Secure downloads on RN 2.10.01

New Member Joined: Oct 20, 2007 Posts: 8

I am currently looking for a way to prevent people from being able to access certian download files and it seems the index.php has been changed, now I know you guys would know best so I figured I would ask and see if their is any way to incorperate something like Fetch-It or GR Downloads easily without having to have a bunch of other modules or blocks that are not needed. I am also wanting to prevent people from being able to view or change any of the files or sub directories on my site and if possible I'd like a little help with that too since my site has been defaced 3 times within the last 2 days and I have tried everything I can think of...Any suggestions?

Posted: Mon Oct 22, 2007 5:47 am

Montego has taken over the NSN Group Downloads module and this should work no problem with the latest RN. Also there is a hack on his site to incorporate the new captcha.

Can you confirm what version of Nuke you are currently using and any additional modules you have? It would be useful to know how they defaced your site, especially if you are using RN.

registered · Posted: Mon Oct 22, 2007 6:18 am

BTW, the latest for NSN GR Downloads is still 1.0.3 from http://www.nukescripts.com. I have had no time to work on it except what jakec has mentioned. However, once RavenNuke 2.20.00 is released, it is next on my list.

Posted: Mon Oct 22, 2007 8:44 am

Thanks guys, I will look into NSN Group Downloads and Captcha today while I am not doing anything and see what I can do about that paticular issue, as far as the version of Nuke and what modules I am running currently I have RN Ver 2.10.01 and the only module I have installed so far is the Nuke Treasury v1.0. One thing I should add in as well is I am currently running a gaming site with a large amount of files that are beta releases for upcoming mods that people are trying to gain access too which is why I need the secure downloads as well as having the ability to select which user groups have access to those downloads.

Posted: Tue Oct 23, 2007 12:11 am

Ok I have been looking into adding the NSN GR Downloads into RN 2.10.01 and I have run into a problem here, it seems that some of the scripting in the index.php has been modified to fix previous bugs that were in Nuke 7.6...now the major question I have is how can I implement NSN GR Downloads into RN 2.10.01 without messing anything up that Paladin has modified and at the same time I would like to prevent opening any security holes/issues that would allow a hacker to access the site...dont get me wrong when I say this but I would trust in the Raven team alot more than I would myself when it comes to this stuff, its not that I am dumb when it comes to coding I just know that you guys have taken Nuke a long way and cleared up alot of issues and I dont want to reopen any of them...lol...I have had my site hacked 2 times and defaced 7 or 8 times now and since installing RN 2.10.01 I have had no known issues but at the same time I dont want to mess things up and start having issues again...lol...Thanks for all your help guys...it means alot to me, my team and our fans.

Oh and one last thing...Raven and the rest of the team here kick a$s!!!

Posted: Tue Oct 23, 2007 6:35 am

ALL input comes with standard "use at your OWN risk" disclaimers... Laughing

Now, with that said, I have been using the base NSN GR Downloads (version 1.0.3) with RN for years. Never been hacked. Have I looked through the code carefully for holes? No. Just telling you what my experience has been.

Not sure what you mean by the "Paladin" remark. NSN GR Downloads is a complete replacement for the Download module. It does have an installer which will copy the download data from the old BASE NUKE downloads tables into the NSN GR Downloads ones.

Personally, if you are going to install, I would delete the modules/Downloads files and then upload the new as that will ensure no lingering old PHP-Nuke files.

I don't personally like how this was done, but, that is just me. I would have rather it been a completely separate module. But, at the same time, I can also see why it was done the way it was.

Enjoy!

Posted: Tue Oct 23, 2007 6:44 am

lol...my bad...god I feel like a nOOb...I had the fetchit install.txt file uploaded and wasnt paying attention to the top of it when I was going through the install process...omg...yup I feel like a nOOb...just finished installing NSN GR Downloads...lol...Thanks Montego

Regular Joined: Jul 27, 2007 Posts: 77

I downloaded the NSN GR Download module but I can't run the install. Am I missing anything?

If I try to run the nsngd.php file it just redirects to my root index.php. If I go into the nsngd installer folder and run install.php I get the following error

Call to undefined function title() in mypath/nsngd_installer/install.php on line 12

I am running RN 2.10.01

Paul

Posted: Wed Oct 24, 2007 7:19 am

Paul, this sounds familiar. I think there is a potential conflict with nukeFEED. Unfortunately I have to "hit and run" the forums this morning as I need to get to work. I would suggest PM'ing kguske pointing him to this post. He made a change for the upcoming RN release for this I think.

Client Joined: Jan 29, 2004 Posts: 624

I'm running RN 2.10.01 and I put on NSN Downloads too, now how do I get the security code to show? I'd prefer the captcha in RN but the NSN Downloads security code will do if it would show. I have d/ls set for registered users only but I want even registered users to type a security code just to be mean lol

Posted: Thu Nov 01, 2007 11:01 am

Montego posted a hack to get the RN captcha to work on NSN Downloads. Here's the link: http://www.montegoscripts.com/ftopict-210.html

Posted: Thu Nov 01, 2007 1:32 pm

Thanks jakec that should do it. Smile

Posted: Thu Nov 01, 2007 2:17 pm

Doesn't seem to work. I have 'Use security code' set to 'yes' in Downloads Configuration, I have a code_bg.png in /images but all I see is a button says Go get it.

Edit: works fine now, I logged out as admin and now I get a captcha security code. Thanks Montego

Posted: Thu Nov 01, 2007 4:54 pm

Yup... didn't want admins to have to worry about these extra captchas. Glad you are "working".