Sentinel is doing its job and then some

Regular Joined: Jan 27, 2008 Posts: 99

I have...... Well Sentinel has caught and blocked a few hack attempts on my site and I love it.

I do have one problem though. I am running HTTP Video stream modual and one of the features of this modual is members can submit videos to the site then the admin gets the request info in the admin panel and approves or denies the video.

When my members submit a video Sentinel does not allow the submition and I recieve this

Quote:

Date & Time: 2008-02-05 17:52:31 EST GMT -0500
Blocked IP: 205.188.116.130
User ID: miguel (6)
Reason: Abuse-Script
--------------------
User Agent: Mozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; SV1; iebar; acc=vonner)
Query String: therectorboys.com/modules.php?name=Video_Stream&page=vidadd
Get String: therectorboys.com/modules.php?name=Video_Stream&page=vidadd
Post String: therectorboys.com/modules.php?title=king george speedway&category=8&description=the final Virginia pavement Divisional in jr stock&url=<object width=\"425\" height=\"355\"><param name=\"movie\" value=\"http://www.youtube.com/v/wlsDA2-Hy_k&rel=1\"></param><param name=\"wmode\" value=\"transparent\"></param><embed src=\"http://www.youtube.com/v/wlsDA2-Hy_k&rel=1\" type=\"application/x-shockwave-flash\" wmode=\"transparent\" width=\"425\" height=\"355\"></embed></object>&picurl=&thumbimg=&width=425&height=355&plugin=5&ADDIT=Add Video
Forwarded For: none
Client IP: none
Remote Address: 205.188.116.130
Remote Port: 37197
Request Method: POST
--------------------
Who-Is for IP

How can I fix this?

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

Try this. Edit includes/nukesentinel.php.

FIND:
if (stristr($qs,'name=Forums')!==false && stristr($qs,'file=posting')!==false && (strtolower($qsName[0])=="private_messages" || strtolower($qsName[0])=="forums")) {

CHANGE TO:
if (stristr($qs,'name=Video_Stream')!==false || stristr($qs,'name=Forums')!==false && stristr($qs,'file=posting')!==false && (strtolower($qsName[0])=="private_messages" || strtolower($qsName[0])=="forums")) {

Should this work, there are security implications which I will discuss after you reply back.

Posted: Sun Apr 27, 2008 12:27 pm

ok Raven it took me a while to get back to my site (real world job gave no time)

I just made the code modifycation and going to have some friends submit a video today

Now how bad have I just opened my site to hacking lol