Ravens PHP Scripts: Forums
 

 

View next topic
View previous topic
This forum is locked: you cannot post, reply to, or edit topics.   This topic is locked: you cannot edit posts or make replies.    Ravens PHP Scripts And Web Hosting Forum Index -> RN v2.10.01 - All Issues
Author Message
spurtus
Regular
Regular



Joined: May 13, 2006
Posts: 89

PostPosted: Fri Dec 07, 2007 6:23 pm Reply with quote

Can someone help me fix this problem? Recently, for now good reason (maybe I got hacked, as other bad stuff was related), but I can no longer get to Forum admin, via the Sentinel admin panel. I get no error whatever, just a blank screen (altho I do see the frame strip that divides the left-hand menu navigation from the content on the right).

Help! I have an urgent need to try to block out a hacker, I think.

Also, how can I control a direct connection to the forum admin page (I assume the hacker did not come through sentinel, or worse things would have happened to my site).

I restored my DB and then today, all my users were deleted from Nuke_user table. How can they get access to my forum admin when I cannot?
 
View user's profile Send private message Yahoo Messenger
Raven
Site Admin/Owner



Joined: Aug 27, 2002
Posts: 17088

PostPosted: Sat Dec 08, 2007 1:02 am Reply with quote

There is no access to Forum Admin access from Nuke Sentinel.
 
View user's profile Send private message
spurtus







PostPosted: Sat Dec 08, 2007 8:47 am Reply with quote

I mispoke (apologies). What I meant was that I am running 2.10 version of RN, and, via the Site Administration panel, I can no longer get to my Forum admin page (PHPBB). No error, just a blank (split/framed) screen. When clicking on the FORUM link from Site Admin, what is the security mechanism there? Is there a "switch" in the DB that someone could set to lock out access to phpbb forum admin?

Thanks,
Spurt
 
Raven







PostPosted: Sat Dec 08, 2007 8:58 am Reply with quote

There is no connection between NukeSentinel(tm) and Forums so that should not be a problem. Have you checked your server error log to see if there is anything in it to help diagnose this? Also, do you have display_errors=E_ALL; set in your config file?
 
spurtus







PostPosted: Sat Dec 08, 2007 9:23 am Reply with quote

I understand about the relationship between Nuke Sentinel and forums (or, rather the lack thereof). Maybe I should be saying the Nuke Admin Panel. I hope I am stating the correctly. But even at that, I presume the only relationship is pointing at the forum module. But even then, I guess, I am wondering what the security process is (why couldn't anyone just connect directly to the forum admin, and get in (how is it passworded?).

But, asside from that, here is the display error line I have set:

$display_errors = TRUE; //This should only be used (set to TRUE) when testing locally and not in a production environment

It does not note the E_All as an option. Is that permissible, in addition to TRUE or FALSE?

And, sorry, a really noob question: Where are there logs? I will try to find out from my ISP, I guess. Thanks for any help.

Spurt
 
Raven







PostPosted: Sat Dec 08, 2007 9:39 am Reply with quote

My mistake. the E_ALL is for the setting $error_reporting = E_ALL; found in rnconfig.php.

The error log should be accessible from your hosting control panel.

The security process checks to see if you have forum admin privileges.
 
spurtus







PostPosted: Sat Dec 08, 2007 9:53 am Reply with quote

The line was set to:
E_ALL^E_NOTICE

I set it to simply: E_ALL

I then went back thru and tried access the forum admin via the admin panel, but no luck. I will check with my ISP and see if they have any logging going that I can see. They use PLESK, and nothing is jumping out at me as being any sort of log.

I wonder if there is a decent PHPBB site that could help answer this. What stops anyone from simply inserting my web site into a url that goes to the modules/admin.php script and running it. There must be some sort of security checking (and maybe lack of this has caused my troubles...not sure).

Thanks...I will keep digging...I appreciate your responses, Raven...

Spurt
 
Raven







PostPosted: Sat Dec 08, 2007 10:02 am Reply with quote

Quote:
The line was set to: E_ALL^E_NOTICE

That's okay too.

The blank page often means a MySQL error but there can be many causes.
 
Gremmie
Former Moderator in Good Standing



Joined: Apr 06, 2006
Posts: 2415
Location: Iowa, USA

PostPosted: Sat Dec 08, 2007 11:58 am Reply with quote

My host uses Plesk. Check for a Log Manager icon. Go generate the blank page then check your error log.

_________________
Only registered users can see links on this board! Get registered or login! - An Event Calendar for PHP-Nuke
Only registered users can see links on this board! Get registered or login! - A Google Maps Nuke Module 
View user's profile Send private message
Display posts from previous:       
This forum is locked: you cannot post, reply to, or edit topics.   This topic is locked: you cannot edit posts or make replies.    Ravens PHP Scripts And Web Hosting Forum Index -> RN v2.10.01 - All Issues

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001-2007 phpBB Group
All times are GMT - 6 Hours
 
Forums ©