Search found 53 matches

I will quote you accurately Raven my friend

Audioslaved is

I am almost done, the I am just finishing up a few adjustments and adding more functionality to it such as the Advanced Header Redir ...

Not a problem glad I could help, the last I would want is to lose a faithful NExtGEn user Smile

See you around!

-Bill (Audioslaved)

After our troubleshooting it looks as though it may be a problem with your setText javascript function not being there, according to Firefox's javascript debugger, it said that the setText javascript ...

Oi,.... LOL!

looking into this a bit more, I found the following in your web source code:

<title> Content Tutorials Secrets to success - blueprints for making money on the internet.</title>
< ...

The $pagetitle is carried to the header.php, right here:

echo "<title>$sitename $pagetitle</title>\n";

Not a problem, replace those colons on line 2 and 3 with semi-colons and you should be A-OK! Smile

-Bill (Audioslaved)

So would emptying _session, _bbsessions and deleting cookies do the trick?

I have just recently released 0.4a, To find out which version you have, if your header.php has this than you are using the version as indicated below:

GT-NExtGEn 0.4 (First few lines of GT-NExtGEn ...

OK folks, here it is, would appreciate any suggestions you may have. I am only about 98% on the regex, there may be faster/easier approaches I am just not seeing from my angle. If you have questions o ...

How could I be a fool, I learned everything I know from you, CS, and humpa, fool I am not, thanks for reminding me. Wink

BTW, just finishing it up for public viewing, shouldn't be too long now! Smile

That could be something to do with the cookie setup, check this out:

http://www.php.net/manual/en/function.setcookie.php

If you read down in the comments there are a few threads about the time b ...

no that is correct,... I am talking about reassigning the variable, for instance

In your script, if you rename

$_GET['username'] = Gaylen

To

$_GET['username'] = Bill

And ...

That top part of the code, the first find and replace, take that out and replace it will the original, I have redone the html code and I can tell you that what I had there will leave holes in your sit ...

Hey guys, I think I have made a script to replace the whole "the html blah blah is not allowed" stuff.

It works like this:

There are certain known good html character types, so instead of using ...

Holy Crap, this article puts XSS into some serious perspective, give this a read if you are concerned with Nuke's security. Shocked

http://sandsprite.com/Sleuth/papers/RealWorld_XSS_4.html

Research c ...

FYI,
The above will not affect users submitting web_links throught their .html frontend, it also does not affect the admin backend.

This effectively stops xss on the Web_Links module from what I ...

Doing more research folks, the following is great if you are using a GT version like NExtGEn (fully tapped modules) and are sure that you only want people to access your .html type links.

The .html ...

As the madness continues to build, found another flaw in the regex's, it pertains to I.E's implentation of JS. If you have a tag that has javascript in it, such as

<a href="javascript:a ...

Going back to the regex, I am wondering why we are taking the user away from his/her experience by giving an error when they submit something containing html, I want to run some idea's of replacements ...

I have some idea's on that html checking, I can do much better than that! Mr. Green

Testing still commences, I will let you know how that portion of the code turns out, stay tuned!

Glad you were ...

Glad to see so many Guinea Pigs, Ahem,...... I mean volunteers, grab a number y'all, there are too many trying this, I need you all to stay in a straight line, stop cutting, no stop cutting, it will n ...

Sweet!

NExtGEn is restored! Very Happy

Per my SESSIONS thread and mainfile tweak suggestion thread I have come up with the following spped hack for the mainfile.php. Since my site is being DOS'd, I have been unable to test all of it, but a ...

Author	Message
Topic: Raven's Customized 7.3 Distribution
Audioslaved Replies: 90 Views: 124089	Forum: BUGS/FIXES - Raven's v7.3 Customized Distro Posted: Tue Jun 29, 2004 2:46 am Subject: Raven's Customized 7.3 Distribution
Audioslaved Replies: 90 Views: 124089	I will quote you accurately Raven my friend Audioslaved is I am almost done, the I am just finishing up a few adjustments and adding more functionality to it such as the Advanced Header Redir ...
Topic: news syndication test needed
Audioslaved Replies: 8 Views: 7040	Forum: Modules Posted: Sun Jun 27, 2004 7:01 am Subject: news syndication test needed
Audioslaved Replies: 8 Views: 7040	Not a problem glad I could help, the last I would want is to lose a faithful NExtGEn user See you around! -Bill (Audioslaved)
Topic: news syndication test needed
Audioslaved Replies: 8 Views: 7040	Forum: Modules Posted: Sun Jun 27, 2004 1:22 am Subject: news syndication test needed
Audioslaved Replies: 8 Views: 7040	After our troubleshooting it looks as though it may be a problem with your setText javascript function not being there, according to Firefox's javascript debugger, it said that the setText javascript ...
Topic: Removing the prefix from the content module
Audioslaved Replies: 23 Views: 25815	Forum: phpnuke 6.9 Posted: Wed Jun 23, 2004 8:07 am Subject: Removing the prefix from the content module
Audioslaved Replies: 23 Views: 25815	Oi,.... LOL!
Topic: Removing the prefix from the content module
Audioslaved Replies: 23 Views: 25815	Forum: phpnuke 6.9 Posted: Wed Jun 23, 2004 8:03 am Subject: Removing the prefix from the content module
Audioslaved Replies: 23 Views: 25815	looking into this a bit more, I found the following in your web source code: <title> Content Tutorials Secrets to success - blueprints for making money on the internet.</title> < ...
Topic: Removing the prefix from the content module
Audioslaved Replies: 23 Views: 25815	Forum: phpnuke 6.9 Posted: Wed Jun 23, 2004 7:45 am Subject: Removing the prefix from the content module
Audioslaved Replies: 23 Views: 25815	The $pagetitle is carried to the header.php, right here: echo "<title>$sitename $pagetitle</title>\n";
Topic: Check this script please got an error
Audioslaved Replies: 4 Views: 6016	Forum: Blocks Posted: Tue Jun 22, 2004 11:41 pm Subject: Check this script please got an error
Audioslaved Replies: 4 Views: 6016	Not a problem, replace those colons on line 2 and 3 with semi-colons and you should be A-OK! -Bill (Audioslaved)
Topic: forum/private messages wont post now
Audioslaved Replies: 12 Views: 17649	Forum: phpnuke 7.0 Posted: Tue Jun 22, 2004 2:02 pm Subject: forum/private messages wont post now
Audioslaved Replies: 12 Views: 17649	So would emptying _session, _bbsessions and deleting cookies do the trick?
Topic: NExtGEn Nuke Speed Hack
Audioslaved Replies: 26 Views: 29304	Forum: Security - PHP Nuke Posted: Tue Jun 22, 2004 1:55 pm Subject: NExtGEn Nuke Speed Hack
Audioslaved Replies: 26 Views: 29304	I have just recently released 0.4a, To find out which version you have, if your header.php has this than you are using the version as indicated below: GT-NExtGEn 0.4 (First few lines of GT-NExtGEn ...
Topic: By George, I think I have done it! Research Completed!
Audioslaved Replies: 5 Views: 8187	Forum: Security - PHP Nuke Posted: Tue Jun 22, 2004 6:39 am Subject: By George, I think I have done it! Research Completed!
Audioslaved Replies: 5 Views: 8187	OK folks, here it is, would appreciate any suggestions you may have. I am only about 98% on the regex, there may be faster/easier approaches I am just not seeing from my angle. If you have questions o ...
Topic: By George, I think I have done it! Research Completed!
Audioslaved Replies: 5 Views: 8187	Forum: Security - PHP Nuke Posted: Tue Jun 22, 2004 4:54 am Subject: By George, I think I have done it! Research Completed!
Audioslaved Replies: 5 Views: 8187	How could I be a fool, I learned everything I know from you, CS, and humpa, fool I am not, thanks for reminding me. BTW, just finishing it up for public viewing, shouldn't be too long now!
Topic: forum/private messages wont post now
Audioslaved Replies: 12 Views: 17649	Forum: phpnuke 7.0 Posted: Tue Jun 22, 2004 12:45 am Subject: forum/private messages wont post now
Audioslaved Replies: 12 Views: 17649	That could be something to do with the cookie setup, check this out: http://www.php.net/manual/en/function.setcookie.php If you read down in the comments there are a few threads about the time b ...
Topic: By George, I think I have done it! Research Completed!
Audioslaved Replies: 5 Views: 8187	Forum: Security - PHP Nuke Posted: Mon Jun 21, 2004 10:33 pm Subject: By George, I think I have done it! Research Completed!
Audioslaved Replies: 5 Views: 8187	no that is correct,... I am talking about reassigning the variable, for instance In your script, if you rename $_GET['username'] = Gaylen To $_GET['username'] = Bill And ...
Topic: NExtGEn Nuke Speed Hack
Audioslaved Replies: 26 Views: 29304	Forum: Security - PHP Nuke Posted: Mon Jun 21, 2004 8:16 pm Subject: NExtGEn Nuke Speed Hack
Audioslaved Replies: 26 Views: 29304	That top part of the code, the first find and replace, take that out and replace it will the original, I have redone the html code and I can tell you that what I had there will leave holes in your sit ...
Topic: By George, I think I have done it! Research Completed!
Audioslaved Replies: 5 Views: 8187	Forum: Security - PHP Nuke Posted: Mon Jun 21, 2004 4:54 pm Subject: By George, I think I have done it! Research Completed!
Audioslaved Replies: 5 Views: 8187	Hey guys, I think I have made a script to replace the whole "the html blah blah is not allowed" stuff. It works like this: There are certain known good html character types, so instead of using ...
Topic: Preventing XSS attacks with GT
Audioslaved Replies: 3 Views: 5867	Forum: Security - PHP Nuke Posted: Sun Jun 20, 2004 6:13 pm Subject: Preventing XSS attacks with GT
Audioslaved Replies: 3 Views: 5867	Holy Crap, this article puts XSS into some serious perspective, give this a read if you are concerned with Nuke's security. http://sandsprite.com/Sleuth/papers/RealWorld_XSS_4.html Research c ...
Topic: Preventing XSS attacks with GT
Audioslaved Replies: 3 Views: 5867	Forum: Security - PHP Nuke Posted: Sun Jun 20, 2004 3:02 pm Subject: Preventing XSS attacks with GT
Audioslaved Replies: 3 Views: 5867	FYI, The above will not affect users submitting web_links throught their .html frontend, it also does not affect the admin backend. This effectively stops xss on the Web_Links module from what I ...
Topic: Preventing XSS attacks with GT
Audioslaved Replies: 3 Views: 5867	Forum: Security - PHP Nuke Posted: Sun Jun 20, 2004 2:35 pm Subject: Preventing XSS attacks with GT
Audioslaved Replies: 3 Views: 5867	Doing more research folks, the following is great if you are using a GT version like NExtGEn (fully tapped modules) and are sure that you only want people to access your .html type links. The .html ...
Topic: Suggestion for Mainfile.php
Audioslaved Replies: 19 Views: 15485	Forum: Security - PHP Nuke Posted: Sun Jun 20, 2004 1:16 am Subject: Suggestion for Mainfile.php
Audioslaved Replies: 19 Views: 15485	As the madness continues to build, found another flaw in the regex's, it pertains to I.E's implentation of JS. If you have a tag that has javascript in it, such as <a href="javascript:a ...
Topic: Suggestion for Mainfile.php
Audioslaved Replies: 19 Views: 15485	Forum: Security - PHP Nuke Posted: Sat Jun 19, 2004 11:20 pm Subject: Suggestion for Mainfile.php
Audioslaved Replies: 19 Views: 15485	Going back to the regex, I am wondering why we are taking the user away from his/her experience by giving an error when they submit something containing html, I want to run some idea's of replacements ...
Topic: NExtGEn Nuke Speed Hack
Audioslaved Replies: 26 Views: 29304	Forum: Security - PHP Nuke Posted: Sat Jun 19, 2004 8:04 pm Subject: NExtGEn Nuke Speed Hack
Audioslaved Replies: 26 Views: 29304	I have some idea's on that html checking, I can do much better than that! Testing still commences, I will let you know how that portion of the code turns out, stay tuned! Glad you were ...
Topic: NExtGEn Nuke Speed Hack
Audioslaved Replies: 26 Views: 29304	Forum: Security - PHP Nuke Posted: Sat Jun 19, 2004 8:23 am Subject: NExtGEn Nuke Speed Hack
Audioslaved Replies: 26 Views: 29304	Glad to see so many Guinea Pigs, Ahem,...... I mean volunteers, grab a number y'all, there are too many trying this, I need you all to stay in a straight line, stop cutting, no stop cutting, it will n ...
Topic: What hapened to Audioslaved?
Audioslaved Replies: 10 Views: 16461	Forum: Other - Discussion Posted: Sat Jun 19, 2004 8:19 am Subject: What hapened to Audioslaved?
Audioslaved Replies: 10 Views: 16461	Sweet!
Topic: What hapened to Audioslaved?
Audioslaved Replies: 10 Views: 16461	Forum: Other - Discussion Posted: Sat Jun 19, 2004 12:46 am Subject: What hapened to Audioslaved?
Audioslaved Replies: 10 Views: 16461	NExtGEn is restored!
Topic: NExtGEn Nuke Speed Hack
Audioslaved Replies: 26 Views: 29304	Forum: Security - PHP Nuke Posted: Sat Jun 19, 2004 12:22 am Subject: NExtGEn Nuke Speed Hack
Audioslaved Replies: 26 Views: 29304	Per my SESSIONS thread and mainfile tweak suggestion thread I have come up with the following spped hack for the mainfile.php. Since my site is being DOS'd, I have been unable to test all of it, but a ...