raven 2.02.02 and sentinel blockproblem with module

Hangin' Around Joined: Nov 14, 2006 Posts: 32

hello,

my users sometimes get an abuse in the
module site-messenger.

in the email i get is this:

Date & Time: 2006-11-22 20:28:46 CET GMT +0100
Blocked IP: 82.83.181.99
User ID: Mel (37)
Reason: Abuse-Script
--------------------
User Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.1) Gecko/20061010 Firefox/2.0
Query String: www.diorama-fansite.de/modules.php?subject=Re:+huhu&msg_text=text+the+user+send+is+here&name=Site_Messenger&file=buddy&to_userid=108&op=send&to=spindizzy&x=54&y=11
Get String: www.diorama-fansite.de/modules.php?subject=Re: huhu&msg_text=text the user send is here edited for posting here&name=Site_Messenger&file=buddy&to_userid=108&op=send&to=spindizzy&x=54&y=11
Post String: www.diorama-fansite.de/modules.php
Forwarded For: none
Client IP: none
Remote Address: 82.83.181.99
Remote Port: 1580
Request Method: GET

i updatet ip2country this day, but always the message.

sorry, if i should post in the wrong forum.

Posted: Wed Nov 22, 2006 2:59 pm

You'd have to post the text the user is trying to send or else read Nukesentinel.php in the /includes directory for yourself. There is a list of values that sentinel is screening for in there ... look for the Script blocker section around line 297 of NS 2.5.03.

Posted: Wed Nov 22, 2006 3:14 pm

it is the same as in standardinstallation from ravennuke 2.4.2pl5.

Date & Time: 2006-11-22 20:28:46 CET GMT +0100
Blocked IP: 82.83.181.99
User ID: Mel (37)
Reason: Abuse-Script
--------------------
User Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.1) Gecko/20061010 Firefox/2.0
Query String: www.diorama-fansite.de/modules.php?subject=Re:+huhu&msg_text=nun,+nachdem+ich+einmal+bei+einer+fris%F6rkette+verschnitte+wurde+mit+kurzen+haaren,+gehe+ich+2+orte+weiter+zu+einem+kleinen+laden.+da+kostet+mich+waschen+schneiden+f%F6nen+zwar+31+euro,+heute+19+(nur+schneiden+-+ganz+sch%F6n+teuer),+aber+ich+bin+eben+zufrieden.+daf%FCr+z%F6gere+ich's+auch+immer+ganz+sch%F6n+raus.+ach+eine+woche+geht+noch+*g*+aber+meine+farbe+ist+seit+utrecht+echt+enorm+rausgewachsen.+daran+kann+mans+am+besten+sehen,+wie+die+loden+gewachsen+sind+ Wink

+seid+ihr+im+msn?&name=Site_Messenger&file=buddy&to_userid=108&op=send&to=spindizzy&x=54&y=11
Get String: www.diorama-fansite.de/modules.php?subject=Re: huhu&msg_text=nun, nachdem ich einmal bei einer frisörkette verschnitte wurde mit kurzen haaren, gehe ich 2 orte weiter zu einem kleinen laden. da kostet mich waschen schneiden fönen zwar 31 euro, heute 19 (nur schneiden - ganz schön teuer), aber ich bin eben zufrieden. dafür zögere ich\'s auch immer ganz schön raus. ach eine woche geht noch *g* aber meine farbe ist seit utrecht echt enorm rausgewachsen. daran kann mans am besten sehen, wie die loden gewachsen sind Wink

seid ihr im msn?&name=Site_Messenger&file=buddy&to_userid=108&op=send&to=spindizzy&x=54&y=11
Post String: www.diorama-fansite.de/modules.php
Forwarded For: none
Client IP: none
Remote Address: 82.83.181.99
Remote Port: 1580
Request Method: GET

this is the whole text, but user not always blocked.

so in the code i think there is on another line or?

Sells PC To Pay For Divorce Joined: Posts: 5661

Hi,

unfortunately the messenger will keep on giving problems....
not allways but its a pain in the butt.
it allways did for me....
it will be some job to determine what triggers the security and to let it work normaly.

Posted: Thu Nov 23, 2006 10:07 am

A workaround might be to code it bit differently, If you can code in php, I would change how the form was processed, Form method=POST might help, and then change the method in which it grabbed the info. Instead of $_GET, use $_POST, If this goes a bit over your head, Then I would say, hold off till after the holidays, send it to me, and I will work on it, but I will not have any free time till after the holidays.

Posted: Thu Nov 23, 2006 11:01 am

thx darklord,
i will try, and when i can not or i am to stupid for coding i send it to you Smile

when are your holidays? Wink

Posted: Thu Nov 23, 2006 1:07 pm

After January 2nd of the new year, and stupid is not the word I would use to describe you if you cant do this, PHP in itself is complicated and not only deserves but required hours upon hours of learning, most Get years of schooling, and others spend weeks,months and years Just getting familiar with it without any training. Even now, the most experienced people are learning.

Posted: Sun Nov 26, 2006 7:52 am

ok thx

hmm i think thats not all to edit get into post or? Smile