vWar

New Member Joined: Dec 28, 2006 Posts: 5

can i use nukesentinel in vwar

Sells PC To Pay For Divorce Joined: Posts: 5661

lol...nice question..
but you should ask......"should i use vwar".. Sad

thats entirely up to you,but its known to be vulnerable.
but i cant remember any weird sentinel behaviour..

Posted: Wed Jan 03, 2007 3:23 pm

yea i know that we run vwar on our mainpage and its just got hacked thats why i asked if we could protect it with nukesentinel

Posted: Wed Jan 03, 2007 3:29 pm

no...sentinel isnt responsible for things installed with nuke.
and it wont protect that....to bad it doesnt work like that...
the basis of nuke is protected,like the the rest .....the modules etc....
thats because they are patched.
your vwar isnt.....

Posted: Wed Jan 03, 2007 3:35 pm

okey i think we need to discuss that in the webteam
you are welcome to post in our forum at www.5th.cybersquads.com
if there is something you want to tell us about nuke

Posted: Wed Jan 03, 2007 3:39 pm

Thanks for the offer but there isnt much i can add to this story then i already posted.. Sad

the vwar problems are discussed many times here on the forums with all its security risks..

Posted: Wed Jan 03, 2007 4:31 pm

I do believe there is a standalone version of vwar available that would at least protect your site itself as long as vwar was installed in separate database. I have seen several squads going to that. Not sure if it is any more secure than the nuke version.

Posted: Wed Jan 03, 2007 5:59 pm

Sentinel may help catch some problems with people sending funny strings into vWar, but the bottom line is that the vWar module itself has been known to have bugs that leave you open to attack. Those bugs need to be corrected. Not sure if they have been.

Posted: Thu Jan 04, 2007 4:32 am

our problem was with a hacker that put some dhtml in all profiles and added some to the _footer.php so he must have being in the admin control panel but he forgot to activate it Very Happy

it was a guy calling himself SA NARA TX have you heard about him??
he even left he's e-mail adress Very Happy

Posted: Thu Jan 04, 2007 8:09 am

I must admit, the integrated version of vWar now appears pretty secure. I still get 2-3 hack attempts per day directed at it, but they haven't got in for over a year now. The standalone version, I'm not sure about, last patch to v1.5.0 R15 was released back in September iirc.

Posted: Fri Jan 05, 2007 6:25 pm

thanks frisp for the update on vwar. I haven't played with it for a while, but no of squads who have been using the standalone to keep their sites protect as best as possible. Maybe they have finally taking security seriously for nuke version..... Smile