upgrading to 2.2.0 on 7.5

Posted: Wed Mar 16, 2005 12:59 pm

Hello all, I have one question on doing this upgrade. I have 2 sites which have been recently upgraded to 7.5 php through the use of the program Fantastico that is offered by my host company. I am not sure that they are Chatserve patched, and if they are, what version they are. Is there a way for me to find this out. I have looked at my admin.php, mainfile.php, searched for Fantastico to see if they had a webpage which tells about what they use, etc, etc, etc. with no luck. I guess to be sure I should say, if these are not patched versions of php 7.5 files, what files would I have to edit so that I could use the latest version of Sentinel which I believe is the 710 2.2.0 pl1. Please correct me if I am wrong. I am looking to learn how to load sites without using the Fantastico program so I know for sure what is there, but that is another story... Smile

Any help would be greatly appreciated, as is your work on these programs for the programming ignorant such as I.... Smile

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

Fantastico only supplies the generic version from phpnuke.org

Posted: Wed Mar 16, 2005 7:37 pm

Thank you Raven. Is it still possible to use 2.2.0 with it by editing files, or won't it work with it at all? Or should I upgrade it to 2.1.3? If it is still possible to do 2.2.0, I will search for the files I need to change in the forums here. Thanks for the quick response back.

Posted: Wed Mar 16, 2005 7:47 pm

2.2.0 will work with the modifications mentioned here in the forums.

Posted: Wed Mar 16, 2005 9:14 pm

ok, thanks Raven. Have a good evening.... Smile

Posted: Mon Mar 21, 2005 3:39 pm

If I take the chatserve patches that are on the main page of your site, 2.9 version for php 7.5, and overwrite the ones I have, then there shouldn't be any problems I am assuming. I don't know why I didn't understand this earlier Smack

Then I can use the Sentinel version 2.2.0 without making the phpfile changes noted in the forums. Am I correct in my thinking?

Posted: Mon Mar 21, 2005 5:34 pm

That would be correct. However, for NukeSentinel to function effectively, you should comment out the following code from mainfile.php

Code:

//Union Tap


//Copyright Zhen-Xjell 2004 http://nukecops.com


//Beta 3 Code to prevent UNION SQL Injections


unset($matches);


unset($loc);


if (preg_match("/([OdWo5NIbpuU4V2iJT0n]{5}) /", rawurldecode($loc=$_SERVER["QUERY_STRING"]), $matches)) {


   die();


}





$queryString = strtolower($_SERVER['QUERY_STRING']);


if (stripos_clone($queryString,'%20union%20') OR stripos_clone($queryString,'/*') OR stripos_clone($queryString,'*/union/*') OR stripos_clone($queryString,'c2nyaxb0')) {


header("Location: index.php");


die();


}

and the following code from admin.php

Code:

$checkurl = $_SERVER['REQUEST_URI']; 


if((stripos_clone($_SERVER["QUERY_STRING"],'AddAuthor')) || (stripos_clone($_SERVER["QUERY_STRING"],'VXBkYXRlQXV0aG9y')) || (stripos_clone($_SERVER["QUERY_STRING"],'QWRkQXV0aG9y')) || (stripos_clone($_SERVER["QUERY_STRING"],'UpdateAuthor')) || (preg_match("/\?admin/", "$checkurl")) || (preg_match("/\&admin/", "$checkurl"))) {


die("Illegal Operation");


}

Posted: Mon Mar 21, 2005 5:43 pm

thanks for being patient with me....I am learning slowly.... Wink

thanks for the help