VWar

Worker Joined: May 27, 2006 Posts: 157

Hey all!

Simple question but with an anwer not yet known to me!

I installed VWar on to my site.. installation was perfect.. nothing wrong,as far as i could tell!

Everything was good until it asked me to login to admin control panel afterwards.

The admin control panel came up with a message saying:

Quote:

Forbidden
You don't have permission to access /admin/index.php on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.
Apache/1.3.36 Server at www.(mydomain).co.uk Port 80

Any ideas why? during installation i CHMOD's everything it asked me to, and that index.php is CHMOD to 777 aswell.. Question

Thanks!

Sells PC To Pay For Divorce Joined: Posts: 5661

and you know that the stuff is vunerable for abuse?

Posted: Tue Aug 08, 2006 5:55 pm

im sure but i want to access that admin panel:(

Posted: Wed Aug 09, 2006 3:14 am

any weird htaccess files in that vwar folder ?
and a index.php to 777 ?
that cannot be 777

and is the mod compatible with any patched version ?

Posted: Wed Aug 09, 2006 3:14 pm

i was told it was compatible with the raven package yes. and all those files you have listed are currently set to 777. i did find that if i moved that index.php from the admin folder to a different one i could access it, but i cant use is as it links to the other files in the admin folder!

Posted: Wed Aug 09, 2006 3:18 pm

well sounds to me like a big mess...
and the error.../admin/index.php ?
from what is that?
From the vwar folder or the main admin folder?

Posted: Wed Aug 09, 2006 3:22 pm

the vwar zip unzipped and i put the files into each directory, it told me to put the index.php file into the admin part so i did and then it says i cant access it.

Posted: Wed Aug 09, 2006 3:25 pm

can you post the install file here..
the readme..

Posted: Wed Aug 09, 2006 4:31 pm

hmm maybe it wasnt the readme that told me lol! i just scanned over it and cant find anything helpful! Confused

wonder where i read that!

well all it seems to be is that i cant access my admin folder from outsite which is understandable i guess so that no1 else can! but how doi make it so that i can only? Rolling Eyes

Posted: Wed Aug 09, 2006 4:41 pm

well there should be an admin link when installed...like we allways have.....
there's not such a link?

Posted: Wed Aug 09, 2006 4:57 pm

in the normal admin control panel? nope!

Posted: Wed Aug 09, 2006 5:00 pm

mm,well otherwise pm me some login etc...
so i can see what you did..or i do the install...

Posted: Thu Aug 10, 2006 9:09 am

This maybe a stupid question, but which version of vWar are you using. The standalone or the nuke port?

Posted: Thu Aug 10, 2006 1:58 pm

umm? how do i find that out? Smile

Posted: Fri Aug 11, 2006 7:36 am

Well tell us where you got it from. - or read on.

There are two version of vwar. A stand alone version, an a version for php nuke. In order to use it with your Raven Distribution you must use "Vwar_1.5_R13_PHP_Nuke_Hi-Wire" and "Vwar_1.5_Hi-WireR13toR14-update" both available at http://www.phpnuke-clan.com/.

The first package includes a module, block and more, the second includes security fixes.
Pls. follow the installation instructions an you are fine. Make sure to turn sentinel ON to avoid being hacked. Otherwise all your hard work is at risc.

Posted: Fri Aug 11, 2006 1:01 pm

Right, First of all, i did get it from phpnuke-clan.com. Second, sentinel is turned on and fully operational! third i followed all the instructions carefully and it installed fine, except it wanted me to overwrite my index.php in my root folder, and it wont let me access the admin control panel for vwar saying tht i dont have access, this only happens when the file is in the admin folder as i moved it to test and it worked then.

Posted: Sat Aug 12, 2006 2:11 am

I assume you did a clean install of "Vwar_1.5_R13_PHP_Nuke_Hi-Wirepackage" for your site.
You sucessfully executed the "install_vwar.php". Smile

I assume you installed "Vwar_1.5_Hi-WireR13toR14-update" as well.

Quote:

... except it wanted me to overwrite my index.php in my root folder ...

Did this happen during the installation of the update?
Im asking, because I looked at the instructions for "Vwar_1.5_Hi-WireR13toR14-update" They are a little bumpy.

Quote:

... Upload all files in the VWAR folder into the correct folders (as in the zip file)
Make sure to overwrite the existing files!!! ...

Uploading the files should not overwrite the root/index.php or any files in root/admin.
The zip file has a folder "VWAR/modules/vwar".
The content of this folder should be uploaded to root/modules/vwar.
This will replace the file root/modules/vwar/index.php and others in that folder.

Posted: Sat Aug 12, 2006 3:24 pm

hmm, it never installed a folder in this location: root/modules/vwar.

and ive didnt seen anythng to do with Vwar_1.5_R13_PHP_Nuke_Hi-Wirepackage or Vwar_1.5_Hi-WireR13toR14-update! it just said "Vwar"

Hmm, guess i got me a dodgy install!

Worker Joined: Feb 18, 2006 Posts: 155 Location: Virginia

Does anyone know of a safe inter-clan ladder management add-on?

I've heard that vwar is not safe.

Wonder if I used vwar but used NSN to limit only clan members access to it. That should hide it from hackers...right?

registered · Posted: Thu Aug 31, 2006 10:51 am

Probably not. Most hacks against vulnerable scripts go directly through a known vulnerability and usually bypass such systems as NSN. You could secure through other measures like user passwords on that site's folder

Posted: Mon Sep 04, 2006 12:09 pm

Concerning security, http://www.phpnuke-clan.com/ recommend raven distribution, sentinel and vwar Hi-Wire as a save alternative to the vWar standalone package.

EDIT:
Last night I recieved this mail from my site running the mentioned recommendation:

Code:

Date &amp; Time: 2006-09-05 02:47:59 CEST GMT +0200


Blocked IP: 71.79.152.*


User ID: Anonymous (1)


Reason: Abuse-Union


--------------------


User Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)


Query String: www.xxx.de/modules.php?name=vwar/modules/vwar/extra/online.php?=XXXXXXXXXX/*


Get String: www.xxx.de/modules.php?name=vwar/modules/vwar/extra/online.php?=XXXXXXXXXX/*


Post String: www.xxx.de/modules.php


...

Someone was trying to read the member table (where the XXX are). Sentinel hack attempt counter and I where Very Happy

.