want to put nukeSentinel on my site

New Member Joined: Aug 28, 2006 Posts: 8

Hi

i have a nuke site 7.8 or 7.8 patched i can't remember
i would like to put NukeSentinel on the site
what NukeSentinel wercsion should i put on it and could i get some help to get it working right as i have looked at it before but i have been unable to get it working

thanks for reading my post

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

You always want to use the latest version which is v2.5.05

There are plenty of resources in the forums already but if you can't find an answer just post your question(s) Smile

Posted: Tue Jan 30, 2007 10:02 am

Raven wrote:

You always want to use the latest version which is v2.5.05

i am sorry to ask but i have looked all over the site to find it but i can't could someone please post a link to it for me

Posted: Tue Jan 30, 2007 10:15 am

http://www.nukescripts.net/modules.php?name=Downloads&op=getit&lid=1053

Posted: Wed Jan 31, 2007 7:19 am

thanks for the link i downloaded it bit i get this error when opening it
Error reading header after processing 0 entries

registered · Posted: Wed Jan 31, 2007 9:31 am

Try downloading it again... BTW, if you are using IE on a Windows XP SP2 machine, that could be your problem. You might want to try FireFox to download this.

Posted: Wed Jan 31, 2007 10:20 am

thanks alot i have got it
now i just need to get it on the site and working

Posted: Wed Jan 31, 2007 11:41 am

i have opened it and i have edited these files in the root Dir
admin.php
header.php
and index.php in modules\Your_Account Dir

but the mainfile.php in the core Dir i am having problems with i can't find any of the bits i need to edit

i am running nuke 7.8 could i get alittle help with this bit please

Posted: Wed Jan 31, 2007 12:36 pm

Like many users, I don't use nuke above 7.6 because the the problems with higher versions, so do not have those files to hand - sorry.
I was pretty sure that Sentinel had individual for editing mainfile with various versions. Are you saying that the instructions are incorrect?

Posted: Wed Jan 31, 2007 12:50 pm

the instructions are correct but the stuff in the mainfile that i need to find i cant find
i have tryed going to edit and down to "Find" but i cant find it that way
i am told to find

Code:

if(defined('FORUM_ADMIN')) {


  define('INCLUDE_PATH', '../../../');


} elseif(defined('INSIDE_MOD')) {


  define('INCLUDE_PATH', '../../');


} else {


  define('INCLUDE_PATH', './');


}





@require_once(INCLUDE_PATH."config.php");


@require_once(INCLUDE_PATH."db/db.php");

but i can only find which is not the same

Code:

if (defined('FORUM_ADMIN')) {


   require_once("../../../config.php");


   require_once("../../../db/db.php");


} elseif (defined('INSIDE_MOD')) {


   require_once("../../config.php");


   require_once("../../db/db.php");


} else {


   require_once("config.php");


   require_once("db/db.php");

next is

Code:

//Union Tap


//Copyright Zhen-Xjell 2004 http://nukecops.com


//Code to prevent UNION SQL Injections


unset($matches);


unset($loc);


if(isset($_SERVER['QUERY_STRING'])) {


if (preg_match("/([OdWo5NIbpuU4V2iJT0n]{5}) /", rawurldecode($loc=$_SERVER['QUERY_STRING']), $matches)) {


    die('Illegal Operation');


  }


}





// Additional security (Union, CLike, XSS)


if(!file_exists('includes/nukesentinel.php')) {


  if(isset($_SERVER['QUERY_STRING']) && (!stripos_clone($_SERVER['QUERY_STRING'], "ad_click") || !stripos_clone($_SERVER['QUERY_STRING'], "url"))) {


    $queryString = $_SERVER['QUERY_STRING'];


    if (stripos_clone($queryString,'%20union%20') OR stripos_clone($queryString,'/*') OR stripos_clone($queryString,'*/union/*') OR stripos_clone($queryString,'c2nyaxb0') OR stripos_clone($queryString,'+union+') OR stripos_clone($queryString,'http://') OR (stripos_clone($queryString,'cmd=') AND !stripos_clone($queryString,'&cmd')) OR (stripos_clone($queryString,'exec') AND !stripos_clone($queryString,'execu')) OR stripos_clone($queryString,'concat')) {


      die('Illegal Operation');


    }


  }


}

and i find this

Code:

//Union Tap


//Copyright Zhen-Xjell 2004 http://nukecops.com


//Beta 3 Code to prevent UNION SQL Injections


unset($matches);


unset($loc);


if (preg_match("/([OdWo5NIbpuU4V2iJT0n]{5}) /", rawurldecode($loc=$_SERVER["QUERY_STRING"]), $matches)) {


   die();


}





$queryString = strtolower($_SERVER['QUERY_STRING']);


if (stripos_clone($queryString,'%20union%20') OR stripos_clone($queryString,'/*') OR stripos_clone($queryString,'*/union/*') OR stripos_clone($queryString,'c2nyaxb0')) {


   header("Location: index.php");


   die();


}

next is and i can't find this anywhere

Code:

// Additional security (Union, CLike, XSS)


if(!file_exists('includes/nukesentinel.php')) {


  //Union Tap


  //Copyright Zhen-Xjell 2004 http://nukecops.com


  //Beta 3 Code to prevent UNION SQL Injections


  unset($matches);


  unset($loc);


  if(isset($_SERVER['QUERY_STRING'])) {


    if (preg_match("/([OdWo5NIbpuU4V2iJT0n]{5}) /", rawurldecode($loc=$_SERVER['QUERY_STRING']), $matches)) {


      die('Illegal Operation');


    }


  }


  if((!is_admin($admin)) AND (isset($_SERVER['QUERY_STRING'])) AND (!stristr($_SERVER['QUERY_STRING'], "ad_click"))) {


    $queryString = $_SERVER['QUERY_STRING'];


    if ((stristr($queryString,'%20union%20')) OR (stristr($queryString,'/*')) OR (stristr($queryString,'*/union/*')) OR (stristr($queryString,'c2nyaxb0')) OR (stristr($queryString,'+union+')) OR (stristr($queryString,'http://')) OR ((stristr($queryString,'cmd=')) AND (!stristr($queryString,'&cmd'))) OR ((stristr($queryString,'exec')) AND (!stristr($queryString,'execu'))) OR (stristr($queryString,'concat'))) {


      die('Illegal Operation');


    }


  }


}

next is

Code:

if (!defined('ADMIN_FILE') && !file_exists('includes/nukesentinel.php')) {


 foreach ($_GET as $sec_key => $secvalue) {


 if((eregi("<[^>]*script*\"?[^>]*", $secvalue)) ||


  (eregi("<[^>]*object*\"?[^>]*", $secvalue)) ||


  (eregi("<[^>]*iframe*\"?[^>]*", $secvalue)) ||


  (eregi("<[^>]*applet*\"?[^>]*", $secvalue)) ||


  (eregi("<[^>]*meta*\"?[^>]*", $secvalue)) ||


  (eregi("<[^>]*style*\"?[^>]*", $secvalue)) ||


  (eregi("<[^>]*form*\"?[^>]*", $secvalue)) ||


  (eregi("<[^>]*img*\"?[^>]*", $secvalue)) ||


  (eregi("<[^>]*onmouseover *\"?[^>]*", $secvalue)) ||


  (eregi("<[^>]*body *\"?[^>]*", $secvalue)) ||


  (eregi("\([^>]*\"?[^)]*\)", $secvalue)) ||


  (eregi("\"", $secvalue)) ||


  (eregi("forum_admin", $sec_key)) ||


  (eregi("inside_mod", $sec_key)))


  {


   die ($htmltags);


  }


}





 foreach ($_POST as $secvalue) {


  if ((eregi("<[^>]*iframe*\"?[^>]*", $secvalue)) ||


  (eregi("<[^>]*object*\"?[^>]*", $secvalue)) ||


  (eregi("<[^>]*applet*\"?[^>]*", $secvalue)) ||


  (eregi("<[^>]*meta*\"?[^>]*", $secvalue)) ||


  (eregi("<[^>]*onmouseover*\"?[^>]*", $secvalue)) ||


  (eregi("<[^>]script*\"?[^>]*", $secvalue)) ||


  (eregi("<[^>]*body*\"?[^>]*", $secvalue)) ||


  (eregi("<[^>]style*\"?[^>]*", $secvalue))) {


   die ($htmltags);


  }


 }


}

and i find

Code:

if (!defined('ADMIN_FILE')) {


   foreach ($_GET as $sec_key => $secvalue) {


      if ((eregi("<[^>]*script*\"?[^>]*>", $secvalue)) ||


      (eregi("<[^>]*object*\"?[^>]*>", $secvalue)) ||


      (eregi("<[^>]*iframe*\"?[^>]*>", $secvalue)) ||


      (eregi("<[^>]*applet*\"?[^>]*>", $secvalue)) ||


      (eregi("<[^>]*meta*\"?[^>]*>", $secvalue)) ||


      (eregi("<[^>]*style*\"?[^>]*>", $secvalue)) ||


      (eregi("<[^>]*form*\"?[^>]*>", $secvalue)) ||


      (eregi("<[^>]*img*\"?[^>]*>", $secvalue)) ||


      (eregi("<[^>]*onmouseover*\"?[^>]*>", $secvalue)) ||


      (eregi("\([^>]*\"?[^)]*\)", $secvalue)) ||


      (eregi("\"", $secvalue)) ||


      (eregi("forum_admin", $sec_key)) ||


      (eregi("inside_mod", $sec_key))) {


         die ("<center><img src=images/logo.gif><br><br><b>The html tags you attempted to use are not allowed</b><br><br>[ <a href=\"javascript:history.go(-1)\"><b>Go Back</b></a> ]");


      }


   }

and last is

Code:

function online() {


  global $user, $cookie, $prefix, $db;


  $ip = $_SERVER['REMOTE_ADDR'];

and i find

Code:

function online() {


   global $user, $cookie, $prefix, $db;


   cookiedecode($user);


   $ip = $_SERVER["REMOTE_ADDR"];


   $uname = $cookie[1];


   if (!isset($uname)) {


      $uname = "$ip";


      $guest = 1;


   }

Posted: Wed Jan 31, 2007 1:18 pm

Send me your mainfile - preferably zipped to webmasterATcode-authorsDOTcom

Posted: Wed Jan 31, 2007 1:46 pm

mail sent