Search found 103 matches

I'm seeing a lot of blocks happen (with good reason). The basics are someone tries either author or harvest attack by referring thru another site.

Here's what I get from the other site...anyone ha ...

yes, it's still appending in 2.5.2, and I have Flood turned off, btw.

Point is: running the HTML 4.01 validator, it is seeing '&' instead of '&' as I posted in the first msg here.

Wh ...

Well I found it, and it's gonna need a bit of an update:

NEIndex checks if cookie[3] is set, and if so that overrides the stories in home of NSN News Prefs.

So if anyone changes that from 10, to ...

Well, I have nuke_nsnne_config where homenumber now shows 4.

Unless there is an alternate NSN News config table? Or are we at a version issue? I'm on NSN News 2.0

Hmm...I don't see that anywhere in the NSN News config.

But it would seem neither setting is sticking as both say 4 and there's still 10.

Thanks for your help Kguske!

A bit of a nitt, but NukeSentinel seems to be appending &NSNST_Flood=....

any way to make it &NSNST_Flood....

?

I see the main nuke preferences is set to 5 in hom (verified 5 is in nuke_config).

I see NSN News 2.0 is the same.

So maybe 5 + 5 = 10?

But I did a backend update, one at a time to make the 5 ...

Thanks, but it's definitely not NS.

NS doesn't consistently append the Flood URL, so I've seen clean/clear URLs.

Note: All my banners go through LinkShare which resolves to LinkSynergy, but they ...

Well, I found 3.2 for my 7.9...fixed the Poll/Survey redirect, but did nothing to the banners issue.

All my banners error out like the Polls used to. Anyone want to click on my banners at the bott ...

Oohh...good call, but now I can't seem to find them.

nukeresources.com gone?

I've been looking into this on my site: www.hireamerica.us

Polls: The Poll Results use a header location redirect and never completes. Firefox, IExplorer both yield same result. My members all sa ...

I'm trying to see why we are re-directing in the fix.

If the PollID is set and > 0 and $tid is set, then why not just continue with the survey result instead of re-directing?

It's the re-dire ...

Never had this problem before:
#
# Volcar la base de datos para la tabla `nuke_cities`
#
INSERT INTO nuke_cities
VALUES ( 1, 1, 'As�d�b�d', 'af', 'Afghanistan' )

Guess ...

I'll open up the surveys to non-members...that's probably why it's restricted for you...of course, you could always register! Smile

Ok, I don't think it's an actual re-direct, but more of a header s ...

I'm having this problem as well...Firefox reports:

The page isn't redirecting properly

Firefox has detected that the server is redirecting the request for this address in a way that will never c ...

I'm doing all that...the issue is this:

When it's all working fine the vulnerability is still there: a UNION attack can do a simple select password from nuke_nsnst_authors and get it in plain text ...

If you do that then HTTPAuth doesn't work again. I just get the normal Admin login even after clearing cache, cookies, etc.

NukeSentinal says in preferences: You MUST set ALL admin passwords befor ...

It's off for me...issue is that at HTTPAuth it's not recognizing my Admin password and .htaccess is set right. So I use neither Auth. But the Turkish hacker, if he got my password from clear text ...

It did not. Said the scan completed and then the Admin Auth list still shows the old.

Worrying that many of us have tried that CGI Auth and then maybe still use or just don't use anymore. The pla ...

Just noticed that the password is listed in plaintext, as well as MD5 and showing the Crypt Salt.

So incidentally, any hack able to select that information gets your admin and might be able to get ...

FYI, this is only happening in web links... doesn't happen to me for ratings of articles or downloads.

Any further info on what to do?

I'm pretty sure it boils down to the &ttitle= in the URL from the ratings.

if ttitle has an '_' then it gets the warning
if ttitle does not, then is passes f ...

Not sure if this is Sentinel's doing or not... (which leads to me asking for a general On/Off Switch for Sentinel), but:

Rate a Web Link: Since weblinks with spaces are made to be underscores, rati ...

Your includes/counter.php might be ereg on FireFox and it should be Firefox (2nd F is an f).

change that or make it eregi (ignores case) and that's likely it. I have :

if (ereg("Firefox", $user ...

Well, I'm personally looking forward to 7.8 After Patch... please do post a story on when avail (looks good on test site -- looks like 95+% ready on main site).

Will download that for sure...bein ...

Author	Message
Topic: Common NukeSentinel bannings...
hireamerica Replies: 2 Views: 7997	Forum: Security - PHP Nuke Posted: Mon Oct 16, 2006 10:11 am Subject: Common NukeSentinel bannings...
hireamerica Replies: 2 Views: 7997	I'm seeing a lot of blocks happen (with good reason). The basics are someone tries either author or harvest attack by referring thru another site. Here's what I get from the other site...anyone ha ...
Topic: HTML 4.01 Compliance..
hireamerica Replies: 15 Views: 17376	Forum: NukeSentinel(tm) v2.5.x Posted: Mon Oct 16, 2006 8:45 am Subject: HTML 4.01 Compliance..
hireamerica Replies: 15 Views: 17376	yes, it's still appending in 2.5.2, and I have Flood turned off, btw. Point is: running the HTML 4.01 validator, it is seeing '&' instead of '&' as I posted in the first msg here. Wh ...
Topic: Stories in Home pemanently 10?
hireamerica Replies: 6 Views: 10471	Forum: phpnuke 7.9 Posted: Wed Oct 11, 2006 2:58 pm Subject: Stories in Home pemanently 10?
hireamerica Replies: 6 Views: 10471	Well I found it, and it's gonna need a bit of an update: NEIndex checks if cookie[3] is set, and if so that overrides the stories in home of NSN News Prefs. So if anyone changes that from 10, to ...
Topic: Stories in Home pemanently 10?
hireamerica Replies: 6 Views: 10471	Forum: phpnuke 7.9 Posted: Wed Oct 11, 2006 2:38 pm Subject: Stories in Home pemanently 10?
hireamerica Replies: 6 Views: 10471	Well, I have nuke_nsnne_config where homenumber now shows 4. Unless there is an alternate NSN News config table? Or are we at a version issue? I'm on NSN News 2.0
Topic: Stories in Home pemanently 10?
hireamerica Replies: 6 Views: 10471	Forum: phpnuke 7.9 Posted: Wed Oct 11, 2006 2:32 pm Subject: Stories in Home pemanently 10?
hireamerica Replies: 6 Views: 10471	Hmm...I don't see that anywhere in the NSN News config. But it would seem neither setting is sticking as both say 4 and there's still 10. Thanks for your help Kguske!
Topic: HTML 4.01 Compliance..
hireamerica Replies: 15 Views: 17376	Forum: NukeSentinel(tm) v2.5.x Posted: Wed Oct 11, 2006 2:21 pm Subject: HTML 4.01 Compliance..
hireamerica Replies: 15 Views: 17376	A bit of a nitt, but NukeSentinel seems to be appending &NSNST_Flood=.... any way to make it &NSNST_Flood.... ?
Topic: Stories in Home pemanently 10?
hireamerica Replies: 6 Views: 10471	Forum: phpnuke 7.9 Posted: Wed Oct 11, 2006 2:19 pm Subject: Stories in Home pemanently 10?
hireamerica Replies: 6 Views: 10471	I see the main nuke preferences is set to 5 in hom (verified 5 is in nuke_config). I see NSN News 2.0 is the same. So maybe 5 + 5 = 10? But I did a backend update, one at a time to make the 5 ...
Topic: header location not working in most places...
hireamerica Replies: 5 Views: 10009	Forum: Bug Fixes Posted: Wed Oct 11, 2006 7:57 am Subject: header location not working in most places...
hireamerica Replies: 5 Views: 10009	Thanks, but it's definitely not NS. NS doesn't consistently append the Flood URL, so I've seen clean/clear URLs. Note: All my banners go through LinkShare which resolves to LinkSynergy, but they ...
Topic: header location not working in most places...
hireamerica Replies: 5 Views: 10009	Forum: Bug Fixes Posted: Tue Oct 10, 2006 10:36 pm Subject: header location not working in most places...
hireamerica Replies: 5 Views: 10009	Well, I found 3.2 for my 7.9...fixed the Poll/Survey redirect, but did nothing to the banners issue. All my banners error out like the Polls used to. Anyone want to click on my banners at the bott ...
Topic: header location not working in most places...
hireamerica Replies: 5 Views: 10009	Forum: Bug Fixes Posted: Tue Oct 10, 2006 9:36 pm Subject: header location not working in most places...
hireamerica Replies: 5 Views: 10009	Oohh...good call, but now I can't seem to find them. nukeresources.com gone?
Topic: header location not working in most places...
hireamerica Replies: 5 Views: 10009	Forum: Bug Fixes Posted: Tue Oct 10, 2006 9:00 pm Subject: header location not working in most places...
hireamerica Replies: 5 Views: 10009	I've been looking into this on my site: www.hireamerica.us Polls: The Poll Results use a header location redirect and never completes. Firefox, IExplorer both yield same result. My members all sa ...
Topic: Link messed up
hireamerica Replies: 14 Views: 17717	Forum: Post Installation Help Posted: Wed Oct 04, 2006 8:12 am Subject: Link messed up
hireamerica Replies: 14 Views: 17717	I'm trying to see why we are re-directing in the fix. If the PollID is set and > 0 and $tid is set, then why not just continue with the survey result instead of re-directing? It's the re-dire ...
Topic: Database Collation, etc.
hireamerica Replies: 1 Views: 6536	Forum: phpnuke 8.0 Posted: Thu Sep 21, 2006 11:46 am Subject: Database Collation, etc.
hireamerica Replies: 1 Views: 6536	Never had this problem before: # # Volcar la base de datos para la tabla `nuke_cities` # INSERT INTO nuke_cities VALUES ( 1, 1, 'As�d�b�d', 'af', 'Afghanistan' ) Guess ...
Topic: Link messed up
hireamerica Replies: 14 Views: 17717	Forum: Post Installation Help Posted: Fri Sep 15, 2006 2:08 pm Subject: Link messed up
hireamerica Replies: 14 Views: 17717	I'll open up the surveys to non-members...that's probably why it's restricted for you...of course, you could always register! Ok, I don't think it's an actual re-direct, but more of a header s ...
Topic: Link messed up
hireamerica Replies: 14 Views: 17717	Forum: Post Installation Help Posted: Fri Sep 15, 2006 1:52 pm Subject: Link messed up
hireamerica Replies: 14 Views: 17717	I'm having this problem as well...Firefox reports: The page isn't redirecting properly Firefox has detected that the server is redirecting the request for this address in a way that will never c ...
Topic: plain password in nuke_nsnst_admins?
hireamerica Replies: 8 Views: 12157	Forum: NukeSentinel(tm) Posted: Mon Feb 27, 2006 11:49 am Subject: plain password in nuke_nsnst_admins?
hireamerica Replies: 8 Views: 12157	I'm doing all that...the issue is this: When it's all working fine the vulnerability is still there: a UNION attack can do a simple select password from nuke_nsnst_authors and get it in plain text ...
Topic: plain password in nuke_nsnst_admins?
hireamerica Replies: 8 Views: 12157	Forum: NukeSentinel(tm) Posted: Mon Feb 27, 2006 11:24 am Subject: plain password in nuke_nsnst_admins?
hireamerica Replies: 8 Views: 12157	If you do that then HTTPAuth doesn't work again. I just get the normal Admin login even after clearing cache, cookies, etc. NukeSentinal says in preferences: You MUST set ALL admin passwords befor ...
Topic: plain password in nuke_nsnst_admins?
hireamerica Replies: 8 Views: 12157	Forum: NukeSentinel(tm) Posted: Mon Feb 27, 2006 11:11 am Subject: plain password in nuke_nsnst_admins?
hireamerica Replies: 8 Views: 12157	It's off for me...issue is that at HTTPAuth it's not recognizing my Admin password and .htaccess is set right. So I use neither Auth. But the Turkish hacker, if he got my password from clear text ...
Topic: plain password in nuke_nsnst_admins?
hireamerica Replies: 8 Views: 12157	Forum: NukeSentinel(tm) Posted: Mon Feb 27, 2006 10:55 am Subject: plain password in nuke_nsnst_admins?
hireamerica Replies: 8 Views: 12157	It did not. Said the scan completed and then the Admin Auth list still shows the old. Worrying that many of us have tried that CGI Auth and then maybe still use or just don't use anymore. The pla ...
Topic: plain password in nuke_nsnst_admins?
hireamerica Replies: 8 Views: 12157	Forum: NukeSentinel(tm) Posted: Mon Feb 27, 2006 10:25 am Subject: plain password in nuke_nsnst_admins?
hireamerica Replies: 8 Views: 12157	Just noticed that the password is listed in plaintext, as well as MD5 and showing the Crypt Salt. So incidentally, any hack able to select that information gets your admin and might be able to get ...
Topic: Rating a Weblinks with "_" gives warning
hireamerica Replies: 3 Views: 7520	Forum: NukeSentinel(tm) Posted: Tue Jan 10, 2006 10:15 am Subject: Rating a Weblinks with "_" gives warning
hireamerica Replies: 3 Views: 7520	FYI, this is only happening in web links... doesn't happen to me for ratings of articles or downloads.
Topic: Rating a Weblinks with "_" gives warning
hireamerica Replies: 3 Views: 7520	Forum: NukeSentinel(tm) Posted: Tue Jan 10, 2006 10:14 am Subject: Rating a Weblinks with "_" gives warning
hireamerica Replies: 3 Views: 7520	Any further info on what to do? I'm pretty sure it boils down to the &ttitle= in the URL from the ratings. if ttitle has an '_' then it gets the warning if ttitle does not, then is passes f ...
Topic: Rating a Weblinks with "_" gives warning
hireamerica Replies: 3 Views: 7520	Forum: NukeSentinel(tm) Posted: Mon Dec 19, 2005 10:10 am Subject: Rating a Weblinks with "_" gives warning
hireamerica Replies: 3 Views: 7520	Not sure if this is Sentinel's doing or not... (which leads to me asking for a general On/Off Switch for Sentinel), but: Rate a Web Link: Since weblinks with spaces are made to be underscores, rati ...
Topic: weird statistics
hireamerica Replies: 4 Views: 5198	Forum: General/Other Stuff Posted: Thu Sep 22, 2005 1:31 pm Subject: weird statistics
hireamerica Replies: 4 Views: 5198	Your includes/counter.php might be ereg on FireFox and it should be Firefox (2nd F is an f). change that or make it eregi (ignores case) and that's likely it. I have : if (ereg("Firefox", $user ...
Topic: overLIB 4.00
hireamerica Replies: 5 Views: 12236	Forum: NukeSentinel(tm) v2.4.x Posted: Wed Sep 07, 2005 1:04 pm Subject: overLIB 4.00
hireamerica Replies: 5 Views: 12236	Well, I'm personally looking forward to 7.8 After Patch... please do post a story on when avail (looks good on test site -- looks like 95+% ready on main site). Will download that for sure...bein ...