the KB article is as follows:

Unzip Integramod2 1.4.1 locally
Create a Back-Up directory in any directory where CrackerTracker requires a file change and copy the original to that location.
Make the necessary changes as defined by the KB and CrackerTracker Debug Logfile
Upload edited file.

You can pretty much use any ascii text editor, but my suggestion is to find a freebie one that is also a code editor. This will help you to ensure that there are no errors in your replacement code because they typically color code any files that are programming languages.